Website in redirect loop after enabling cloudflare ssl

[barryatAL]

Hi,

I setup my website and I changed my nameservers over to Cloudflare however my website got stuck and was showing ERR_TOO_MANY_REDIRECT. Disabling the SSL from clouldflare seems to have fixed it. Is this the correct fix?

Regards,

AL

[fritex]

@barryatAL

ERR_TOO_MANY_REDIRECT

Below article could help with some troubleshooting ideas:

Community Tip - Fixing ERR TOO MANY REDIRECTS

Error Try the suggestions in this Community Tip to help you fix ERR TOO MANY REDIRECTS. Background If your SSL setting on the SSL/TLS app is Flexible and if your origin server is configured to redirect HTTP requests to HTTPS, server responses back to Cloudflare are encrypted. Since Cloudflare is expecting HTTP traffic, it keeps resending the same request, resulting in a redirect loop. This causes browsers to display “The page isn’t redirecting properly” or “ERR_TOO_MANY_REDIRECTS” errors. [D…

May I ask what SSL option have you got selected under the SSL/TLS tab at Cloudflare dashboard for your domain ( Flexible, Full, Full Strict … )?

Before moving to Cloudflare, was your Website working over HTTPS connection?

Can you double-check if your web hosting provider issued an SSL certificate which is still a valid one for your domain(s)?

Before doing anything at Cloudflare settings, you could determine if you have a valid SSL certificate installed at the origin host/server by your web hosting provider or your own VPS/dedicated server following the steps from below:

1. Use the “Pause Cloudflare on Site” option from the Overview tab for your domain at dash.cloudflare.com .
2. The link is in the lower right corner of that page.
3. Give it five minutes to take effect.
4. Check with your hosting provider / cPanel AutoSSL / ACME.sh / Certbot / Let’s Encrypt or some other and renew it accordingly.
5. Make sure site is working as expected without any errors via HTTPS.
6. Only then should you un-pause Cloudflare and double-check your SSL/TLS setting to make sure it’s Full (Strict).

Here is a way to re-check if you correctly setup the SSL for your domain with Cloudflare:

Step 2: Setting up SSL with Cloudflare

This tutorial covers getting SSL working with Cloudflare in various different scenarios. This assumes you already have your website set up on Cloudflare with all your DNS records set to , if not - please visit Step 1. Do you want the website to use HTTPS?

Yes

Do you already have a valid SSL certificate installed on your server (i.e. does it already load over HTTPS with a )? Yes If your website already works over HTTPS, you can just set your SSL mode in Cloudflare to Full (strict)…

Last but not least, kindly have a look here for more information regarding correct SSL settings at the SSL/TLS tab on Cloudflare dashboard:

Why you should choose Full Strict, and only Full Strict

Unencrypted & unverified connections Imagine you open Paypal and suddenly get that warning [image] Would you continue? Probably not. For decades leaders in IT security have advocated that people upgrade their sites from unencrypted HTTP to secure HTTPS. And for a reason, everything you send via an HTTP connection is sent in plain text and can be intercepted at any point between you and the server. Equally, you’d probably not proceed if you got such a warning, right? [image] That’s when th…

@barryatAL

Disabling the SSL from clouldflare seems to have fixed it. Is this the correct fix?

Meaning you don’t have SSL certificate at your origin host

[barryatAL]

Hi,

I managed to resolve it by setting it to full strict.

Regards,

AL