Changed IP for new server, https no longer works

I recently migrated to a new server. When I log in to the Cloudflare cp and update the DNS settings with the new A records for the new IP things are now broken. The site works just fine without the https:// but if I add it I’m getting this error:

Error 521 Ray ID: 55795bac2ea5c883 • 2020-01-19 14:04:29 UTC

Web server is down

I purged the cache but it didn’t help. Am I missing something here?

Your new server most likely does not have SSL configured. Make sure it is and has a valid certificate for your domain.

1 Like

I completely forgot about using those when I set this up a couple years ago. I know I need a .pem and .key file but I cannot seem to figure out how to get those files from the previously issued certs.

I go to the SSL/TLS tab and then the Origin Server tab. When I click on the Download option for the cert it gives me this pop-up. This is where I don’t know what to do. Where do I get/create the files from the drop down? Do I just copy the contents of the PEM option and create 2 different files on my server? (even though they contain the same info).

If you dont have the key any more you need to revoke the current certificate and have a new one issued.

Ok I revoked the old ones and generated new ones. I now have the origin cert and the private key but I’m not sure what exactly I’m supposed to do with them. Do I just put them somewhere on the server and then point reference them from a specific conf file? The last time I did this, the tech support on my host was very helpful and took care of all this. But they aren’t being as helpful this time around lol.

Thanks for your help so far by the way. I appreciate it.

https://support.cloudflare.com/hc/en-us/articles/115000479507-Managing-Cloudflare-Origin-CA-certificates#h_0eadeb1e-93cd-4698-937d-fb5165d40b54 covers this for major server platforms.

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.