Automatic scans failing due to “SSL certificate is invalid”?

Resolved durdygirdy
(@durdygirdy)

1 year, 3 months ago
Hi all,

For the past couple of weeks, my daily automatic scans for one of my sites have resulted in failure. The scans worked fine until I had to temporarily deactivate Solid Security to debug a separate issue. But after reactivating it, I began to receive emails notifying me that “Scheduled site scan resulted in an error”. The reasons in the email are below:
- An error occurred while running the scheduled site scan on durdygirdy.net:
- Error Message: Unable to determine if the scan target is allowed: Target site returned invalid response. Your site’s SSL certificate is invalid.
- Error Code: site_verification_failed.connection_error
My SSL certificate is from Cloudflare. But I have confirmed repeatedly that the SSL is active and valid. I’ve checked on SSLhopper, Geocerts, SSLabs, and Digitcert and everything seems to check out (although on WhyNoPadlock I am getting a “The SSL certificate tests failed. Please be sure that you can connect to your site over SSL and try again” error.) Regardless, the automatic scans were working just fine before I temporarily deactivated Solid Security.

Can you please advise?

Thank you!
Norris

The page I need help with: [log in to see the link]

Viewing 4 replies - 1 through 4 (of 4 total)

judypage12
(@judypage12)

1 year, 3 months ago

Hi Norris,

Since your SSL certificate is valid and Cloudflare is handling it, the issue likely comes from how Solid Security verifies the SSL connection. This may have changed after reactivation.

First, check if Cloudflare’s SSL mode is set to Full (Strict) instead of Flexible. If it’s not, the verification process might fail. Also, WhyNoPadlock’s error suggests there could be mixed content issues, so make sure all resources on your site are loading over HTTPS.

Try purging Cloudflare’s cache and temporarily disabling the proxy (setting DNS to DNS only) to see if the scan runs properly. Reconnecting Solid Security or manually triggering the scan might also help.

If the issue persists, there could be a conflict with another security plugin or firewall blocking the scan. Solid Security may also struggle with Cloudflare’s proxy setup, so checking their support documentation could be useful.

Hope this helps!

Thread Starter durdygirdy
(@durdygirdy)

1 year, 3 months ago

Hi @judypage12!

Thank you for your response! I have verified that my Cloudflare has already been set to Full (Strict).

I deactivated Solid Security, switched and left the main the root A record in the DNS to “DNS only”, cleared the site, server, Cloudflare, and browser cache, reactivated Solid Security, and did a manual scan. However, I still received the failed automatic scan email notifications with the same error messages.

Also, while the manual scans seemed like they were a success via that page’s interface, looking at the logs it appears that the manual scan encountered an error, with the same error messages from the emails.

And, looking at the WhyNoPadlock results it says that there is no mixed content, so maybe that might not be what is causing this?

Thank you,

Norris

Plugin Support chandelierrr
(@shanedelierrr)

1 year, 2 months ago

Hi @durdygirdy, we appreciate the update!

That error indicates that something within your site is preventing Solid Security from scanning your site such as a server configuration or CDN firewall restriction.

The goal is to allow the plugin to “scan” your site, so I’d recommend checking your server and CDN rules to see which restriction is being triggered. The next thing to try would be to whitelisting the scanner’s IP address on your server and CDN firewalls and check if the scan would be successful after.

Let us know what you find.

Plugin Support chandelierrr
(@shanedelierrr)

1 year, 1 month ago

Hello,

We hope the previous information was helpful. Tracking notifications on this forum can become tricky over time, and since we haven’t received a response, I’ll mark this post resolved.

If you still require further assistance, feel free to open a new support topic, and we’d be happy to assist.

Thank you!