Forums

Sudden SSL error in my web app

As of this morning (CET), my web app at pythonanywhere.com is throwing an SSL error (cert invalid).

I have gone through my code, and there are no insecure links in it (all calls to e.g. Tailwind etc are https).

I have not made any changes to my app recently.

error/server.log for my application show no errors related to SSL.

Please advise.

SSL labs test show no errors/issues.

Which web app exactly? I see only one at the deafult subdomain which is password protected.

It's that one, yes. The issue seems to be related to blacklisting at a specific ISP, possibly due to ip/ip range "bad reputation" (not confirmed by/from ISP, but there have been similar issues in the past with this ISP in my country).

This ISP is by far the largest in my country, which makes the site largely unusable for me and others. How do I approach this? Dealing with this particular ISP has historically been... difficult.

Could you send us a screenshot of the SSL error that you're getting at support@pythonanywhere.com? Include the browser location bar, if you can.

Sent.

Could you double-check the email address that you sent it to? I've just checked our email archives for anything with your username or from the email address associated with your account (including the spam folder, of course) and I didn't spot anything.

Try running openssl s_client -connect yourdomain.com:443 to check the cert details. Also, see if forcing an HTTPS redirect in your web framework helps.