Setup a Cloudflare Origin Certificate for use on a backend server
-
There is one concern (not for me). The alt names can sometimes be not great (Unless they've changed that recently). Not many people would notice but for a business that might be an issue (not my site obviously).
-
looks pretty easy actually.
-
@JaredBusch said in Setup a Cloudflare Origin Certificate for use on a backend server:
looks pretty easy actually.
oh nice, that does look simple. I had to paste the different sections of the cert into the config page for GitLab Pages.
-
So likely when I need to renew my cert it will be less work to just flip that toggle than to generate the cert from cloudflare and paste it into GitLab. I won't need to do that for another year or two though.
-
@stacksofplates Since I setup my origin cert as a 15 year cert, I went ahead used it on GitLab pages. Totally get the point that it is simple either way though.
-
As an addendum to the original post.
- If you are using GitLab pages to host your site, as I am with my Hugo version of jaredbusch.com
- And you want to use the Cloudflare origin certificate, then you need to get Cloudflare's root CA cert also.
Cloudflare has an article about it that you can read here.
If you followed my guide above, you need to get the "ECC" version of the cert.
-
noob question here:
If you're hosting on Cloudflare, this should be used instead of LE? -
@FATeknollogee said in Setup a Cloudflare Origin Certificate for use on a backend server:
noob question here:
If you're hosting on Cloudflare, this should be used instead of LE?The website is hosted on GitLab Pages.
My DNS is on Cloudflare.Technically, these are unrelated things. Aside from the DNS needing to point to a server someplace.
If you turn off the proxy (orange cloud) on Cloudflare, then you can use the LE certificate on GitLab. GitLab should not be able to use an LE certificate if you have the proxy on, because Cloudflare is the MitM and the auth request should not pass through.
-
@FATeknollogee said in Setup a Cloudflare Origin Certificate for use on a backend server:
noob question here:
If you're hosting on Cloudflare, this should be used instead of LE?Not about "should", it's about which makes more sense for you in a given situation.
-
@scottalanmiller said in Setup a Cloudflare Origin Certificate for use on a backend server:
@FATeknollogee said in Setup a Cloudflare Origin Certificate for use on a backend server:
noob question here:
If you're hosting on Cloudflare, this should be used instead of LE?Not about "should", it's about which makes more sense for you in a given situation.
"could" would probably have been a better word choice.
-
@FATeknollogee said in Setup a Cloudflare Origin Certificate for use on a backend server:
@scottalanmiller said in Setup a Cloudflare Origin Certificate for use on a backend server:
@FATeknollogee said in Setup a Cloudflare Origin Certificate for use on a backend server:
noob question here:
If you're hosting on Cloudflare, this should be used instead of LE?Not about "should", it's about which makes more sense for you in a given situation.
"could" would probably have been a better word choice.
Yup, you definitely can
