www needed to access to website

[chikeb-aymen]

Describe the bug

The website only works when ‘www’ is added, and many cloud services (like OVH) use links without ‘www’, which means it has to be added manually.

To Reproduce

Tap https://fluentd.org/

Expected behavior

Fluentd should create CNAME record to fix that

Your Environment

- Fluentd version:
- Package version:
- Operating system:
- Kernel version:

Your Configuration

.

Your Error Log

.

Additional context

No response

[ashie]

http://fluentd.org is redirected to https://www.fluentd.org.
https://flunetd.org is SSL error: SSL_ERROR_INTERNAL_ERROR_ALERT.

$ openssl s_client -connect fluentd.org:443 -servername fluentd.org
CONNECTED(00000003)
4037BEE220740000:error:0A000438:SSL routines:ssl3_read_bytes:tlsv1 alert internal error:../ssl/record/rec_layer_s3.c:1599:SSL alert number 80
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 7 bytes and written 313 bytes
Verification: OK
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---

For www.fluentd.org:

$ openssl s_client -connect www.fluentd.org:443 -servername www.fluentd.org
CONNECTED(00000003)
depth=2 OU = GlobalSign Root CA - R3, O = GlobalSign, CN = GlobalSign
verify return:1
depth=1 C = BE, O = GlobalSign nv-sa, CN = GlobalSign Atlas R3 DV TLS CA 2025 Q2
verify return:1
depth=0 CN = *.fluentd.org
verify return:1
---
Certificate chain
 0 s:CN = *.fluentd.org
   i:C = BE, O = GlobalSign nv-sa, CN = GlobalSign Atlas R3 DV TLS CA 2025 Q2
   a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256
   v:NotBefore: Jul  6 00:15:18 2025 GMT; NotAfter: Aug  7 00:15:17 2026 GMT
 1 s:C = BE, O = GlobalSign nv-sa, CN = GlobalSign Atlas R3 DV TLS CA 2025 Q2
   i:OU = GlobalSign Root CA - R3, O = GlobalSign, CN = GlobalSign
   a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256
   v:NotBefore: Jan 22 04:06:27 2025 GMT; NotAfter: Jan 22 00:00:00 2027 GMT
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=CN = *.fluentd.org
issuer=C = BE, O = GlobalSign nv-sa, CN = GlobalSign Atlas R3 DV TLS CA 2025 Q2
---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 3356 bytes and written 381 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_128_GCM_SHA256
Server public key is 2048 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
---
Post-Handshake New Session Ticket arrived:
SSL-Session:
    Protocol  : TLSv1.3
    Cipher    : TLS_AES_128_GCM_SHA256
    Session-ID: 99147A4152BF01CC9F39BAF5E9D3628DFBE311C24671B4EE03EEFCA9732D132B
    Session-ID-ctx: 
    Resumption PSK: F0A5059CFA36C4F8A627242BB51B6E6E80EECBE37CB6002FCDEBDC33EBD51F72
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 86400 (seconds)
    TLS session ticket:
    0000 - 3d bd 38 f8 2e 19 3a 7f-e2 10 0d 64 df ff 86 94   =.8...:....d....
    0010 - 09 e3 f3 da 14 53 7c a9-fa 73 7c ea 71 7d 12 d7   .....S|..s|.q}..
    0020 - ef 6b 60 59 6b 41 c1 78-7c dc 00 7c a6 a0 06 02   .k`YkA.x|..|....
    0030 - b5 cf 9e d5 b1 ab dc 89-f9 67 70 fb 94 5b 06 21   .........gp..[.!
    0040 - e1 ce 14 17 c7 2f fb b3-ba 77 32 c3 5d e5 d2 12   ...../...w2.]...
    0050 - 2f 0c 96 fb b1 b2 09 21-ea 79 82 ec 2b 0f 90 57   /......!.y..+..W
    0060 - 1c 85 ae 21 3b cf 74 0b-2f e4 93 7b 3e c0 29 27   ...!;.t./..{>.)'
    0070 - fe 38 6d 64 d5 78 cc b0-5a 01 8f 68 88 97 66 4c   .8md.x..Z..h..fL
    0080 - 45 1c 86 f7 f4 b8 43 ce-ce 4b 60 13 ea 22 39 10   E.....C..K`.."9.
    0090 - 5e f8 f7 f7 87 23 26 44-6d eb af e0 51 74 2c 24   ^....#&Dm...Qt,$

    Start Time: 1767682462
    Timeout   : 7200 (sec)
    Verify return code: 0 (ok)
    Extended master secret: no
    Max Early Data: 0
---
read R BLOCK

[kenhys]

I've raised this issue to cncf service desk.

[kenhys]

Now https://fluentd.org redirection works as expected.

NOTE: certificate was changed to be published from Let's encrypt (both of fluentd.org and www.fluentd.org)