Custom domain on Pages — TLS "internal error", cert never issued #2824

FxArbon commented 2026年06月29日 19:06:24 +02:00

Comment

Hi! My Pages site (pages repo under user FxArbon, served on branch pages, working at fxarbon.codeberg.page) has a custom domain felixast.com that won't get a certificate.

DNS: felixast.com → A 217.197.84.141, AAAA 2a0a:4580:103f:c0de::2 (DNS-only, not proxied); www CNAME codeberg.page.
Authorization TXT _git-pages-repository.felixast.com (+ .www) → https://codeberg.org/FxArbon/pages.git.
The domain is recognized — fxarbon.codeberg.page 307-redirects to felixast.com.
But HTTPS to felixast.com fails the TLS handshake with tlsv1 alert internal error — no certificate is ever served. No CAA records, DNSSEC off.
Could you check the cert-issuance error for felixast.com on the pages server? Thanks!

### Comment Hi! My Pages site (pages repo under user FxArbon, served on branch pages, working at fxarbon.codeberg.page) has a custom domain felixast.com that won't get a certificate. DNS: felixast.com → A 217.197.84.141, AAAA 2a0a:4580:103f:c0de::2 (DNS-only, not proxied); www CNAME codeberg.page. Authorization TXT _git-pages-repository.felixast.com (+ .www) → https://codeberg.org/FxArbon/pages.git. The domain is recognized — fxarbon.codeberg.page 307-redirects to felixast.com. But HTTPS to felixast.com fails the TLS handshake with tlsv1 alert internal error — no certificate is ever served. No CAA records, DNSSEC off. Could you check the cert-issuance error for felixast.com on the pages server? Thanks!

nullish commented 2026年06月30日 00:16:35 +02:00

I am experiencing the same issue with my domain, https://sarnart.dev.

All of my webhook deliveries fail with: "Delivery: Post "https://sarnart.dev": remote error: tls: internal error"

Issue #2822 looks to be a related (or identical) problem.

Any next steps we can take to try and resolve this? Thanks for the assist!

I am experiencing the same issue with my domain, https://sarnart.dev. All of my webhook deliveries fail with: "Delivery: Post "https://sarnart.dev": remote error: tls: internal error" Issue #2822 looks to be a related (or identical) problem. Any next steps we can take to try and resolve this? Thanks for the assist!

Gusted commented 2026年06月30日 00:23:28 +02:00

@FxArbon I don't see that you've configured a webhook?

@nullish the first time needs to be done via http:// for custom domains.

@FxArbon I don't see that you've configured a webhook? @nullish the first time needs to be done via `http://` for custom domains.

nullish commented 2026年06月30日 01:06:02 +02:00

Thanks for the tip. Here's what I tried:

• Changed webhook URL to http://sarnart.dev
• Tested delivery
• Error received: clone URL not in allowlist [https://codeberg.org/nullish/repository.git]

I am not entirely sure what the complaint is here, as I do have the needed TXT records for _git-pages-repository.sarnart.dev set to e.g. https://codeberg.org/nullish/repository.git.

Maybe that needs to be http as well? I will try that and test again...nope, that didn't do it: "clone URL not in allowlist [http://codeberg.org/nullish/repository.git]".

@Gusted am I misunderstanding what you're telling me to do, or did I miss a different step somewhere along the way? Thanks again.

Thanks for the tip. Here's what I tried: - Changed webhook URL to http://sarnart.dev - Tested delivery - Error received: clone URL not in allowlist [https://codeberg.org/nullish/repository.git] I am not entirely sure what the complaint is here, as I do have the needed TXT records for _git-pages-repository.sarnart.dev set to e.g. https://codeberg.org/nullish/repository.git. Maybe that needs to be http as well? I will try that and test again...nope, that didn't do it: "clone URL not in allowlist [http://codeberg.org/nullish/repository.git]". @Gusted am I misunderstanding what you're telling me to do, or did I miss a different step somewhere along the way? Thanks again.

Gusted commented 2026年06月30日 01:10:44 +02:00

Try setting the TXT record value to https://codeberg.org/nullish/pages.git

Try setting the TXT record value to `https://codeberg.org/nullish/pages.git`

nullish commented 2026年06月30日 01:29:18 +02:00

@Gusted Thank you for catching my mistake. I'm facepalming pretty hard right now for missing that. I did get a successful HTTP delivery and subsequent HTTPS delivery. Woohoo! 😺

@Gusted Thank you for catching my mistake. I'm facepalming pretty hard right now for missing that. I did get a successful HTTP delivery and subsequent HTTPS delivery. Woohoo! 😺

FxArbon commented 2026年06月30日 08:52:15 +02:00

@Gusted Thank You a lot! Quick fix and straightforward from there. ✌️
I'll close this one.

@nullish Cool that we also could solve yours 💪

@Gusted Thank You a lot! Quick fix and straightforward from there. ✌️ I'll close this one. @nullish Cool that we also could solve yours 💪