Laravel Vapor deployment issue - ssl certificate ownership

I am working with Laravel 7.x and Vapor (the latter for the first time). I have an issue where, on deployment of staging, I get the following error:

An error occurred during deployment.  
Message: AWS: The certificate provided must be owned by the account creating the domain.

I am using the Vapor default network setup of API Gwy 2 and have registered my domain and issued the certificate for ap-southeast-2 via the Vapor ui. I can see the certificate in AWS's Certificate Manager console for that region.

I have deleted and recreated the certificate, both via the Vapor ui & cli and AWS, a number of times, but the error remains.

Any suggestions appreciated.

hallindavid

5 years ago

Level 5

Is Vapor managing your DNS records?

I feel like I ran into this issue once when I was trying to use an AWS certificate for a domain that was being managed by cloudflare.

akins

2 years ago

Level 5

I just ran into this problem with Cloudflare and Vapor. My requests for AWS SSL certificates were failing on validation attempts. You need to make sure Cloudflare has approved amazon.com to issue SSL certs. use command: dig CAA mydomain.com (i.e. on Mac terminal) to see if amazon.com exists

if not add CAA records to DNS: CAA mydomain.com 0 issue amazon.com CAA mydomain.com 0 issuewild amazon.com

use the dig command below to verify you added amazon.com: dig CAA mydomain.com

I hope this helps. It took me forever to find the fix.

Please or to participate in this conversation.