SSL not working on my subdomain

[fritex]

@user6826

SSL/TLS not working on subdomain

Possibly related to:

Deprecated - SSL/TLS not working on subdomain

This tutorial is deprecated in favour of Troubleshooting · Cloudflare SSL/TLS docs

Archive

Please note, this tutorial post contains links to external sites. I am not endorsing any external links. This tutorial post covers the first steps you should take if SSL is working on your main domain, but not on a subdomain. 1. Is there a DNS record for it? Check the DNS app in your Cloudflare dashboard to see if there is a DNS record there for that subdomain. 2. Check that the DNS record is working co…

Deprecated - Subdomain too deep

This tutorial is deprecated in favour of Fix VERSION_OR_CIPHER_MISMATCH · Cloudflare SSL/TLS docs

Archive

This tutorial covers a possible reason for the SSL_ERROR_NO_CYPHER_OVERLAP and ERR_SSL_VERSION_OR_CIPHER_MISMATCH errors (Firefox and Chrome respectively) when seen on a subdomain. The Cloudflare universal certificates cover example.com and *.example.com. This means that it covers any subdomain one level below the domain you signed up with. It will cover www.example.com and subdomain.exampl…

May I ask what SSL option you have got selected under the SSL/TLS tab at Cloudflare dashboard for your domain ( Flexible, Full, Full Strict … )?

@user6826

And the ssl is set to be full ssl ,but subdomain will not work on the full ssl
it will work only on flexible and if i turned the flexible on the main domain will not work

There seems to be an issue with the SSL certificate at your origin host / server.
Before moving to Cloudflare, was your Website working over HTTPS connection?
If so, did you have a valid SSL certificate installed at your origin host / server which covers both your naked (root) domain and any other needed sub-domain like www, mail, etc.?

Could you please re-check if all including the naked domain, www, mail, and your sub-domain (possibly some more) are covered by your SSL certificate and the one installed at your origin host is still valid?

Here is a way to re-check if you correctly setup the SSL for your domain with Cloudflare:

Deprecated - Step 2: Setting up SSL with Cloudflare

This tutorial is deprecated in favour of Get started with SSL/TLS · Cloudflare SSL/TLS docs

Archive

This tutorial covers getting SSL working with Cloudflare in various different scenarios. This assumes you already have your website set up on Cloudflare with all your DNS records set to , if not - please visit <a href="https://community.cloudflare.com/t/64309">Step 1</a>. Do you want the website to use HTTPS? Yes Do you already have a valid SSL certificate installed…

Nevertheless, for proper security and HTTPS connection between the user-Cloudflare-origin the SSL option in the Cloudflare dashboard should be set to Full (Strict) SSL:

Why you should choose Full Strict, and only Full Strict

Unencrypted & unverified connections Imagine you open Paypal and suddenly get that warning [image] Would you continue? Probably not. For decades leaders in IT security have advocated that people upgrade their sites from unencrypted HTTP to secure HTTPS. And for a reason, everything you send via an HTTP connection is sent in plain text and can be intercepted at any point between you and the server. Equally, you’d probably not proceed if you got such a warning, right? [image] That’s when th…

@user6826

is there a way to set different ssl for the subdomains

Well, it could be achieved by using Page Rules:

Deprecated - Setting SSL/TLS Mode using Page Rules

This tutorial is deprecated in favour of Encryption modes · Cloudflare SSL/TLS docs

Archive

If you require a different SSL mode for a subdomain, you can achieve this with page rules. If, for example, you want SSL on your root domain (cloudflareexample.cf) set to Full (strict), but want the subdomain subdomain.cloudflareexample.cf to have SSL Off, you should set the SSL mode under SSL/TLS in your Cloudflare dashboard to Full (strict). You can then set the subdomain SSL mode to Off via a page rule…

• https://support.cloudflare.com/hc/en-us/articles/218411427-Understanding-and-Configuring-Cloudflare-Page-Rules-Page-Rules-Tutorial-

But using Flexible SSL is really not recommended and not secure as far as there are known issues with it:

Deprecated - Why flexible SSL mode is not the best choice

This tutorial is deprecated in favour of Flexible - SSL/TLS encryption modes · Cloudflare SSL/TLS docs Related Content:

Archive

Flexible The connection between your visitor and Cloudflare is secured, but the connection between Cloudflare and your server is not. You will not need a certificate on your server for this mode. This option is NOT RECOMMENDED. Flexible makes your site only partially secure - it encrypts the connection between the visitor and Cloudflare - this means they see the :ssl…

In case you do not have an SSL certificate, you can use Cloudflare SSL, if so, kindly make sure you follow the instructions as follows on the below article to setup an SSL certificate using Cloudflare Origin CA Certificate:

• Origin CA certificates · Cloudflare SSL/TLS docs

Maybe you need to renew your SSL certificate at the origin host / server, if using Let’s Encrypt or AutoSSL (cPanel), etc.