None of this seems to have taken. I can access the site if I go to http://www.bcsla.org but if I go to https://www.bcsla.org, I get the message that the SSL certificate has expired, danger, danger, turn back.
Your DNS records are not proxied, hence none of the page rules will fire.
You will need to enable proxying first, but in this case your certificate would not reach the client any longer but only the Cloudflare edge. Would proxying be okay with you? If so, I would suggest you switch your SSL mode temporarily to “Full” instead of “Full strict”. In this case Cloudflare will accept the expired certificate. Once you have renewed your certificate you should switch back to “Full strict” or simply disable proxying again.
If proxying is not an option, it will be more difficult as you’d actually need to make sure there is a rewrite, however even the rewrite will not execute if the visitor does not confirm the expired certificate.
My advice would be to enable proxying and sort out the expired certificate as quickly as possible.
Thanks @sandro. I will check my account. I didn’t realize it had a setting to proxy the DNS. I assumed by virtue of using Cloudflare my DNS was proxied by default. Is there a downside to enabling proxying?
Oh, I think I see what you mean. I had SSL turned off. I had turned it to Flex because I thought that would allow visitor https access using the Cloudflare cert while Cloudflare connects to the host server as http. Then I read in the help for the SSL section that turning off SSL would automatically redirect visitors to http.
I have now turned it to Full and purged the cache. I am still not being redirected to http and I get the not-secure warning in the status bar.
Proxying is only enabled if the record is marked as , otherwise Cloudflare only provides DNS services for that record.
As for downsides, not really, respectively it depends. Your traffic will be routed through Cloudflare’s datacentres, where it will be partially cached. It can dramatially improve your response times, but sometimes also decrease performance. Another (security) aspect to consider is that your traffic will be temporarily decrypted on Cloudflare and then re-encrypted (assuming you dont use Cloudflare’s encryption breaker ) and sent on a separate connection to your server.
, otherwise Cloudflare only provides DNS services for that record.
) and sent on a separate connection to your server.