Hi, we are experiencing problems with ory, users a...
# ory-networks
stocky-oil-75309
07/27/2025, 9:12 PMHi, we are experiencing problems with ory, users are reporting that they can no longer sign in/up. In the client browser console log of the website we are getting ERR_SSL_VERSION_OR_CIPHER_MISMATCH errors when trying to access our auth.* custom ory domain. When I looked into the ory console I saw that the custom domain CNAME is no longer recognized (under Branding -> custom domain), even though we didn't change the DNS entries and dig and dnschecker.org tell me everything is fine. Any idea what could be the problem? My first attempt is to remove and re-add the custom domain in the ory console, as well as the CNAME in the DNS (we use Vercel DNS nameservers), it didn't solve the problem yet though. As our service requires users to sign up to use it, this is a quite severe outage.
e
early-magician-18981
07/27/2025, 10:47 PMCan you do a ssl check through something like Qualys and see what the results are?
s
stocky-oil-75309
07/28/2025, 6:36 AMimage.png,image.png
stocky-oil-75309
07/28/2025, 6:37 AMEverything seems fine here: https://dnschecker.org/#CNAME/auth.future.coop
stocky-oil-75309
07/28/2025, 7:24 AMSo now I'm trying to use the *projects.oryapis.com domain directly and i enabled cors using your instruction here https://www.ory.sh/docs/guides/cors but it simply does not work:
> /de/about/login?flow=01738643-1a3e-48ff-b267-86166dbe7c5c:1 Access to XMLHttpRequest at '<https//slug|https//slug>.projects.oryapis.com/self-service/login?flow=01738643-1a3e-48ff-b267-86166dbe7c5c' from origin 'https://maps.future.coop' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.
My config says this
> "cors_public": {
> "enabled": true,
> "origins": [
> "https://maps.future.coop"
> ]
> },
s
steep-lamp-91158
07/28/2025, 8:18 AM
I was just checking and it seems that the certificate for your custom domain could not auto-renew. Let's continue this in the dms.