Pages API keeps https_certificate.state at authorization_created after the certificate is issued and served (sigetar.ru) #209963
Unanswered
Sagargupta16
asked this question in
Other Feature Feedback, Questions, & Ideas
Replies: 1 comment
|
💬 Your Product Feedback Has Been Submitted 🎉 Thank you for taking the time to share your insights with us! Your feedback is invaluable as we build a better GitHub experience for all our users. Here's what you can expect moving forward ⏩
Where to look to see what's shipping 👀
What you can do in the meantime 💻
As a member of the GitHub community, your participation is essential. While we can't promise that every suggestion will be implemented, we want to emphasize that your feedback is instrumental in guiding our decisions and priorities. Thank you once again for your contribution to making GitHub even better! We're grateful for your ongoing support and collaboration in shaping the future of our platform. ⭐ |
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
🏷️ Discussion Type
Bug
💬 Feature/Topic Area
Pages
Body
Repository observed: https://githubfast.kdns.fr/SigetarWorld/eve-pi-planner (public, custom domain
sigetar.ru, reported stuck in #209602). I am not the owner; everything below is from an unauthenticatedGETand a TLS handshake.What I expected
Once Pages has issued the certificate for a custom domain and the edge serves it,
GET /repos/{owner}/{repo}/pagesshould reporthttps_certificate.state: approvedwith anexpires_at, the way it does for other sites (k4hvecii/k4hvecii.github.ioshowsapproved,expires_at 2026-12-31).What happens
The edge serves a real certificate, but the API still reports the first ACME step. Checked 2026-10-10 01:45 UTC and again 03:10 UTC, same result both times:
So for at least 24 hours the API has said "Authorization created" for a certificate that was issued and deployed on 2026-10-09 02:37 UTC.
Why it matters
This field is the only issuance progress users can read;
pages/healthhas no certificate status. Owners in #209602, #209794 and #209943 are deciding whether to remove and re-add their domain based on it, and a re-add restarts issuance. A staleauthorization_createdmakes people restart something that already finished. If the Enforce HTTPS gate reads the same field, the owner also cannot turn HTTPS on: #209602's author got "The certificate has not finished being issued" fromPUT /pageswithhttps_enforced=truewhile the state wasauthorization_created.Ask
Reconcile
https_certificate.statewith actual issuance (or document that the field can lag by a day or more), and confirm whetherhttps_enforcedcan be enabled while the field is stale. Happy to re-check any time; the domain and timestamps above are enough to reproduce from your side.All reactions