Hosted DNS questions
-
@wscsuperfan said in Hosted DNS questions:
When using it, and setting CF to force SSL, do I need to do anything at my webhost with the SSL cert I already have with them? I notice that now, when proxied, the site shows the CF cert.
CF is a proxy, so it has separate SSL certs and settings from your server. You can skip SSL altogether on your server and CF will serve out SSL for you just fine. Or you can self sign. Or use a formal LetsEncrypt or whatever. This will change your "strict" style options with CloudFlare, but in all cases you can use CF's SSL when proxied whether the site has its own SSL or not.
-
@wscsuperfan said in Hosted DNS questions:
I assume everyone is using the "proxy" feature of Cloudflare?
When using it, and setting CF to force SSL, do I need to do anything at my webhost with the SSL cert I already have with them? I notice that now, when proxied, the site shows the CF cert.
The end users will see the CF cert all the time.
What your local cert protects is the communication between CF and your server. CF also have certs available to encrypt the traffic between your server and CF, I think they're even free.
-
@travisdh1 said in Hosted DNS questions:
CF also have certs available to encrypt the traffic between your server and CF, I think they're even free.
They are free.
-
@travisdh1 said in Hosted DNS questions:
@wscsuperfan said in Hosted DNS questions:
I assume everyone is using the "proxy" feature of Cloudflare?
When using it, and setting CF to force SSL, do I need to do anything at my webhost with the SSL cert I already have with them? I notice that now, when proxied, the site shows the CF cert.
The end users will see the CF cert all the time.
What your local cert protects is the communication between CF and your server. CF also have certs available to encrypt the traffic between your server and CF, I think they're even free.
Good to know
Thanks
-
@scottalanmiller said in Hosted DNS questions:
@travisdh1 said in Hosted DNS questions:
CF also have certs available to encrypt the traffic between your server and CF, I think they're even free.
They are free.
And I have a guide on here on how to use one
-
@JaredBusch said in Hosted DNS questions:
@scottalanmiller said in Hosted DNS questions:
@travisdh1 said in Hosted DNS questions:
CF also have certs available to encrypt the traffic between your server and CF, I think they're even free.
They are free.
And I have a guide on here on how to use one
Sweet.....I'll go look for it. Thanks
-
@wscsuperfan said in Hosted DNS questions:
@JaredBusch said in Hosted DNS questions:
@scottalanmiller said in Hosted DNS questions:
@travisdh1 said in Hosted DNS questions:
CF also have certs available to encrypt the traffic between your server and CF, I think they're even free.
They are free.
And I have a guide on here on how to use one
Sweet.....I'll go look for it. Thanks