fritex
November 25, 2021, 1:32pm
3
I would firstly recommend you to secure your origin host / server.
Therefore, make sure you have got a valid SSL certificate and that it is properly installed at your origin host / server.
Select the correct SSL/TLS option at SSL/TLS tab of Cloudflare dashboard for your domain .
Use HTTPS for your domain.
Nevertheless, configure Automatic HTTPS Redirection
option just in case, to make sure any HTTP links would be HTTPS (there is also another Always Use HTTPS
option which you can enable afterwards).
I would not recommend having and configuring a redirection in a vice-versa, like from HTTPS to HTTP.
Here is a way to re-check if you correctly setup the SSL for your domain with Cloudflare:
This tutorial is deprecated in favour of Get started with SSL/TLS · Cloudflare SSL/TLS docs
Archive This tutorial covers getting SSL working with Cloudflare in various different scenarios.
This assumes you already have your website set up on Cloudflare with all your DNS records set to , if not - please visit <a href="https://community.cloudflare.com/t/64309">Step 1</a>.
Do you want the website to use HTTPS?
Yes
Do you already have a valid SSL certificate installed…
If any other issues appear, follow the needed steps for troubleshooting from article below:
This tutorial is deprecated in favour of Troubleshooting · Cloudflare SSL/TLS docs
Archive This tutorial post covers the steps you should take if you have enabled Cloudflare, but HTTPS is not working on the site.
If your main domain is secure, but a subdomain is not, please see <a href="https://community.cloudflare.com/t/ssl-tls-not-working-on-subdomain/75181.">https://community.cloudflare.com/t/ssl-tls-not-working-on-subdomain/75181.</a>
1. Check that the DNS record is se…
Regarding available SSL options at Cloudflare dashboard, check here:
This tutorial is deprecated in favour of Get started with SSL/TLS · Cloudflare SSL/TLS docs
Archive SSL/TLS Configuration Video:
This tutorial covers basic settings in the SSL/TLS app of the Cloudflare Dashboard, including SSL Mode [Off/Flexible/Full/Full (Strict)], Cloudflare Origin Certificates, ‘Always Use HTTPS’ and ‘Automatic HTTPS Rewrites’.
The settings covered here can all be found by visiting <a href="http://Cloudflare.com">Cloudflare.com</a>, logging in, selectin…
In case you do not have an SSL certificate, you can use Cloudflare SSL, if so, kindly make sure you follow the instructions as follows on the below article to setup an SSL certificate using Cloudflare Origin CA Certificate:
Last but not least, kindly have a look here for more information regarding correct SSL settings:
Unencrypted & unverified connections
Imagine you open Paypal and suddenly get that warning
[image]
Would you continue? Probably not. For decades leaders in IT security have advocated that people upgrade their sites from unencrypted HTTP to secure HTTPS. And for a reason, everything you send via an HTTP connection is sent in plain text and can be intercepted at any point between you and the server.
Equally, you’d probably not proceed if you got such a warning, right?
[image]
That’s when th…
2 Likes