boborama
CDCloudflare Developers
•Created by boborama on 10/24/2024 in #general-help
Certs on origin servers...
12 replies
CDCloudflare Developers
•Created by boborama on 10/24/2024 in #general-help
Certs on origin servers...
Origin certs are sane - and in production with many users.
The 'how to setup with CloudFlare' docs do say to use 'Full' - but don't specify 'don't use Full (Strict)'.
Thank you for everything. Do you have a preferred tip-jar?
12 replies
CDCloudflare Developers
•Created by boborama on 10/24/2024 in #general-help
Certs on origin servers...
There goes that idea then 🙂
Is there any way to diagnose which part of the origin cert isn't matching?
12 replies
CDCloudflare Developers
•Created by boborama on 10/24/2024 in #general-help
Certs on origin servers...
Thank you @Chaika btw - this is really helping.
12 replies
CDCloudflare Developers
•Created by boborama on 10/24/2024 in #general-help
Certs on origin servers...
Oooooooh, that makes sense - I just didn't parse the sentence that way at all.
I have no control over the origin at all, so can't do anything with the certs there.
That said, although the certs on the origin don't match the client (pineapple in your example) they should match the target (azureisslow.com)
Does it check wildcards and SANs? or does 'match' mean CN==target with no variations?
12 replies