CODEWITHSUNDEEP
azuressl
Kevin
Kevin

Reputation: 302

SSL Certificate to custom domain in Azure

Attempting to follow the instructions in this guide.

I have an app service app in Azure that has my custom domain associated with it (already verified in the Azure App; I can go to the URL and see my site once I pass through Chrome's "This site isn't protected by SSL" warning), so when the certificate asked me to verify ownership of the domain I chose the default option of App Service Verification. I get the message in the corner of my screen "Create Domain Verification Token: Successfully updated all the apps with the Domain Verification Token". However, on the current screen "Domain Verification" within the certificate, I still see the message "Domain Verification Pending. Verify operations may take 5-10 minutes to take effect" (been at this for probably 45 minutes).

I wait, I retry, I wait, still nothing. No worries, I'll just use manual verification via the DNS configuration (using Google Domains). When I head there, I attempt to create a TXT resource with the value set equal to the Domain Verification Token. I get the error message "Record already in use".

I'm not sure how to see where the record is already in use. Any ideas on how to do this and then unlink it so I can create the TXT in my DNS configuration? Alternatively, if I'm missing a crucial step in the App Service Validation piece and that can be made to work, that would also be grand.

Can add screenshots if those would help. Thanks!

Upvotes: 1

Views: 1231

Answers (2)

Kevin
Kevin

Reputation: 302

Figured it out - I was unaware that the DNS configuration could only support one TXT resource record at a time. I had used a TXT record previously to verify the domain in Azure, so when I was trying to verify ownership of the SSL Certificate via a new TXT record, it wouldn't let me create a new one.

Once I read up on that, I just had to delete the TXT record for domain verification (it's not needed once verification is complete, though the A record needs to stick around). I was then able to create the new TXT record and verify the certificate. Woohoo!

Upvotes: 1

akb
akb

Reputation: 128

Did you also create a A record? You have to create a A record and TXT Record for custom domain validation

Upvotes: 0

Related Questions