SSL Question

Hi Folks,

If I am using the “Full SSL” setting in Cloudflare and the self-singed cert I have on a web server expires, will site visitors see an SSL error?

Thanks,

John

Contrary to Full Strict, Full does not validate the certificate, so I would not expect an error in this case.

https://support.cloudflare.com/hc/en-us/articles/200170416-What-do-the-SSL-options-mean-

I should note though that I didnt have that case yet though and as the wording in the article is a bit ambiguous it might be that Cloudflare verifies the expiration (and common name) and only skips the check of the trust status. So still do take my response with a grain of salt :smile:

@cs-cf @cloonan

:wave @sandro,

In my experience Full checks to see that a cert exists, the server name, domain or expiration/ revocation status are not considered. So for OP it shouldn’t change anything.

-OG

This topic was automatically closed after 30 days. New replies are no longer allowed.