News for hackers. Stuff that matters.
Re:Universal SSL by edent on Monday September 29, 2014 @09:20AM (#8382790)
Faster man! Faster! :-)

Thanks for doing this - such an excellent initiative.

Re:Universal SSL by jgrahamc on Monday September 29, 2014 @09:21AM (#8382796)
Since you ask so nicely I had your domain bumped up in the queue.
Re:Universal SSL by jgrahamc on Monday September 29, 2014 @11:29AM (#8383326)
And now...

    $ curl -v https://dabr.eu
    * Adding handle: conn: 0x7faa1c000000
    * Adding handle: send: 0
    * Adding handle: recv: 0
    * Curl_addHandleToPipeline: length: 1
    * - Conn 0 (0x7faa1c000000) send_pipe: 1, recv_pipe: 0
    * About to connect() to dabr.eu port 443 (#0)
    *   Trying 104.28.21.97...
    * Connected to dabr.eu (104.28.21.97) port 443 (#0)
    * TLS 1.2 connection using TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
    * Server certificate: sni10021.cloudflaressl.com
    * Server certificate: COMODO ECC Domain Validation Secure Server CA 2
    * Server certificate: COMODO ECC Certification Authority
    * Server certificate: AddTrust External CA Root
    > GET / HTTP/1.1
    > User-Agent: curl/7.30.0
    > Host: dabr.eu
    > Accept: */*
Re:Universal SSL by edent on Monday September 29, 2014 @12:01PM (#8383487)
You guys rock :-)

Better start updating my servers so they don't redirect wildly.

Re:Universal SSL by fishywang on Tuesday October 07, 2014 @06:43PM (#8424410)
After a week (or maybe a little earlier, I didn't check every day) I finally got my certifications. Thank you! But actually the https is broken because of mixed-content, caused by cloudflare.

My page declare css in relative path, like inc/style.css. Via cloudflare it becomes absolute http url, like http://mydomain.com/inc/A.style.css.pagespeed.cf.5Dzr782jVo.....

This won't work in https. You should change it to //, or better yet kept the relative path. Thanks.

Re:Universal SSL by vtlynch on Monday September 29, 2014 @11:36AM (#8383382)
Hi John,

I know Cloudflare will be announcing later today, but how will people be enabling Full SSL (Strict) with this new rollout?

I see these certs being issued out automatically are to subdomains at cloudflare. Will customers who want to enable Full SSL (Strict) be given the ability to enroll for another certificate for free that is issued to their Common Name via your site?

(Context from Cloudflare's announcement: " Later today we'll be publishing a blog with instructions on how to do that at no cost. Once you've installed a certificate on your web server, you can enable the Full or Strict SSL modes which encrypt origin traffic and provide a higher level of security.")

Re:Universal SSL by oliverdavenport on Monday September 29, 2014 @01:27PM (#8383902)
I would expect that they issue you a certificate signed by Cloudflare, which allows them to verify your server & encrypt the connection, but it would not be a trusted CA in users' browsers, but rather it would be trused by Cloudflare internally.