Cloud run and Cloudflare

[kev]

Has anyone had any success using google cloud run with Cloudflare? We have an existing site which is working fine on google cloud run, with a custom domain, at site<dot>dev<dot>domain<dot>com

When we enable proxying via Cloudflare we get the following error

This site can’t provide a secure connection

site<dot>dev<dot>domain<dot>com uses an unsupported protocol.
ERR_SSL_VERSION_OR_CIPHER_MISMATCH

Switching back to DNS only resolves the problem.

Regards,
Kevin

[KianNH]

@kev

sitedevdomaincom uses an unsupported protocol.

site.dev.domain.com is a two level deep subdomain and not covered by Universal SSL, you would need Advanced Certificate Manager for this.

Subdomain too deep

This tutorial covers a possible reason for the SSL_ERROR_NO_CYPHER_OVERLAP and ERR_SSL_VERSION_OR_CIPHER_MISMATCH errors (Firefox and Chrome respectively) when seen on a subdomain. The Cloudflare universal certificates cover example.com and *.example.com. This means that it covers any subdomain one level below the domain you signed up with. It will cover www.example.com and subdomain.example.com, as these are one level below the root domain, example.com. The certificate will not cover www.sub…

[kev]

Thanks very much! I would never have found this - I assumed the issue was cloud run specific.

I added an advanced certificate for *<dot>dev<dot>domain<dot>dom and the site immediately started working

For anyone else setting this up, this is working just using CNAME to ghs<dot>googlehosted<dot>com

K