Custom domain SSL provisioning stuck - erp.meatscanner.io (Project: lucky-harmony, #38c0feae)
kms2413
PROOP

2 months ago

Hi Railway Support,

I'm experiencing a persistent SSL certificate provisioning failure for a custom domain

on one of my Railway projects. The domain CNAME is verified as valid, but Railway never

issues an SSL certificate — it has been stuck for over 6 hours.

--- Environment ---

Project: lucky-harmony

Project ID: 38c0feae-7716-4c93-9af7-9199b758a417

Environment: production (750c7a5f-2811-4a15-a85a-419b0d20e4ec)

Service: web (718d3c62-ddf1-48d5-85d3-e0ff3cd2b330)

Custom Domain: erp.meatscanner.io

Domain ID: 6a16a3bc-40cd-408b-a6dc-f5e1adfb09f3

CNAME target: 93ehezzv.up.railway.app (CNAME check = VALID / "Full steam ahead!")

--- Symptoms ---

1. CNAME resolves correctly and Railway's own CNAME check returns VALID.

2. SSL certificate served is still CN=*.up.railway.app (Railway wildcard),

not a domain-specific cert.

3. The ACME HTTP-01 challenge path returns 404:

GET http://erp.meatscanner.io/.well-known/acme-challenge/test

→ {"status":"error","code":404,"message":"Application not found"}

This suggests Railway's edge cannot route HTTP for this domain before

the SSL cert exists (chicken-and-egg deadlock).

4. No new certificate request for erp.meatscanner.io has ever appeared on

crt.sh — Railway has never successfully submitted an ACME challenge

to Let's Encrypt for this domain.

--- What I have tried ---

- Deleted and re-added the custom domain 5 times (domain IDs: 61de247d,

188c7668, dd51b5b6, a0c46bc3, 6a16a3bc)

- The domain was previously registered as a Vercel alias for ~45 days

(Vercel A record: 76.76.21.21). I removed it via `vercel alias rm

erp.meatscanner.io` and updated DNS to Railway CNAME.

- Waited 6+ hours after each attempt.

--- Comparison (working) ---

A different custom domain on a different Railway project works fine:

dashboard.meatscanner.io → project: meatscanner (82ce882b)

SSL provisioned correctly within minutes.

The issue appears specific to the lucky-harmony project. Could you please

investigate why SSL provisioning never initiates for this domain, and

whether the project has a known issue with the ACME provisioning pipeline?

Thank you.

$10 Bounty

1 Replies

Status changed to Awaiting Railway Response Railway about 2 months ago


Railway
BOT

2 months ago

This thread has been marked as public for community involvement, as it does not contain any sensitive or personal information. Any further activity in this thread will be visible to everyone.

Status changed to Open Railway about 2 months ago


andreahlert
PRO

2 months ago

Hello kms2413! Hope you are doing great!

The CNAME for erp.meatscanner.io is pointing to dgv55tlg.up.railway.app, but the current domain configuration expects 93ehezzv.up.railway.app. This mismatch happened after deleting and re-adding the domain multiple times.

Updating the CNAME record to 93ehezzv.up.railway.app should fix the SSL provisioning.

Please let me know if it works.


Welcome!

Sign in to your Railway account to join the conversation.

Loading...