fritex
July 5, 2021, 10:41am
4
I suggest you to fix this one firstly.
That is kind of interesting, if it accepts HTTPS (listening on 443 port), but no SSL certificate on web server (meaning not giving back), so kind of confusing information here for me.
oliver.scott:
encryption is ‘Flexible’
I am afraid this could be the second reason within the statement that there is no SSL certificate too.
Kindly, read more information why Flexible SSL mode is not a good one to pick, and the errors and loops that occure (written below) as you are actually having them:
This tutorial is deprecated in favour of Flexible - SSL/TLS encryption modes · Cloudflare SSL/TLS docs
Related Content:
Archive Flexible
The connection between your visitor and Cloudflare is secured, but the connection between Cloudflare and your server is not. You will not need a certificate on your server for this mode. This option is NOT RECOMMENDED.
Flexible makes your site only partially secure - it encrypts the connection between the visitor and Cloudflare - this means they see the :ssl…
oliver.scott:
DNS loop
I see a redirection loop and assume there could also be some mixed content in further use.
See the below two articles for more information about this:
Error
Try the suggestions in this Community Tip to help you fix ERR TOO MANY REDIRECTS .
Background
If your SSL setting on the SSL/TLS app is Flexible and if your origin server is configured to redirect HTTP requests to HTTPS, server responses back to Cloudflare are encrypted. Since Cloudflare is expecting HTTP traffic, it keeps resending the same request, resulting in a redirect loop. This causes browsers to display “The page isn’t redirecting properly” or “ERR_TOO_MANY_REDIRECTS ” errors.
[D…
Error
Try the suggestions in this Community Tip to help you fix mixed content errors.
Background
Did you notice the green padlock missing from your browser when connecting over HTTPS? That is likely a mixed content issue. Mixed content errors mean that your website is being loaded over HTTPS, but some of the resources are being loaded over HTTP. In this case, the site will show as not secure.
[Registrar, basically free]
Quick Fix Ideas
To fix this, you will need to edit your sour…
I strongly recommend getting an installing an SSL certificate on your host origin/server and setup the Full (Strict) SSL mode.
Possible ways:
Generate one using a tools like Let’s Encrypt, Acme, etc.
Purchasing one from some of the SSL providers
Buying a Dedicated SSL on Cloudflare: https://support.cloudflare.com/hc/en-us/articles/228009108 , using Cloudflare Advanced Certificate Manager: Advanced certificates · Cloudflare SSL/TLS docs
I recommend this one: generate a Cloudflare Origin CA Certificate and install it
More info about generating and installing an Cloudflare Origin CA certificate (works only for web traffic if you do not have an SSL certificate) can be found on the link:
Step-by-step instructions how to propperly setup an SSL connection between your website and Cloudflare can be found here:
This tutorial is deprecated in favour of Get started with SSL/TLS · Cloudflare SSL/TLS docs
Archive This tutorial covers getting SSL working with Cloudflare in various different scenarios.
This assumes you already have your website set up on Cloudflare with all your DNS records set to , if not - please visit <a href="https://community.cloudflare.com/t/64309">Step 1</a>.
Do you want the website to use HTTPS?
Yes
Do you already have a valid SSL certificate installed…
Available SSL options to configure:
This tutorial is deprecated in favour of Get started with SSL/TLS · Cloudflare SSL/TLS docs
Archive SSL/TLS Configuration Video:
This tutorial covers basic settings in the SSL/TLS app of the Cloudflare Dashboard, including SSL Mode [Off/Flexible/Full/Full (Strict)], Cloudflare Origin Certificates, ‘Always Use HTTPS’ and ‘Automatic HTTPS Rewrites’.
The settings covered here can all be found by visiting <a href="http://Cloudflare.com">Cloudflare.com</a>, logging in, selectin…
In case if some issues appear in between:
This tutorial is deprecated in favour of Troubleshooting · Cloudflare SSL/TLS docs
Archive This tutorial post covers the steps you should take if you have enabled Cloudflare, but HTTPS is not working on the site.
If your main domain is secure, but a subdomain is not, please see <a href="https://community.cloudflare.com/t/ssl-tls-not-working-on-subdomain/75181.">https://community.cloudflare.com/t/ssl-tls-not-working-on-subdomain/75181.</a>
1. Check that the DNS record is se…
Some helpful article regarding SSL:
https://support.cloudflare.com/hc/en-us/articles/360023792171-Getting-Started-with-Cloudflare-SSL
1 Like