Error with redirects on webpage after integrating cloudflare

[user13970]

I’ll attach screenshots, but I was running tests on my website after integrating cloudflare security into my domain, and I noticed a new error when I test my webpage. I contacted namecheap, but they said I should contact the folks hosting my webpage to get a resolution.

Know how I could fix this right away?

[user13970]

[user13970]

[fritex]

I can see there is some strange HTTPS non-www to HTTP www and then from HTTP www to HTTPS www:

https://micahsmithva.com
301 Moved Permanently
http://www.micahsmithva.com/
301 Moved Permanently
https://www.micahsmithva.com/
200 OK

>>> https://micahsmithva.com

> --------------------------------------------
> 301 Moved Permanently
> --------------------------------------------

|**Status:**|301 Moved Permanently|
| --- | --- |
|**Code:**|301|
|**Date:**|Fri, 10 Dec 2021 18:46:09 GMT|
|**Content-Type:**|text/html; charset=iso-8859-1|
|**Connection:**|close|
|**Location:**|http://www.micahsmithva.com/|
|**cache-control:**|max-age=0|
|**expires:**|Fri, 10 Dec 2021 18:46:09 GMT|
|**CF-Cache-Status:**|DYNAMIC|
|**Expect-CT:**|max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"|
|**Report-To:**|{"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gCc58KWLDgv%2BE946Vmo0oYUGqPZOKO5um4twlHfABHIDrcKBDNUyu9lT%2FJ7KO%2BIoEcvb2fOVBxyUdKHZGJDHDGver7%2BZBOJUdmulk%2B%2BUEK0ckB7gcnoR%2FwdUjebCwxnX%2BAi7"}],"group":"cf-nel","max_age":604800}|
|**NEL:**|{"success_fraction":0,"report_to":"cf-nel","max_age":604800}|
|**Server:**|cloudflare|
|**CF-RAY:**|6bb8a262b933374a-MXP|
|**alt-svc:**|h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400|

>>> http://www.micahsmithva.com/

> --------------------------------------------
> 301 Moved Permanently
> --------------------------------------------

|**Status:**|301 Moved Permanently|
| --- | --- |
|**Code:**|301|
|**Date:**|Fri, 10 Dec 2021 18:46:09 GMT|
|**Connection:**|close|
|**Cache-Control:**|max-age=3600|
|**Expires:**|Fri, 10 Dec 2021 19:46:09 GMT|
|**Location:**|https://www.micahsmithva.com/|
|**Report-To:**|{"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5dEen09tY0XBRuN3ViOsNtF0KaECMZFcjrCgoGzISaX%2BUKdCeeQdNxYBK%2FXNZgh8PfR9YVRn7gZe9VsY6wWIKEIDhACcA3DOAeR3xkyg9PLgeW2EkP%2FayspP6%2B8lUHqbdPQ8BBiyzg%3D%3D"}],"group":"cf-nel","max_age":604800}|
|**NEL:**|{"success_fraction":0,"report_to":"cf-nel","max_age":604800}|
|**Server:**|cloudflare|
|**CF-RAY:**|6bb8a2651e710f72-MXP|
|**alt-svc:**|h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400|

>>> https://www.micahsmithva.com/

> --------------------------------------------
> 200 OK
> --------------------------------------------

|**Status:**|200 OK|
| --- | --- |
|**Code:**|200|
|**Date:**|Fri, 10 Dec 2021 18:46:09 GMT|
|**Content-Type:**|text/html|
|**Connection:**|close|
|**last-modified:**|Fri, 10 Dec 2021 15:09:35 GMT|
|**cache-control:**|max-age=14400|
|**expires:**|Fri, 10 Dec 2021 18:46:09 GMT|
|**vary:**|Accept-Encoding|
|**CF-Cache-Status:**|MISS|
|**Expect-CT:**|max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"|
|**Report-To:**|{"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fCOrOtJIVbrFsoGCvM%2Fl3bRBzi%2BdKZPjC1fBt39uwIa5asMknlT8mmypMMRNpvQlxVh8lSIiyy7GXFswtww%2F%2FC3YxtV1bEIfBgU4lwJHgwQl8OeiWlYR%2B7npIZ4m3woMlKxUcjnKLg%3D%3D"}],"group":"cf-nel","max_age":604800}|
|**NEL:**|{"success_fraction":0,"report_to":"cf-nel","max_age":604800}|
|**Server:**|cloudflare|
|**CF-RAY:**|6bb8a26579785995-MXP|
|**alt-svc:**|h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400|

Nevertheless, HTTP non-www to HTTPS non-www, then back to HTTP www and from that one to final HTTPS www.

http://micahsmithva.com
301 Moved Permanently
https://micahsmithva.com/
301 Moved Permanently
http://www.micahsmithva.com/
301 Moved Permanently
https://www.micahsmithva.com/
200 OK

>>> http://micahsmithva.com

> --------------------------------------------
> 301 Moved Permanently
> --------------------------------------------

|**Status:**|301 Moved Permanently|
| --- | --- |
|**Code:**|301|
|**Date:**|Fri, 10 Dec 2021 18:47:26 GMT|
|**Connection:**|close|
|**Cache-Control:**|max-age=3600|
|**Expires:**|Fri, 10 Dec 2021 19:47:26 GMT|
|**Location:**|https://micahsmithva.com/|
|**Report-To:**|{"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XCc3ioa4VaBOaoRvqmksoWdA3P5QFxI04AcaQD%2F2sL%2ByRSxtwhZ5NoIWNlZige6CPzvSLsZDZNenLeOqrq5byh50g9NJodK141HpmTSSEqql7WPfVJXPo6L6GdwELDVwPvlo"}],"group":"cf-nel","max_age":604800}|
|**NEL:**|{"success_fraction":0,"report_to":"cf-nel","max_age":604800}|
|**Server:**|cloudflare|
|**CF-RAY:**|6bb8a4465c7283ba-MXP|
|**alt-svc:**|h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400|

>>> https://micahsmithva.com/

> --------------------------------------------
> 301 Moved Permanently
> --------------------------------------------

|**Status:**|301 Moved Permanently|
| --- | --- |
|**Code:**|301|
|**Date:**|Fri, 10 Dec 2021 18:47:26 GMT|
|**Content-Type:**|text/html; charset=iso-8859-1|
|**Connection:**|close|
|**Location:**|http://www.micahsmithva.com/|
|**cache-control:**|max-age=0|
|**expires:**|Fri, 10 Dec 2021 18:47:26 GMT|
|**CF-Cache-Status:**|DYNAMIC|
|**Expect-CT:**|max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"|
|**Report-To:**|{"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZFhiPdaSGgrJ3M3bOhN%2BE2y1NxWlbrJrFqbboLQ23Nref%2FUq0kaTIz4iOgSNcm4gJR35ftTjVuyDKSCr3WT3nG3Ft42Q%2FvhmyOFTt5DRQvm1Rbjk7j2Hreck0e8TcY3GFtZF"}],"group":"cf-nel","max_age":604800}|
|**NEL:**|{"success_fraction":0,"report_to":"cf-nel","max_age":604800}|
|**Server:**|cloudflare|
|**CF-RAY:**|6bb8a446d8e259ad-MXP|
|**alt-svc:**|h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400|

>>> http://www.micahsmithva.com/

> --------------------------------------------
> 301 Moved Permanently
> --------------------------------------------

|**Status:**|301 Moved Permanently|
| --- | --- |
|**Code:**|301|
|**Date:**|Fri, 10 Dec 2021 18:47:26 GMT|
|**Connection:**|close|
|**Cache-Control:**|max-age=3600|
|**Expires:**|Fri, 10 Dec 2021 19:47:26 GMT|
|**Location:**|https://www.micahsmithva.com/|
|**Report-To:**|{"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=K3xuIEThJp6ohR9820U%2BWqoTplK98uQ3P08iYLnu7lJPcpWOqE1%2FdijjqUTRLuNJGV2B%2FhgQwwpZ52KRoXwU9DC6%2B%2F5WxHYFZzErN2lS%2BPQdxGNwDT%2BzFwrVtGnR1LsVipy5u3a0zQ%3D%3D"}],"group":"cf-nel","max_age":604800}|
|**NEL:**|{"success_fraction":0,"report_to":"cf-nel","max_age":604800}|
|**Server:**|cloudflare|
|**CF-RAY:**|6bb8a448fe9f0f62-MXP|
|**alt-svc:**|h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400|

>>> https://www.micahsmithva.com/

> --------------------------------------------
> 200 OK
> --------------------------------------------

|**Status:**|200 OK|
| --- | --- |
|**Code:**|200|
|**Date:**|Fri, 10 Dec 2021 18:47:27 GMT|
|**Content-Type:**|text/html|
|**Connection:**|close|
|**last-modified:**|Fri, 10 Dec 2021 15:09:35 GMT|
|**cache-control:**|max-age=14400|
|**expires:**|Fri, 10 Dec 2021 18:47:27 GMT|
|**vary:**|Accept-Encoding|
|**CF-Cache-Status:**|EXPIRED|
|**Expect-CT:**|max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"|
|**Report-To:**|{"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dchcRryLKHLg81Qmwz4FmmTvtc6rFGdGzccR%2BgOyK9qgMGRway7yuYllNbvqzMYme2uEW3ZEBs1elEy2sibNMamKYYUloBMjvJMJuLuPSBbUNA5wauxYG5vfMtifS1NQVWTwOCHDLA%3D%3D"}],"group":"cf-nel","max_age":604800}|
|**NEL:**|{"success_fraction":0,"report_to":"cf-nel","max_age":604800}|
|**Server:**|cloudflare|
|**CF-RAY:**|6bb8a4495cdc375f-MXP|
|**alt-svc:**|h3=":443"; ma=86400, h3-29=":443"; ma=86400, h3-28=":443"; ma=86400, h3-27=":443"; ma=86400|

[user13970]

how would I go about fixing this on my end? I’m using carrd, namecheap, and cloudflare.

[fritex]

May I ask what SSL option have you got selected under the SSL/TLS tab at Cloudflare dashboard for your domain ( Flexible, Full, Full Strict … )?

Do you have some custom Page Rules created at Cloudflare dashboard?

Or maybe some at the origin host / server rather?

[user13970]

I have Full enabled!

1 page rule, Cache Level: Cache Everything

Not sure about the server. I don’t have access to that, I believe.

[fritex]

@user13970

Full

Before moving to Cloudflare, was your Website working over HTTPS connection?
If so, did you had an valid SSL certificate installed at your origin host / server which covers both your naked (root) domain any any other needed sub-domain like www, mail, etc.?

What happens when you switch to Full (Strict)?

Why you should choose Full Strict, and only Full Strict

Unencrypted & unverified connections Imagine you open Paypal and suddenly get that warning [image] Would you continue? Probably not. For decades leaders in IT security have advocated that people upgrade their sites from unencrypted HTTP to secure HTTPS. And for a reason, everything you send via an HTTP connection is sent in plain text and can be intercepted at any point between you and the server. Equally, you’d probably not proceed if you got such a warning, right? [image] That’s when th…

@user13970

Cache Level: Cache Everything

Okay, meaning you are caching even the HTML webpages as well.

@user13970

I don’t have access to that

O-oh, so your Website content is hosted somewhere but, can you manage your Web app somehow to check the routes (just in case).

[user13970]

Okay, let me try to explain in a better way lol

I have a domain with namecheap, the website itself was created with carrd’s website builder, and I’m assuming the hosting is handled by them as well (sorry, but I’m not a web developer. Just a guy!)

I’ve just switched to full strict, and there’s still issues.

[fritex]

@user13970

carrd’s website builder

True, maybe there is the catch where the redirection is.
There are no HTTP headers which could indicate, but if it is possible for you to log into their interface and check if there is maybe some kind of an option for it?

@user13970

still issues

Could you try to Purge Cache at Cloudflare dashboard too? (but I doubt it could help)

[user13970]

Purged my cache, and checked carrd for settings.

There don’t seem to be any manual redirects on my end.

If it helps at all, this issue started when I integrated cloudflare into my site.

[fritex]

From your feedback about the SSL, furthermore may I ask, is the Always Use HTTPS option being enabled maybe? Another one, Automatic HTTPS rewrites?

Both can be located at the Cloudflare dashboard → tab SSL/TLS → sub-menu Edge Certificates.

Or you might end up in some redirection loop with using them …

[user13970]

Yes, they are both enabled.

I’ve disabled both, and i’m still getting an issue, sadly.

(I’ve got a dumb idea that might work, so I’m going to try changing the domain that i’ve got in carrd’s website builder to micahsmithva.com instead of www.micahsmithva.com, maybe it’ll help?)

Edit: That didn’t work either… Reverting.

How long should Full (Strict) take to initialize? Apparently that fixes most redirect issues with carrd.