ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Cloudflare SSL - Do You Use Or Not?

    Scheduled Pinned Locked Moved IT Discussion
    cloudflare
    25 Posts 9 Posters 2.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • black3dynamiteB
      black3dynamite @NashBrydges
      last edited by

      @nashbrydges said in Cloudflare SSL - Do You Use Or Not?:

      @black3dynamite @scottalanmiller Is there any benefit in using CF's SSL? I only see this as confusing if users verefy the cert in their browser. Granted, that's likely a pretty rare thing but still. Any specific reason for using it vs not? You're using it just because it's there?

      I use the non strict Full SSL because I have some self-signed certs.

      JaredBuschJ NashBrydgesN 2 Replies Last reply Reply Quote 1
      • JaredBuschJ
        JaredBusch @black3dynamite
        last edited by

        @black3dynamite said in Cloudflare SSL - Do You Use Or Not?:

        @nashbrydges said in Cloudflare SSL - Do You Use Or Not?:

        @black3dynamite @scottalanmiller Is there any benefit in using CF's SSL? I only see this as confusing if users verefy the cert in their browser. Granted, that's likely a pretty rare thing but still. Any specific reason for using it vs not? You're using it just because it's there?

        I use the non strict Full SSL because I have some self-signed certs.

        Same here.

        1 Reply Last reply Reply Quote 0
        • NashBrydgesN
          NashBrydges @black3dynamite
          last edited by

          @black3dynamite said in Cloudflare SSL - Do You Use Or Not?:

          @nashbrydges said in Cloudflare SSL - Do You Use Or Not?:

          @black3dynamite @scottalanmiller Is there any benefit in using CF's SSL? I only see this as confusing if users verefy the cert in their browser. Granted, that's likely a pretty rare thing but still. Any specific reason for using it vs not? You're using it just because it's there?

          I use the non strict Full SSL because I have some self-signed certs.

          That would be a good use-case scenario. Thanks.

          1 Reply Last reply Reply Quote 1
          • FATeknollogeeF
            FATeknollogee
            last edited by

            I use CF for DNS & as domain registrar.
            My web hosting is done somewhere else.

            I'm trying to use LE certs (at my web hoster) but the dns-01 validation is failing.

            What am I doing wrong?

            black3dynamiteB travisdh1T 2 Replies Last reply Reply Quote 1
            • black3dynamiteB
              black3dynamite @FATeknollogee
              last edited by

              @FATeknollogee said in Cloudflare SSL - Do You Use Or Not?:

              dns-01

              Not sure what that is but could this help?

              Cloud Flare hook bash for dehydrated - DNS-01 Challenge Let's Encrypt
              https://github.com/sineverba/cfhookbash

              1 Reply Last reply Reply Quote 0
              • travisdh1T
                travisdh1 @FATeknollogee
                last edited by

                @FATeknollogee said in Cloudflare SSL - Do You Use Or Not?:

                I use CF for DNS & as domain registrar.
                My web hosting is done somewhere else.

                I'm trying to use LE certs (at my web hoster) but the dns-01 validation is failing.

                What am I doing wrong?

                You'll need a cloudflare api key and the registered email in a file. Mine is in /root/.secrets/cloudlfare.ini, which has 2 lines

                dns_cloudflare_email = [email protected]
dns_cloudflare_api_key = your key

                Then you can:

                certbot2 certonly --dns-cloudflare-credentials /root/.secret/cloudflare.ini --renew-by-default -d domain.com -d subdomain.domain.com

                You do have to list all domains and subdomains you want the cert to be valid for in the command. I have mine scripted to run once every day.

                dbeatoD 1 Reply Last reply Reply Quote 0
                • dbeatoD
                  dbeato @travisdh1
                  last edited by

                  @travisdh1 said in Cloudflare SSL - Do You Use Or Not?:

                  @FATeknollogee said in Cloudflare SSL - Do You Use Or Not?:

                  I use CF for DNS & as domain registrar.
                  My web hosting is done somewhere else.

                  I'm trying to use LE certs (at my web hoster) but the dns-01 validation is failing.

                  What am I doing wrong?

                  You'll need a cloudflare api key and the registered email in a file. Mine is in /root/.secrets/cloudlfare.ini, which has 2 lines

                  dns_cloudflare_email = [email protected]
dns_cloudflare_api_key = your key

                  Then you can:

                  certbot2 certonly --dns-cloudflare-credentials /root/.secret/cloudflare.ini --renew-by-default -d domain.com -d subdomain.domain.com

                  You do have to list all domains and subdomains you want the cert to be valid for in the command. I have mine scripted to run once every day.

                  Yep, I have it that way for my home as I cannot get SSL since my ISP blocks port 80.

                  1 Reply Last reply Reply Quote 0
                  • JaredBuschJ
                    JaredBusch
                    last edited by

                    I just don't wan tto take the time to convert everything. I have been using LE for so long...

                    black3dynamiteB 1 Reply Last reply Reply Quote 0
                    • black3dynamiteB
                      black3dynamite @JaredBusch
                      last edited by

                      @JaredBusch said in Cloudflare SSL - Do You Use Or Not?:

                      I just don't wan tto take the time to convert everything. I have been using LE for so long...

                      Why would you have to convert? Is this a new way of getting certs now?

                      JaredBuschJ 1 Reply Last reply Reply Quote 0
                      • FATeknollogeeF
                        FATeknollogee
                        last edited by FATeknollogee

                        @dbeato @travisdh1
                        Are you guys doing this on a VPS or you have a self-hosted web server?

                        travisdh1T dbeatoD 2 Replies Last reply Reply Quote 0
                        • travisdh1T
                          travisdh1 @FATeknollogee
                          last edited by

                          @FATeknollogee said in Cloudflare SSL - Do You Use Or Not?:

                          @dbeato @travisdh1
                          Are you guys doinf this on a VPS or you have a self-hosted web server?

                          Mine is a self hosted server with an nginx proxy handling all external traffic. Should work the same with a VPS when using cloudflare for DNS.

                          1 Reply Last reply Reply Quote 0
                          • JaredBuschJ
                            JaredBusch @black3dynamite
                            last edited by

                            @black3dynamite said in Cloudflare SSL - Do You Use Or Not?:

                            @JaredBusch said in Cloudflare SSL - Do You Use Or Not?:

                            I just don't wan tto take the time to convert everything. I have been using LE for so long...

                            Why would you have to convert? Is this a new way of getting certs now?

                            Yes. This would allow us to use CloudFlare again. When I first switched to LE, I had to manually disable CloudFlare (uncheck the orange cloud), wait a minute, then run the LE renew, then reenable CloudFlare.

                            Certbot eventually came out with a plugin that you could use the CloudFlare API to enable, and disable during the process. But, by then, I had already just disabled CloudFare proxying all my sites that use LE.

                            Now, with DNS verificaiton, I can turn everything back on and not even need the API to enable/disable. But I will need to take the time to set things back up again.

                            1 Reply Last reply Reply Quote 1
                            • B
                              Baldwin_Cannon
                              last edited by Baldwin_Cannon

                              In principle, the combination of both will be appropriate for better safety of the web site. Only along with the above, I also use other types of SSL such as there https://hostovita.pl/ssl/

                              1 Reply Last reply Reply Quote 0
                              • stacksofplatesS
                                stacksofplates
                                last edited by

                                I use the actual CloudFlare certs that they give you also. Not just clicking the cloud. I use GitLab pages to host my blog and LetsEncrypt renewal is still manual there. So I got a free cert from CloudFlare which is good for 15 years and used that instead.

                                black3dynamiteB 1 Reply Last reply Reply Quote 0
                                • dbeatoD
                                  dbeato @FATeknollogee
                                  last edited by

                                  @FATeknollogee said in Cloudflare SSL - Do You Use Or Not?:

                                  @dbeato @travisdh1
                                  Are you guys doing this on a VPS or you have a self-hosted web server?

                                  On both.

                                  1 Reply Last reply Reply Quote 0
                                  • black3dynamiteB
                                    black3dynamite @stacksofplates
                                    last edited by

                                    @stacksofplates said in Cloudflare SSL - Do You Use Or Not?:

                                    I use the actual CloudFlare certs that they give you also. Not just clicking the cloud. I use GitLab pages to host my blog and LetsEncrypt renewal is still manual there. So I got a free cert from CloudFlare which is good for 15 years and used that instead.

                                    Are you talking about the Universal SSL (Shared) or the Origin Certficates?
                                    cb34ea8f-0d1b-4dc1-83df-82d9ef5345a7-image.png

                                    stacksofplatesS 1 Reply Last reply Reply Quote 0
                                    • stacksofplatesS
                                      stacksofplates @black3dynamite
                                      last edited by

                                      @black3dynamite said in Cloudflare SSL - Do You Use Or Not?:

                                      @stacksofplates said in Cloudflare SSL - Do You Use Or Not?:

                                      I use the actual CloudFlare certs that they give you also. Not just clicking the cloud. I use GitLab pages to host my blog and LetsEncrypt renewal is still manual there. So I got a free cert from CloudFlare which is good for 15 years and used that instead.

                                      Are you talking about the Universal SSL (Shared) or the Origin Certficates?
                                      cb34ea8f-0d1b-4dc1-83df-82d9ef5345a7-image.png

                                      Origin.

                                      1 Reply Last reply Reply Quote 2
                                      • 1
                                      • 2
                                      • 1 / 2
                                      • First post
                                        Last post