Killtran
Killtran
PostsComments
CDCloudflare Developers
Created by Killtran on 3/13/2024 in #general-help
Can we provide Cloudflared a truststore for certificates ?
Hello everyone, During initial connection to Cloudflare, I have the following error that I suspect to be a CA missing to the client to ensure its connectivity. How can I feed it with a CAFolder to trust ? eg: 
/usr/local/share/ca-certificates on Linux
/usr/local/share/ca-certificates on Linux
Unable to establish TLS connection with server (Certificate verify failed: unable to get local issuer certificate). Trying to establish TLS with client anyway. If you plan to redirect requests away from this server, consider setting `connection_strategy` to `lazy` to suppress early connections.
Unable to establish TLS connection with server (Certificate verify failed: unable to get local issuer certificate). Trying to establish TLS with client anyway. If you plan to redirect requests away from this server, consider setting `connection_strategy` to `lazy` to suppress early connections.
Many thanks 🙂
6 replies
CDCloudflare Developers
Created by Killtran on 3/12/2024 in #general-help
is there any way to use Cloudflare tunnels behind a corporate proxy ?
Hi everyone, Like corporate companies, there are proxies that avoid having a direct connection to internet. I am looking to a way of connecting the cloudflared agent via the proxy. I've set up an Apache proxy and works pretty fine with curl (requests are logged properly) but no way to get the cloudflared application to go through : nothing in the logs that shows an attempt of using it :/ Here is the command I use for my attempts … 
./cloudflared-linux-arm64 tunnel --no-autoupdate --protocol http2 --loglevel debug --logfile /tmp/cloudflare.log  --proxy-address localhost --proxy-port 9245 --protocol http2   run --token ${CLOUDFLARE_TOKEN}
./cloudflared-linux-arm64 tunnel --no-autoupdate --protocol http2 --loglevel debug --logfile /tmp/cloudflare.log  --proxy-address localhost --proxy-port 9245 --protocol http2   run --token ${CLOUDFLARE_TOKEN}
Many thanks for your help
1 replies
CDCloudflare Developers
Created by Killtran on 2/13/2024 in #general-help
Client Certification CN validation during mTLS
Hi everyone, I hope you're all doing great. I would have a request regarding the Cloudflare Zero Trust Tunnels connectivity and mTLS. I have been successfully configuring the WAF to enforce mTLS connections, but I cannot find any way to check the FQDN of the certificate coming in. I have a use case where I would need to protect 2 different endpoints and to ensure a complete security I would like to add the extra mile of verification so the two flows would be segregated. I know the topic of certificates might be looping around a few times, but could get hands on what I am looking for. Thanks for helping out.
2 replies