Trying to enforce https button grayed out

[greg-aborgata]

🏷️ Discussion Type

Question

💬 Feature/Topic Area

Code Search and Navigation

Body

Hello, I’m setting up GitHub Pages for the custom domain aborgata.com. My DNS is correctly configured:

aborgata.com resolves to GitHub Pages IPs
www.aborgata.com resolves to greg-aborgata.github.io
I’ve also added the repository CNAME file with:

aborgata.com

However, GitHub Pages still reports:

“Unavailable for your site because your domain is not properly configured to support HTTPS (aborgata.com)”

I’ve waited more than 24 hours and the issue persists. The site is configured in GitHub Pages and the DNS appears correct, so this appears to be on the GitHub side.

[Flpvoigt]

The repository CNAME file only declares the custom hostname; it does not issue the certificate. Please verify the authoritative DNS for both names: @ should have exactly the four Pages A records (185.199.108.153, .109, .110 and .111), with no extra A/AAAA/ALIAS/ANAME records, and www should be a single CNAME directly to greg-aborgata.github.io. Also check for a CAA record that could block the certificate authority, and query the authoritative nameservers rather than only a recursive resolver. If DNS is consistent and the Pages domain check remains successful but HTTPS is still unavailable after propagation, the certificate job is likely stuck on GitHub’s side; avoid repeatedly removing/re-adding the domain and include the DNS check timestamp when contacting GitHub Support.

[hippi345]

Your apex domain has an extra A record. Querying aborgata.com right now returns five A records:

185.199.108.153 185.199.109.153 185.199.110.153 185.199.111.153 208.91.197.27 <- not GitHub

208.91.197.27 belongs to Network Solutions (your nameservers are ns5/ns6.worldnic.com), so it's the registrar's default parking/forwarding record. With it present, some lookups (including the certificate check) hit Network Solutions instead of GitHub, so the HTTPS certificate can't be issued and "Enforce HTTPS" stays grayed out. www is fine (CNAME to greg-aborgata.github.io).

Fix:

In Network Solutions DNS, delete the @ A record pointing to 208.91.197.27 (and turn off any "web forwarding"/parking for the domain, which re-creates it). Keep only the four 185.199.10x.153 records.

Check it's gone: dig +short aborgata.com A should return only the four GitHub IPs.

In the repo → Settings → Pages, remove the custom domain, save, then add aborgata.com again to re-trigger the certificate. It can take up to an hour before "Enforce HTTPS" becomes available.

Docs: "If your DNS provider automatically sets a default record, remove it before continuing." https://docs.github.com/en/pages/configuring-a-custom-domain-for-your-github-pages-site/managing-a-custom-domain-for-your-github-pages-site