Does it require to re-issue SSL if change A record?

Website, Application, Performance Security
1

Hi
I am changing my hosting from one provider to another provider. SSL certification is issued from cloudflare. My question is when I will change the A record to point domain to new hosting server do I also need to re-issue SSL certificate from cloudflare or the old SSL will work as it is and my website will smoothly work on https:// without reissuance of SSL?
urgent response needed. Thanks

2

If you are talking about Edge Certificate then you don’t have to re-issue it if you change the value of A record.

Anyway, what SSL encryption mode you are using?

3

Ok. Yes I have Edge Certificate. So I just change the A record to point my domain to new hosting and SSL will remain work as it is.

it is Flexible

4

I see, but not a good practice. Flexible still does not ensure full encryption for your traffic because communication between Cloudflare and your server is in HTTP only.

Consider installing Cloudflare Origin Certificate in your server and set SSL mode to Full (strict). It’s free.

image
image1042×335 12.6 KB

5

Ok. Thanks for your suggestion. I will do that. But first I want to switch my hosting to new provider. and than I will change the SSL to origin server. By the way what is origin server means here? Do I also need something to do on my hosting end?

6

If you want full encryption (not using Flexible mode), yes you need to install another SSL certificate on your hosting side. Just generate one from Cloudflare (the screenshot that I showed you earlier) and install it on your hosting side.

7

Thank you so much. I appreciate your help.
so what my action items:

  1. change A record of new hosting. website will still be working without problem. no need to reissue SSL.

  2. generate origin server certificate. and install it at hosting.

Thanks

1 Like
8

And also number 3:

  1. after installation of origin cert, switch to Full (strict) SSL mode.
9

ok Thanks.
Currently I have changed the A record and edit the IP. Result it stopped my website. Do I need to do cache purge?

10

What error you get? You may try purge the cache.

11

This page isn’t working

**website.com" redirected you too many times.

ERR_TOO_MANY_REDIRECTS

Custom Purge or Purge everything?

12

Is your SSL mode still in Flexible mode? I think redirect loop is not related to cache issue, but you still can try Purge everything.

13

Yes I did not change the mode yet. I wanted to run my site first with new A record. and than to change SSL origin thing

14

Can you let us know your website domain? If not we can’t assist you further.

15

superpower.co.nz

16

It could be something misconfigured on your server, or your server already supports HTTPS and keep redirecting HTTP traffic to HTTPS traffic.

17

oh ok Thats amazing you explained it very well. So should I stop SSL at hosting or stop SSL at cloudflare to avoid this loop?

18

Assume that your hosting side already has SSL certificate, try switch to Full (strict) SSL mode. If you get Error 525 or 526, then switch to Full SSL mode.

19

For both options Full strict and Full giving this error 525

20

It seems like your hosting side already has SSL certificate (but invalid SSL certificate).

I guess you can directly proceed to this and solve the issue.