I have a site set up on cloudflare that is set to full SSL.- my issue is that I get a 403 error if I set “SSL Required” to true in IIS, but the error goes away if I turn it off.
Site uses a cloudflare origin CA and I also added the intermediate CA as described here https://support.cloudflare.com/hc/en-us/articles/115000479507#h_30cc332c-8f6e-42d8-9c59-6c1f06650639
The bindings on the site in IIS with his CA work - the site works - and it says that the CA is ok.
I am not sure that I have the intermediate set up right so maybe that is the issue.
1 - does setting “SSL Required” in IIS matter?
2 - if this does need to be set to true then what could be causing the 403 error?
3 - is the intermediate needed?
4 - could the intermediate CA be the problem and is there a way to test it?