What is the name of the domain?
tomatkinson.org
What is the error number?
N/A
What is the error message?
Cannot Connect Using SSL
What is the issue you’re encountering
Cannot sync iPhone contacts with Nextcloud using CardDAV
What steps have you taken to resolve the issue?
I tried installing a .p12 certificate that I created from the Cloudflare dashboard.
Was the site working with SSL prior to adding it to Cloudflare?
Yes
What is the current SSL/TLS setting?
Flexible
What are the steps to reproduce the issue?
iPhone>Settings>Apps>Contacts>Add CardDAV Account: Enter my server name and credentials. I also tried going into Advanced> and adding /.well-known/carddav to the URL and specify port 443.
The Origin certificates aren’t publicly trusted, and aren’t trusted by the iPhone (or any other device / OS either).
They are meant solely for communication between Cloudflare, and your own server, and not for direct access from visitors.
So you probably won’t have any luck using them for the mentioned purpose.
Why was this marked “Solved”. All the analyst did was point out what I tried would not work. How about telling me what would work? Then we could actually consider it solved. I bet this person thinks their roof leak is solved if they mop up the floor.
- Install a proper certificate on your CardDAV server, that come from a certificate authority that your iPhone is trusting.
OR
- If CardDAV works flawlessly together with the Cloudflare Proxy, …
→ Install a proper certificate on your CardDAV server, OR use the Origin certificate.
AND
→ Set the A/AAAA record(s) to Proxied (
).
You may also want to check (and most likely disable or at least heavily reduce) the WAF filters for the specific hostname(s) you use for your DAV things, if you try to run them through Proxied () records.
Perhaps you should also look at disabling caching for the specific hostname(s) via cache rules, too.
That question isn’t for me to answer.
I did however find it strange myself, that I have previously seen notifications that my posts on different threads had been marked as a solution, … when I was actually asking the poster for further clarification.
It somehow seems like there is a motivation on the Cloudflare Community, … to get as many threads marked as resolved, as possible…
But I cannot give you the deeper meaning, or reason, to that part.
This isn’t the correct fix for the roof leak?!??
Instead of acting like you’re a great match to your roof leak story yourself, …
… Have you considered that someone’s (e.g. my) post being marked as a solution, doesn’t necessarily mean that it was the poster (e.g. me), that marked the post as a solution?