Help: ICP Gateway returns Error 400 Unknown Domain

Since yesterday, we found that our website deployed on ICP has stopped working, and the page shows: Error 404 Unknown DomainThe requested domain is not served by this HTTP gateway. Please check that the address is correct.

Following the documentation https://internetcomputer.org/docs/building-apps/frontends/custom-domains/using-custom-domains#step-1-configure-the-dns-record-of-your-domain-which-is-denoted-with-custom_domain we reconfigured the DNS records and verified the DNS resolution:

➜  ~ dig CNAME _acme-challenge.www.icexplorer.io +short
_acme-challenge.www.icexplorer.io.icp2.io.
➜  ~ dig TXT _canister-id.www.icexplorer.io +short
"sitc5-eiaaa-aaaal-qjnna-cai"
➜  ~

After that, we submitted the registration. While waiting, we checked the registration status, and it showed PendingAcmeApproval.

Sometimes, it also showed PendingChallengeResponse and Failed.

➜  ~ curl -sL -X GET https://icp0.io/registrations/9367c************
{"name":"www.icexplorer.io","canister":"sitc5-eiaaa-aaaal-qjnna-cai","state":{"Failed":"order is unable to reach 'Ready' status"}}%```

What could be the cause of this issue, and how can we fix it?

2 Likes

Seems to be the same issue with SSL like that one with the id.ai

here Internet Identity id.ai outage / SSL certificate - #6 by lmuntaner

@lmuntaner Do you have any idea if it is the same ?

Have the same issue for the cyql.io. It was working fine just recently with the set-up from: https://internetcomputer.org/docs/building-apps/frontends/custom-domains/using-custom-domains. Now the domain shows “Your connection is not private”. After attempting to re-register the domain, I get:

{"name":"cyql.io","canister":"n7ib3-4qaaa-aaaai-qagnq-cai","state":{"Failed":"order is unable to reach 'Ready' status"}}

Would love for some fresh eyes from the community & devs on this issue.

Interesting to see this come up — I’ve been experimenting with deploying through ICP Ninja recently, and I’m also hitting a dead end, but in my case, it’s a simple 404 Page Not Found right after deployment.

Could the gateway/domain configuration changes you’re mentioning also affect Ninja-hosted deployments, or is this more specific to custom DNS setups? :thinking:

Just trying to figure out if the two issues could be related before I start digging deeper.

1 Like

I think the issue might be not in the DNS setup, as it was working fine before with the same setup. Can’t say about ICP Ninja, I wonder as well.

Yeah, I was just testing deployments on ICP Ninja and got a 404 too . Wondering if it’s something on their end or just me.

Hi @ICExplorer_io and @tomkoom

The issues you encountered are entirely caused by the custom domains service and we are sorry for that. A certificate issuance task got stuck for several days and finally failed to complete.

We have reached out in a DM to fix the issue.

We are aware of these issues and are looking into it. At the same time, we are also working on a new, more robust version of the custom domains service, which is approaching production release soon. We are very sorry for these troubles happening meanwhile.

1 Like

Hey @ICExplorer_io you had posted the backup link with canister url
But the data is fetched from api.icexplorer.io whcih is not operational, any timeline on when you be able to server this?

I am building some things with caffeine and was using ICE for the data in all my apps, any other alternativves in the mean time?

Hey @bitel911 their own site (from the canister link) is also failing to fetch the api data. Im sure theyre working on it!

1 Like

I know since i Comment on it 2 days ago but they tweeted out a link that was a backup and this also did not work, there was not any other information i could find at leats, that is why I shared it

Yes hope it gets resolved so we can all enjoy their service again, IC explorer my favorite site for data

The domain’s back up now, thanks for all your hard work.

1 Like

cyql.io is still in PendingAcmeApproval state, after it switches to: {"name":"cyql.io","canister":"n7ib3-4qaaa-aaaai-qagnq-cai","state":{"Failed":"order is unable to reach 'Ready' status"}}, and restarts

@nikolay.komarevskiy






hi we are also experiencing the same issue.
Is there a place for us to find the custom domains service statuspage or similar?

much appreciated and thank you for your help :folded_hands:

Hey @brian, can you please let us know what your domain name is. Then, we can look into it.

1 Like

thank you @rbirkner your help is very much appreciated, the domain is:
https://posted.app
(it was functioning alright until quite recently which resulted in me needing to retry the whole custom domain process once more).

For reference our icp subdomain pointing to the same canister (and configured with the same .well-known) continues to work just fine

https://icp.posted.app

Any insights/help is greatly appreciated!

the current pending registration id is:
https://icp0.io/registrations/4e0f93062647094213e2eae6248d3755405ac3dda1ecccdad5604bf65f45c28e

Just an update, after a couple more days (when the prior pending registration expired), I retried once more just now with the exact same steps and now it works.

It does seem that there were indeed some intermittent issues with the registration that seem to have been resolved now.

Not sure if there is a way to nail down what the root cause was but for anyone else in the future that comes across the issue, you may need to retry after a few more days for it to resolve. Cheers :+1:

Had a similar issue recently — the registration was stuck in PendingAcmeApproval for days. What worked for me was simply waiting until the previous pending order expired, then retrying the setup. It went through successfully the second time.

Seems like occasional hiccups happen with the custom domain service, so a short wait + retry can solve it.

I have posted some more insights/details in this thread. Have a look at these replies in particular:

1 Like

I tried reregistration. It’s stuck in PendingAcmeApproval as well. I’m using Cloudfare. I disabled Universal SSL, as recommended (though it had been working all along with that option enabled).

https://oraculumhub.com
2kz4x-mqaaa-aaaan-qm3hq-cai

Infact, when I run curl -sL -X GET \https://icp0.io/registrations/... it alternates between PendingAcmeApproval and "Failed":"order is unable to reach 'Ready' status"