I already have a meeting with them doing Zoom, they check DNS Cloudflare setting, and they also have no idea how to fix this since my universal SSL is activated in my setting
So am i missing something?
What i should do now to make SSL activated?
Really desperate about this, hope someone can help me
Sorry to bounce you back where you came from, but this isn’t a Cloudflare issue. That subdomain is unproxied and going directly to Pabbly. The certificate they are presenting is issued to custom.pabbly.com and not your domain, that’s something they need to fix.
This then shows the certificate presented, you san see that the only hostname listed on the certificate is payments.pabbly.com.
This looks like their default certificate, but if they support custom domains, then need to issue a certificate for the custom hostname payments.si.co.id and serve that instead, for HTTPS to work.
I’m afraid I can’t really say more than that, I don’t know anything about their setup and this is unrelated to Cloudflare. They just need to ensure that a valid certificate for your custom domain is presented.
I would never recommend sharing your account credentials with anyone. Only trusted parties should have access, and even then Cloudflare has the facility to invite users to an account without having to send your credentials.
Reading through their docs, the way they want you to setup SSL at Cloudflare is not secure and simply hides the fact that they do not have a certificate for your domain. If they want to offer custom domains with HTTPS, they will need to provide that. Using Cloudflare as they describe it would encrypt the connection from your users to Cloudflare, but the certificate between Cloudflare and Pabbly cannot be verified as it is not valid for your site. This is an insecure setup, and is especially bad for a provider that appears to accept payments.
The only suggestion I can offer is what I said yesterday, I’m afraid. Pabbly need to issue a certificate for payments.si.co.id on their end. You can then consider proxying through Cloudflare if you want, but the key thing is that there must be a certificate for your domain on Pabbly’s end.
Otherwise, they can use any CA to get a certificate. They already use Let’s Encrypt for their own site, which is completely free. They could also use that to issue certs for custom domains
Emphasising this again, just for anyone coming across this. Never, never, never share your Cloudflare credentials with anyone and, ideally, never share API tokens as well, especially the global ones. Do create specific tokens for specific functionalities when required.
I’ll never share the credential to them. Thank for your advice.
I think Pabbly is lack of technical expert in SSL right now since it seem they confuse with their SSL setting itself
I’m really sure that this case is not related to UI change and does not require any access to our CF account.
Should I buy a new domain account using another credential so they can make progress?
I don’t want to get stuck because all the reasons do not make sense to me.
I already give them solutions from you guys, @domjh@matteo
But they insist on getting the credential, and I worry they don’t have a tech team capable of understanding this situation and try to make reasons and impossible requirements that can hold me?
What if this case because the domain is not transferred to Cloudflare?
Should I transfer the domain into Cloudflare first instead connect using nameserver?
I’m trying hard to understand these technical things (I’m not a technical guy)
Im so frustated setting these things