SSL Configuration for a Quic.cloud / Cloudflare Integration

Website, Application, Performance Security
1

Hello,
I am a little confused on what is the proper way to configure my SSL certificate. I had all my websites with a shared hosting provider that was using a Litespeed server. Because of the Litespeed server, I was using the Quic.cloud / Cloudflare integration. I configured the Cloudflare Origin certificate within the Cpanel SSL/TLS section of the shared hosting server and the SSL overview within Cloudflare shows green icons / green check mark for full (Strict) configuration. Now my question is, are these Cloudflare SSL configurations even applicable if I’m using the Quic.cloud / Cloudflare integration?

Also, I recently moved one of my websites to a dedicated cloud server that also uses Litespeed. I changed my A records for the website to point to the IP of the new server. The SSL certificate for the website shows connection is secured / certificate is valid with the “Issue by” being R3 let’s encrypt. I checked the SSL overview within Cloudflare and everything still shows green for the full (Strict) configuration. Why is that? Is it still pointing to the old shared hosting server even though I changed the A records? Do I need to install a new Cloudflare Origin certificate on the new hosting server? Is it even necessary being that I use the Quic.cloud / Cloudflare integration? Or am I just fine with the current R3 let’s encrypt certification?

Thanks,
-John

2

I configured the Cloudflare Origin certificate within the Cpanel SSL/TLS section of the shared hosting server and the SSL overview within Cloudflare shows green icons / green check mark for full (Strict) configuration.

If you are referring to the green locks in the images then those are always there since it is showing where it is encrypted.

Also, I recently moved one of my websites to a dedicated cloud server that also uses Litespeed. I changed my A records for the website to point to the IP of the new server. The SSL certificate for the website shows connection is secured / certificate is valid with the “Issue by” being R3 let’s encrypt. I checked the SSL overview within Cloudflare and everything still shows green for the full (Strict) configuration

The reason that this is still working is you have a valid certificate at the origin. Full Strict does not require a Cloudflare certificate it just requires being unexpired, signed by a publicly trusted CA, and containing a CN or SAN that matches the targeted hostname.

For more information about the requirements

3

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.