Hi Folks,
If I am using the “Full SSL” setting in Cloudflare and the self-singed cert I have on a web server expires, will site visitors see an SSL error?
Thanks,
John
Hi Folks,
If I am using the “Full SSL” setting in Cloudflare and the self-singed cert I have on a web server expires, will site visitors see an SSL error?
Thanks,
John
Contrary to Full Strict, Full does not validate the certificate, so I would not expect an error in this case.
https://support.cloudflare.com/hc/en-us/articles/200170416-What-do-the-SSL-options-mean-
I should note though that I didnt have that case yet though and as the wording in the article is a bit ambiguous it might be that Cloudflare verifies the expiration (and common name) and only skips the check of the trust status. So still do take my response with a grain of salt
:wave @sandro,
In my experience Full checks to see that a cert exists, the server name, domain or expiration/ revocation status are not considered. So for OP it shouldn’t change anything.
-OG
This topic was automatically closed after 30 days. New replies are no longer allowed.