Cloudflare Developers•2y ago

Usually it's because the service behind Cloudflare doesn't know that it's running on HTTPS. You need

Usually it's because the service behind Cloudflare doesn't know that it's running on HTTPS. You need to:

deploy a certificate to the server behind Cloudflare, either a real certificate, or a Cloudflare Origin Certificate that you can download on the dashboard
change your SSL mode from Flexible to Full (Strict)

IIsaac McFadyen Usually it's because the service behind Cloudflare doesn't know that it's runnin...

John•3/14/24, 12:39 PM

it's an ELB not a single server

JJohn it's an ELB not a single server

Isaac McFadyenOP•3/14/24, 12:39 PM

Does ELB have an option to enable HTTPS or allow you to upload your own certificate?

Isaac McFadyenOP•3/14/24, 12:40 PM

If not you might need to put Cloudfront in front of it and then point Cloudflare to Cloudfront, which is non-ideal but would work.

Isaac McFadyenOP•3/14/24, 12:40 PM

The danger with leaving it on Flexible mode is that Flexible pretends like your site is encrypted when it's really not:

User -> Cloudflare: HTTPS
Cloudflare -> ELB: insecure HTTP (but the user can't tell that)

Isaac McFadyenOP•3/14/24, 12:41 PM

Flexible effectively tricks the user into thinking the connection is secure when it's not, which is quite bad for e.g. logins or payment portals.

IIsaac McFadyen If not you might need to put Cloudfront in front of it and then point Cloudflare...

John•3/14/24, 12:43 PM

yes, the certificate is already on the ELB. That's how it was working before.

JJohn yes, the certificate is already on the ELB. That's how it was working before.

Isaac McFadyenOP•3/14/24, 12:43 PM

OK, is your SSL set to Full (Strict) on the Cloudflare dashboard?

John•3/14/24, 12:44 PM

you are right

John•3/14/24, 12:44 PM

changed to full strict and worked

John•3/14/24, 12:44 PM

thank you

Isaac McFadyenOP•3/14/24, 12:44 PM

Awesome, glad it's working now

Isaac McFadyenOP•3/14/24, 12:44 PM

No problem!

Defxs•3/14/24, 1:44 PM

Hi all, found the discord server after trying to find some support. Hope anybody can help. I am using the cloudflare proxy for my woocommerce app. However, when calling the rest api of woocommerce it gives a 520 error only with cloudflare enabled. Without cloudflare proxy the issue is solved. I can't find anything on my server (log). Does anyone know If I can find any logging in cloudflare on the free plan? Or perhaps what the issue could be? Thank you very much!

Shake•3/14/24, 5:49 PM

Hello

Hajindar Sins•3/14/24, 6:04 PM

Has anybody here tunneled a postgres connection through zero tunnel and tried accessing it with cloudflared cli?

HHajindar Sins Has anybody here tunneled a postgres connection through zero tunnel and tried ac...

fernvenue•3/14/24, 10:12 PM

Yea.

Hajindar Sins•3/14/24, 11:03 PM

Nevermind! I got it sorted

Hajindar Sins•3/14/24, 11:05 PM

We recently switched to gcp and following the model of not exposing services to public (We used to just rely on firewalls)

Hajindar Sins•3/14/24, 11:06 PM

So now my pipelines and stuff are failing whenever dbs are needed. So zero trust over there is still kinda nice because can use service token to mess around

Hajindar Sins•3/14/24, 11:07 PM

But I underestimated subnets and made a fool of myself

JoaoCorreia•3/15/24, 1:17 AM

hey I deployed an app that works locally with React but when deploying through cloudflare shows me the Default React App page, what am I doing wrong?

Andy•3/15/24, 2:39 AM

hmm thanks for the cache cloudflare

Tekatren (Djkáťo)•3/15/24, 9:48 AM

Does the Upcoming Let's Encrypt certificate chain changeLet's Encrypt certificate chain change affect Origin server certificates, or are those signed by cloudflare specifically?

Erisa•3/15/24, 9:54 AM

That doesn't impact origin certificates, only edge certificates

JoeDoe•3/15/24, 10:33 AM

how do I redirect my old domain to a new one?

BBhunter service bindings can only be used with workers not pages function?

Hello, I’m Allie!•3/15/24, 11:18 AM

It works with both

BBhunter I want to bind pages service into other page service

Hello, I’m Allie!•3/15/24, 11:19 AM

Oh yeah, you can't do that. You can bind from Workers -> Workers, and Pages -> Workers, but not Pages -> Pages, or Workers -> Pages

Kuro•3/15/24, 12:10 PM

anyone elses email worker 3500 lines of code :)

Vikash•3/15/24, 12:15 PM

How to do DKIM verification with Cloudflare DNS?

I need to verify my domain to send email via Mandrill, so entered the CNAME records > but the Mailchimp/Mandrill is unable to verify it even after many hours.

All other domains hosted in AWS route53 verified immediately without any issue, but unable to verify my domains on CF.

VVikash How to do DKIM verification with Cloudflare DNS? I need to verify my domain to ...

Hello, I’m Allie!•3/15/24, 12:23 PM

Try disabling the proxy?

HHello, I’m Allie!Try disabling the proxy?

Vikash•3/15/24, 1:44 PM

Worked thanks.

I think CF should auto-disable that while creating a record for other then *.pages.dev*.pages.dev

VVikash Worked thanks. I think CF should auto-disable that while creating a record for...

Hello, I’m Allie!•3/15/24, 1:55 PM

You would want a CNAME when you are proxying an HTTP app

VVikash Worked thanks. I think CF should auto-disable that while creating a record for...

dave•3/15/24, 1:59 PM

well, if you use something like awstrack.me, you have to have CF proxying enabled if you want SSL to work.

Milso•3/15/24, 2:32 PM

Hello is there a way to reset a users MFA? Im setup as a super admin and one of the staff here did not save there backup codes and reset there phone.

lukas•3/15/24, 6:25 PM

I randomly get this error CODE_MOVED for unknown code blockCODE_MOVED for unknown code block during dev mode. What does this mean? Can't seem to pinpoint it. Unless its just miniflare doing it