If a deployment requires a new SSL certificate the rack hangs in the “updating” state until the user specifically goes and approves the new cert via email.
I feel like the somewhere as part of the deployment, or in the CLI when doing Convox apps info, it should inform the user that they actually need to go confirm the cert before the rack will transition from the updating status.
Personally, I completely forgot about this step and I waited for a very long time thinking it was just “doing stuff”. Because there are no errors or instructions and the status is “updating”, as a user I wouldn’t expect I have to go do something manually.