SSL issue with Webmin/Virtualmin

[savagestoreus]

Current SSL certificate details
SSL certificate file /home/server/ssl.cert
SSL private key file /home/server/ssl.key
Web server hostname CloudFlare Origin Certificate Organization "CloudFlare
Issuer organization "CloudFlare Expiry date Nov 21 01:48:00 2036 GMT
Certificate type Self-signed
Other domain names *.wftstore.com, server.wftstore.com, wftstore.com, www.server.wftstore.com, www.wftstore.com.
Used by services Webmin (server.wftstore.com), Usermin (host server.wftstore.com), Dovecot (host server.wftstore.com), Postfix (host server.wftstore.com)
Download certificate PEM/PKCS12

Download private key PEM/PKCS12

Time until expiry 5474 days until expiry

WordPress website is UP with SSL installed. No problem there. Only with Webmin.

---

SSL works perfectly on the Website. However, it doesn’t work on Webmin. Am I doing something wrong?

I’m trying to install Cloudflare Origin SSL for the Webmin panel. Self-encrypt works perfectly on Webmin.
Also, when I enable “Cloudflare proxy” for Webmin (in order to activate SSL), the server stops working and I cannot log in.

[fritex]

May I ask what error do you get?

Over which port is Webmin running so far?

Have you checked at Webmin forums?:

Virtualmin Community

Some other similar topics with useful information about Webmin :

Proxy blocks access

May I ask which port do you use with Webmin? Did you changed the port to the one which is supported and compatible with Cloudflare proxy ? The supported and compatible ports with Cloudflare proxy are listed at the below article: Do you get some error or it’s due to the SSL? From my point of view, depending where you are located and what options have you got, where you run Webmin behind a server hostname domain and one of the supported and compatible ports with Cloudflare…

While using Cloudflare Origin CA Certificate, may I ask are you also having the Full (Strict) SSL selected under the SSL/TLS tab of Cloudflare dashboard for your domain name?

Why you should choose Full Strict, and only Full Strict

Unencrypted & unverified connections Imagine you open Paypal and suddenly get that warning [image] Would you continue? Probably not. For decades leaders in IT security have advocated that people upgrade their sites from unencrypted HTTP to secure HTTPS. And for a reason, everything you send via an HTTP connection is sent in plain text and can be intercepted at any point between you and the server. Equally, you’d probably not proceed if you got such a warning, right? [image] That’s when th…

Furthermore, kindly re-check if Cloudflare is allowed to connect to your origin host to as follows in the below article:

• Allowing Cloudflare IP addresses

Nevertheless, Cloudflare IP addresses list can be found here:

IP Ranges

Ports list compatible and supported when using cloud (proxy mode) on Cloudflare can be found here:

• ​Network ports compatible with Cloudflare’s proxy

[savagestoreus]

Q: May I ask what error do you get?
A: SSL mismatch when using server.domain.com (Webmin panel)

Q: Over which port is Webmin running so far?
A: 10000 - default

Q: While using Cloudflare Origin CA Certificate, may I ask are you also having the Full (Strict) SSL selected under the SSL/TLS tab of Cloudflare dashboard for your domain name?
A: Yes

Without Cloudflare Proxy - Enabled I get a mismatch error.
When I enable Proxy I can’t access the server at all.
EDIT:
I just noticed that without PORT(:10000) it loads and SSL is active. However, with port, I can’t access the server.
How can I fix this issue?

Thank you.

[fritex]

@savagestoreus

A: SSL mismatch when using server.domain.com (Webmin panel)

@savagestoreus

Without Cloudflare Proxy - Enabled I get a mismatch error.

Have you tried using some other Web browser while testing?

Use Origin Certificate Authority (CA) certificates to encrypt traffic between Cloudflare and your origin web server and reduce origin bandwidth consumption. Once deployed, these certificates are compatible with Strict SSL mode.

You cannot use Cloudflare Origin CA Certificate with (DNS-only). It throws warnings to the end-user/visitor:

Site visitors may see untrusted certificate errors if you pause or disable Cloudflare on subdomains that use Origin CA certificates. These certificates only encrypt traffic between Cloudflare and your origin server, not traffic from client browsers to your origin.

@savagestoreus

Q: Over which port is Webmin running so far?
A: 10000 - default

@savagestoreus

When I enable Proxy I can’t access the server at all.

Right, here the issue if using (proxied) mode.

You might have to change the port to some other - compatbile & supported by Cloudflare proxy mode:

• ​Network ports compatible with Cloudflare’s proxy

[savagestoreus]

Problem resolved. I just had to use CF-compatible ports and whitelist them.

Thank you very much!
Hvala i živ bio!

[fritex]

@savagestoreus

had to use CF-compatible proxies and whitelist them

Awesome! I am happy to assist you

@savagestoreus

Hvala i živ bio!

Odlično!
Drago mi je da sam uspio barme malo pomoći
p.s. Sljedeći se puta “na našem” brže i lakše sporazumijemo samo me taggaš

Svako dobro!