The ssl certificate of the Flexible type does not work on the site

[user41317]

Good day!

The ssl certificate of the Flexible type does not work on the site.

https://dash.cloudflare.com/96cee09ed7352f2003e12117776832fb/otvetovik.com

the certificate works, but not with all providers

Connected to otvetovik.com (172.67.215.176) port 443 (#0)

curl: (35) OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to otvetovik.com:443

at the same time if I change provider:

Connected to otvetovik.com (104.21.45.150) port 443 (#0)

connection successful!

[fritex]

@user41317

at the same time if I change provider:

I’d suggest you to contact your hosting provider about this. Double-check firewalls and configuration files for a web server.

May I ask what SSL option have you got selected under the SSL/TLS tab at Cloudflare dashboard for your domain ( Flexible, Full, Full Strict … )?

@user41317

The ssl certificate of the Flexible type does not work on the site.

Kindly, consider the feedback from article below:

Why flexible SSL mode is not the best choice

Flexible The connection between your visitor and Cloudflare is secured, but the connection between Cloudflare and your server is not. You will not need a certificate on your server for this mode. This option is NOT RECOMMENDED. Flexible makes your site only partially secure - it encrypts the connection between the visitor and Cloudflare - this means they see the in their browser and the site leaves the impression that it’s secure! However, the connection between Cloudflare and your orig…

Furthermore, before moving to Cloudflare, was your Website working over HTTPS connection?

You could determine this by:

1. Use the “Pause Cloudflare on Site” option from the Overview tab for your domain at dash.cloudflare.com .
2. The link is in the lower right corner of that page.
3. Give it five minutes to take effect, then make sure site is working as expected with HTTPS without any error
4. Check with your hosting provider / cPanel AutoSSL / Let’s Encrypt / Certbot / ACME and renew it in case if needed
5. Only then, when your website responds over HTTPS, you should un-pause Cloudflare and double-check your SSL/TLS setting to make sure it’s Full (Strict).

Here is a way to re-check if you correctly setup the SSL for your domain with Cloudflare:

Step 2: Setting up SSL with Cloudflare

This tutorial covers getting SSL working with Cloudflare in various different scenarios. This assumes you already have your website set up on Cloudflare with all your DNS records set to , if not - please visit Step 1. Do you want the website to use HTTPS?

Yes

Do you already have a valid SSL certificate installed on your server (i.e. does it already load over HTTPS with a )? Yes If your website already works over HTTPS, you can just set your SSL mode in Cloudflare to Full (strict)…

In case you do not have an SSL certificate, you can use Cloudflare SSL, if so, kindly make sure you follow the instructions as follows on the below article to setup an SSL certificate using Cloudflare Origin CA Certificate:

• https://developers.cloudflare.com/ssl/origin-configuration/origin-ca

Last but not least, kindly have a look here for more information regarding SSL settings at the SSL/TLS tab on Cloudflare dashboard:

Why you should choose Full Strict, and only Full Strict

Unencrypted & unverified connections Imagine you open Paypal and suddenly get that warning [image] Would you continue? Probably not. For decades leaders in IT security have advocated that people upgrade their sites from unencrypted HTTP to secure HTTPS. And for a reason, everything you send via an HTTP connection is sent in plain text and can be intercepted at any point between you and the server. Equally, you’d probably not proceed if you got such a warning, right? [image] That’s when th…