S3 hosted website accessed through CloudFlare with SSL

Security
#1

Hello,

I have a website hosted in AWS S3 (Static web hosting), set it up for public access (as well as a policy to limit access through CloudFlare only).
DNS CNAME record set to point to the bucket.

Trying to access the website I’m getting:

This site can’t provide a secure connection

www.emp.dev.simetria.io uses an unsupported protocol.

ERR_SSL_VERSION_OR_CIPHER_MISMATCH

Tried this with SSL set to “Full” as well as to “Flexible”.
What might be the issue?

Also - if I want to use “Full” for SSL, would I have to set up SSL for my AWS S3 bucket and use CloudFront (point CloudFlare to the CloudFront URL)?

#2

From previous threads on this: you either need to disable HTTPS on Cloudflare or set up SSL on Amazon.

Cloudflare’s Guide for using S3:

https://support.cloudflare.com/hc/en-us/articles/360037983412-Configuring-an-Amazon-Web-Services-static-site-to-use-Cloudflare

Amazon Guide for Cloudfront with SSL:

1 Like
#3

Thanks @Cyb3r-Jak3
Went through that thread.

Trying to understand if it makes sense to use CloudFront + CloudFlare, and if it’s the only way to use SSL with CloudFlare & S3…

#4

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.