im trying to set up an SSL cert but step 1 asks me to login into my Enom account but i don’t have one!
Do these set up steps mean i should login into my DNS of my current hosts and change the name servers there or is this a new feature where we have to have an Enom account to proceed with an SSL via Cloudfare ?
ok thanks for the info but seems strange since i havn’t done anything else beyond the cloudfare process, such as setting up a redirect, any ideas what i need do to change or diagnose whats going on here ?
To start off with, can you pause Cloudflare on the site and let us know when you have done that so we can check the redirect again. This will confirm if the redirect is coming from Cloudflare or directly from the server.
You can pause Cloudflare from the Overview tab of the Cloudflare Dashboard, bottom right under Advanced Actions.
ok cool although weirdly i can only see a redirect from isleofwightdailynews to isleofwightnewsdaily, so as far as i can see there isnt a redirect on isleofwightnewsdaily (as per attached screengrab) or is that something to ask my host about not you ?
The redirect I see is https://isleofwightnewsdaily.com --> http://isleofwightnewsdaily.com/
Which, like you say, is not showing up there. Your host may have configured it in the background as you don’t have a valid SSL cert on the server for that domain. They should be able to help with this one!
but just to confirm no there wont be a valid ssl certificate there since that’s what i’m trying to do via Cloudflare (set up a valid ssl certificate) and i have now changed the dns from host servers to Cloudflares as per the instructions, so thats all fine isn’t it ? or are you saying i need some sort of SSL on my hosts servers too ? I thought the point of all this is that i don’t need to do that since i use Cloudflare for that? So i presume im misinterpeting it and the above is correct?
Cloudflare has different ‘SSL modes’, the ones to look at are ‘Full’ and ‘Full (strict)’. ‘Full (strict)’ is more secure, but requires a valid certificate on the server. ‘Full’ is less secure but you can have a self-signed/not-valid certificate on the server which is what you seem to have. Your host should be able to clarify what the redirect is and why it’s there.