Is turning off TLS verify safe / a good idea?

What is the name of the domain?

example.net

What is the error number?

x509

What is the error message?

Request failed error=“Unable to reach the origin service. The service may be down or it may not be responding to traffic from cloudflared: tls: failed to verify certificate: x509: certificate is valid for *.example.net, example.net, not web” connIndex=1 dest=https://example.net/ event=0 ip=198.41.200.113 type=http

What is the issue you’re encountering

My current stack: flask > nginx > cloudflared > tunnel > web. Only works when i disable the tls verification on the tunnel, but to be honet, i don’t really know what this does and or if this is safe / smart to do.

Might be you’re running an app only on HTTP port, not HTTPS, therefrom you don’t have a valid SSL certificate nor Cloudflare Origin CA certificate installed on the origin?
If so, make sure to enable noTLSVerify option.

Nevertheless, not having an SSL certificate, connection might fail if it connects via tunnel over the HTTP/2 (which requires SSL certificate) to the origin as well.

From my understanding, you’ve also got proxy in between for Flask, right? :thinking:

I run all my traffic over HTTPS, I have flask nginx and cloudflared running in the same docker “instance?” so I don’t think that means there is a proxy between them.
I have set up origin certificates for nginx and they work (I am able to get a secure connection to my website)