On May 23 at 1:13 PM ET, Gatsby Support reported that customers with older SSL certificates were having issues with SSL certificate validation. Gatsby was serving expired SSL certificates. Customers with a Gatsby Hosting SSL certificate that was generated more than 3 months ago was affected. Gatsby Engineering mitigated the issues by deleting the old SSL certificates.
The issue was resolved with our third-party hosting provider in 6 hours.
Gatsby Cloud Certificates
Gatsby Cloud Hosting
Identified: 1:13 PM ET
Resolved: 6:43 PM ET
Our third-party hosting provider was improperly serving older SSL certs rather than the newer certificates. Before our provider could resolve the issue, Gatsby Engineering mitigated the issue by deleting the old SSL certificates. Our provider updated their system to ensure new SSL certificates were being properly served going forward.
Customer with a site with SSL certificates generated more than 3 months ago were returning SSL certification errors.
The SSL certification issue is now fully resolved due to the hosting provider resolving it on their end.
Gatsby’s Engineering Team successfully mitigated the certificate issue during the incident and installed a process to regenerate certs more easily to safeguard against similar, future incidents.
Root cause was identified as an operator error at our hosting provider. Our hosting provider has confirmed that the issue is resolved. Gatsby Engineering has installed a process as a redundancy to eliminate the potential risk going forward.