Nameserver migrated to cloudflare from locaweb but flexible SSL not issued?

It just does not work at all, it says there's no SSL and then I get an infinite redirect loop
11 Replies
Cyb3r-Jak3
Cyb3r-Jak315mo ago
Do you not have a certificate under https://dash.cloudflare.com/?to=/:account/:zone/ssl-tls/edge-certificates ? What is your domain that you are trying to access
Picolé
PicoléOP15mo ago
The universal SSL is in there and active *.carteirafundos.com.br, carteirafundos.com.br Universal 2024-02-07 (Managed) the website is proxied by cloudflare
Cyb3r-Jak3
Cyb3r-Jak315mo ago
Try changing your SSL mode to Full (strict). Something is causing a redirect loop
Picolé
PicoléOP15mo ago
let me try I thought the redirect loop was caused because of the HTTPS always redirect but I disabled it and still can't go into http version im really out of ideas already changing to FULL worked, but why? Locaweb had it's lets encrypt cert in there, but the cloudflare one should replace it, no? like load in front of it making their SSL useless
Cyb3r-Jak3
Cyb3r-Jak315mo ago
Cloudflare defaults Flexible SSL which means it will try to make requests to your origin server in http. This causes a loop as your origin is going to redirect to https.
No description
Cyb3r-Jak3
Cyb3r-Jak315mo ago
Cloudflare provides SSL from user -> Cloudflare you still need SSL for Cloudflare -> origin
Picolé
PicoléOP15mo ago
makes sense, so if I want to use flexible I need to make sure the origin does not redirect back, right? well thanks for the help really appreciate
Cyb3r-Jak3
Cyb3r-Jak315mo ago
Please don't use flexible, you are essentially lying to your users that you have SSL
Picolé
PicoléOP15mo ago
that's true, but if it's that bad why even give the option? it's kinda of a lie, if they don't care about the whole trip :P
Cyb3r-Jak3
Cyb3r-Jak315mo ago
Yeah it really shouldn't be available much less the default but it was added like that a while ago
Chaika
Chaika15mo ago
Relic of the legacy internet where ssl certs were harder to get/ssl was less supported

Did you find this page helpful?