You should use a reverse proxy for SSL termination, you'll find a deployment example with nginx proxyserver in the documentation: https://www.odoo.com/documentation/11.0/setup/deploy.html#builtin-server
I prefer using the caddy server (https://caddyserver.com/), because it is very easy to setup and configure and offers automatic SSL using free Let's Encrypt-certificates.
This is an example of the caddyfile (vhost definition) for my website (it is caddyserver version 0.95, newer versions are slightly different), but you see how easy it is compared to the nginx vhost definition:
twanda.com,
www.twanda.ch,
www.twanda.com,
www.twanda.twanda.ch,
twanda.twanda.ch {
cors
proxy / http://xxx.xxx.xxx.x:8069 {
transparent
header_upstream X-Forwarded-Host {host}
}
log /var/log/caddy/twanda.access.log
errors /var/log/caddy/twanda.error.log
timeouts 720s
}
I got the same error. The detail shows, the SSL is issued by odoo.com, not my own domain.
Can anyone help me solve this?