Cloudflare and ssl

[jcdesign]

Tried and link my site to CloudFlare, but there was problems because I have SSL installed on my server. Run with Let's Encrypt with good results. Now that I had to point my name servers to cloudflare I got ssl error and connection error.

Using VPS server and can turn Let's encrypt off or disable It.
How does cloudfare shared ssl working? Do I get get https address there too? And what level should I choose, free, pro? Enterprise is too expensive for my needs.

[ASTRAPI]

Hi

Just select from Crypto menu on Cloudflare the FULL option and it will work with your existing Let's encrypt certificate

If you want to remove/disable the Let's encrypt certificate then use Flexible there to get it work

One image thousand words

 

 

[PPlanet]

You'll need a business account for that. In the free option, Cloudflare does not allow you to use your own certificate. You may try the free shared one and see how you go. In that case I think you need to use "Flexible SSL", or you can buy a certificate from them, install it and then use "Full SSL" (which is a bit of a waste considering you already have your own). You'll need to create a "Page Rule" in Cloudflare and set to always use https. For example:

	http://*domain.com/*
	(Select Always Use Https)

 I have added an additional rule with a forwarding with a 301 message that I've put at the top of the page rules list. For example:
 

    http://*domain.com/* --- 301 redirect -->
    (Select Forwarding URL 301 - Permanent Redirect)
    https://www.domain.com/$1

 

[AlexWebsites]

That's good to know because I'm using cloudflare now and am thinking of moving to https. In WHM, there is an AutoSSL feature.

[jcdesign]

Im using WHM panel and cpanel with auto ssl, and everything works fine now after ASTRAPI´s help,

Using the free cloudflare version and the loading time is now much better around the world.

 

Example: Frontpage 3,7 mb size

US, Dallas, Washington and California page loading time: 5-10 seconds, now 2-4 sec

Australia: up to 20 seconds, now 2-5 sec

Stockholm: 2-3 seconds, now under 1 sec

and the server is located in Germany.

 

[AlexWebsites]

14 minutes ago, jcdesign said:

Im using WHM panel and cpanel with auto ssl, and everything works fine now after ASTRAPI´s help,

Using the free cloudflare version and the loading time is now much better around the world.

 

Example: Frontpage 3,7 mb size

US, Dallas, Washington and California page loading time: 5-10 seconds, now 2-4 sec

Australia: up to 20 seconds, now 2-5 sec

Stockholm: 2-3 seconds, now under 1 sec

and the server is located in Germany.

 

Are you paying for Cloudflare or using the free version?

[jcdesign]

2 minutes ago, AlexWebsites said:

Are you paying for Cloudflare or using the free version?

Using the free version.

[AlexWebsites]

Just now, jcdesign said:

Using the free version.

That's interesting, I though you need to upgrade to a paid cloudflare plan in order to use a certificate outside of their service. Are you using their ssl free shared service?

[jcdesign]

Full ssl in CLoudflare:

Full SSL: Encrypts the connection between your website visitors and Cloudflare, and from Cloudflare to your server. The difference between Full and Full (Strict) is that Full (Strict) checks for a valid certificate on your origin server, whereas Full checks for any certificate.

• You will need to have an SSL certificate on your server. However, Cloudflare will not attempt to validate the certificate (certificates may be self-signed)
• Visitors will see the SSL lock icon in their browser

 

and Auto ssl with Let´s encrypt from my server.

[AlexWebsites]

39 minutes ago, jcdesign said:

Full ssl in CLoudflare:

Full SSL: Encrypts the connection between your website visitors and Cloudflare, and from Cloudflare to your server. The difference between Full and Full (Strict) is that Full (Strict) checks for a valid certificate on your origin server, whereas Full checks for any certificate.

• You will need to have an SSL certificate on your server. However, Cloudflare will not attempt to validate the certificate (certificates may be self-signed)
• Visitors will see the SSL lock icon in their browser

 

and Auto ssl with Let´s encrypt from my server.

Thanks for posting this, I'm going to have to try this out.

[jcdesign]

Don´t forget to change the url adress in conf_global.php to https after your done with the server ssl.

$INFO['board_url']

[AlexWebsites]

Just now, jcdesign said:

Don´t forget to change the url adress in conf_global.php to https after your done with the server ssl.

$INFO['board_url']

Good point, thanks!

[ASTRAPI]

@jcdesign

Great that you solve your isue

 

@AlexWebsites

It works on free version of Cloudflare also