CloudFlare, SSL and unhealthy security absolutism

Re:CloudFlare, SSL and unhealthy security absolutism by ihunter on Tuesday August 30, 2016 @07:09AM (#12388967)

> Full: Still HTTPS from CloudFlare to the browser but they'll also talk HTTPS to the origin although they won't validate the certificate

This isn't true anymore. I would consistently get SSL invalid errors from them when trying this setup. You have to have a valid SSL cert for CF <-> Your server now it seems.

[ Parent | on HN ]

Re:CloudFlare, SSL and unhealthy security absolutism by prdonahue on Tuesday August 30, 2016 @09:29AM (#12389860)

If you're getting a 526 error, it's almost definitely because you had Full (Strict) mode enabled. Please reach out to https://support.cloudflare.com if you are still having difficulty and mention in the ticket that I sent you.

[ Parent | on HN ]

Re:CloudFlare, SSL and unhealthy security absolutism by icebraining on Tuesday August 30, 2016 @07:40AM (#12389122)

Are you sure you didn't select "Full (Strict)" ?

[ Parent | on HN ]