Cloud run and Cloudflare

[kev]

Has anyone had any success using google cloud run with Cloudflare? We have an existing site which is working fine on google cloud run, with a custom domain, at site<dot>dev<dot>domain<dot>com

When we enable proxying via Cloudflare we get the following error

This site can’t provide a secure connection

site<dot>dev<dot>domain<dot>com uses an unsupported protocol.
ERR_SSL_VERSION_OR_CIPHER_MISMATCH

Switching back to DNS only resolves the problem.

Regards,
Kevin

[KianNH]

@kev

sitedevdomaincom uses an unsupported protocol.

site.dev.domain.com is a two level deep subdomain and not covered by Universal SSL, you would need Advanced Certificate Manager for this.

Deprecated - Subdomain too deep

This tutorial is deprecated in favour of Fix VERSION_OR_CIPHER_MISMATCH · Cloudflare SSL/TLS docs

Archive

This tutorial covers a possible reason for the SSL_ERROR_NO_CYPHER_OVERLAP and ERR_SSL_VERSION_OR_CIPHER_MISMATCH errors (Firefox and Chrome respectively) when seen on a subdomain. The Cloudflare universal certificates cover example.com and *.example.com. This means that it covers any subdomain one level below the domain you signed up with. It will cover www.example.com and subdomain.exampl…

[kev]

Thanks very much! I would never have found this - I assumed the issue was cloud run specific.

I added an advanced certificate for *<dot>dev<dot>domain<dot>dom and the site immediately started working

For anyone else setting this up, this is working just using CNAME to ghs<dot>googlehosted<dot>com

K