Cloudflare SSL Cloudflare free SSL in mid-October

eva2000 · Aug 8, 2014

Looks like Cloudflare is stepping up it's game for CDN served via SSL Google Now Factoring HTTPS Support Into Ranking; CloudFlare On Track to Make it Free and Easy | CloudFlare Blog

Update: Cloudflare Free Universal SSL FAQ

Google Ranks Crypto
First, Google just announced that they will begin taking into account whether a site supports HTTPS connections in their ranking algorithm. This means that if you care about SEO then ensuring your site supports HTTPS should be a top priority. Kudos to Google to giving webmasters a big incentive to add SSL to their sites.
Click to expand...

Lazy Loading Certs
Last week we pushed new code that allows us to "lazy load" SSL certificates on demand. This means that a certificate only needs to be in a data center, not on a particular server, before HTTPS traffic needing the certificate is directed to that server. When a request is received, the server can now dynamically retrieve the correct certificate even if it hasn't been previously loaded into memory. This allows us to continue to shift traffic to manage our network even if we are managing SSL certificates for millions of domains.

We're on track to roll out SSL for all CloudFlare customers by mid-October. When we do, the number of sites that support HTTPS on the Internet will more than double. That they'll also rank a bit higher is pretty cool too.
Click to expand...

Peter Downey · Aug 8, 2014

Looking at the comments of that post, one of their engineers noted that while their SSL cert will be available to all free users, if you already have a different key you'll need to convert to a paid cloud flare account to use it.

Sounds like they are forcing you to upgrade if you want to keep control and also use cloudflare. Otherwise you'll have to abandon your previous key and use theirs to remain as a free cloudflare account.

Seems complicated If you ask me.

eva2000 · Aug 8, 2014

@Peter Downey nice pickup, I didn't read it 100% so didn't see that part. Makes sense in a way, if they are automating their SSL process Cloudflare CFSSL Tookit for TLS/SSL | Centmin Mod Community then they don't incur overhead for man hours. While using an end users SSL certificate would involve man hours.

rdan · Aug 8, 2014

Good Moved.
But still Cloudflare has 20% downtime for me.
I just tried them this month, still the same issue.

eva2000 · Aug 8, 2014

RoldanLT said: ↑

Good Moved.
But still Cloudflare has 20% downtime for me.
I just tried them this month, still the same issue.
Click to expand...

for their CDN or even their DNS was down ?

rdan · Aug 8, 2014

For their CDN.
Their DNS works perfect!
I don't have problem with their DNS

eva2000 · Sep 29, 2014

oooh Introducing Universal SSL

The team at CloudFlare is excited to announce the release of Universal SSL™. Beginning today, we will support SSL connections to every CloudFlare customer, including the 2 million sites that have signed up for the free version of our service.

This morning we began rolling out the Universal SSL across all our current customers. We expect this process to be complete for all current customers before the end of the day. Yesterday, there were about 2 million sites active on the Internet that supported encrypted connections. By the end of the day today, we'll have doubled that.

For new customers who sign up for CloudFlare's free plan, after we get through provisioning existing customers, it will take up to 24 hours to activate Universal SSL. As always, SSL for paid plans will be provisioned instantly upon signup.
Click to expand...

logged into my Cloudflare account and see this popup

looks like not yet fully rolled out to existing customers

Looks like eventually Cloudflare will support ECC SSL certificates using ECDSA key exchange mechanism - which is something I have already been playing with for Centmin Mod Nginx SPDY SSL with live test site setup with Centmin Mod Nginx SPDY SSL + ECC 256 bit SSL certificate and ECDSA signatures at sslspdy.com (see SSL - ECC 256 bit vs RSA 2048 bit SSL and Nginx - Centmin Mod Nginx VHOST SPDY SSL Generator testing)

Also current Cloudflare's free SSL certificates do not support HSTS headers.

While Universal SSL on our free service requires a modern browser, CloudFlare's paid plans have always and will always support both modern and legacy browsers. In the coming months, because of the benefits of ECDSA certificates, we plan on offering paid users the option to return ECDSA certificates if we detect a modern browser, while reverting to RSA certificate if we detect a legacy browser.

If SSL is a must-have for you, we still recommend using a paid CloudFlare plan (which start as inexpensively as $20/month). If SSL is a nice-to-have, support on the free plan is likely sufficient to serve the vast majority visitors from most regions around the world. Note finally that Universal SSL does not disable your ability to accept unencrypted traffic. HTTP will continue to work as it always has before. You can, however, now use CloudFlare's Page Rules to force all traffic to HTTPS even if you're a free customer. (PS - Going forward, also we plan to support the ability to add HSTS headers.)
Click to expand...

#savetheweb
If you are already a CloudFlare customer, we're rolling out Universal SSL throughout the day today. We expect it will be fully provisioned for most current customers within the next 24 hours. If you're a new customer, note that it will take up to 24 hours from when you sign upto provision SSL for our free service (and, again, if you're in a hurry, it's still instant for all paid plans).

One final note: if you signed up for CloudFlare through one of our hosting partners, it will be a bit longer before we can enable Universal SSL. This is due to a technical limitation on how we need to provision the Universal SSL certificates. We think we can solve the technical limitation and expect that we'll be able to support Universal SSL through partners before the end of the year. Until then, hang tight.
Click to expand...

eva2000 · Sep 30, 2014

tried it on one of my Cloudflare domains for flexible SSL and not quite there yet

Flexible SSL uses SHA1
Invalid certificate as domain name doesn't match right now - will take up to 24hrs for activation

rdan · Sep 30, 2014

Generally, if you're running a browser that is less than 6 years old, your browser is modern and Univeral SSL on CloudFlare's free plans will work. The two biggest problem children legacy browers are:

Internet Explorer on Windows XP (or older)

Android pre-Ice Cream Sandwich

We've been studying browser traffic for the last year in order to determine what percentage of requests come from browsers that qualify as modern. The answer veries widely depending on the region. Globally, more than 80% of requests come from modern browsers, and that percentage is growing quickly.
Click to expand...

Luckily Philippines has 94.43% using Modern Browser

eva2000 · Sep 30, 2014

yeah well we as webmasters and forum owners can do our bit to help Browser Update Reminder | Centmin Mod Community

rdan · Sep 30, 2014

Just tried and it didn't work instant, How long should I wait for it to be activated ?
The domain I tested is already using Cloudflare for months.

eva2000 · Sep 30, 2014

RoldanLT said: ↑

Just tried and it didn't work instant, How long should I wait for it to be activated ?
The domain I tested is already using Cloudflare for months.
Click to expand...

for activating SSL on free Cloudflare plan can take up to 24hrs. Been ~7hrs for me, and still hasn't been fully activated for me. Guess just need to wait for Cloudflare to activate their free Flexible SSL service

BamaStangGuy · Sep 30, 2014

Giving this a go on https://www.orchidsforum.com/

rdan · Sep 30, 2014

BamaStangGuy said: ↑

Giving this a go on https://www.orchidsforum.com/
Click to expand...

I just replied on XF community

rdan · Sep 30, 2014

Universal SSL: Be just a bit more patient

eva2000 · Sep 30, 2014

RoldanLT said: ↑

Universal SSL: Be just a bit more patient
Click to expand...

Ah looks like >48hrs for SSL to activate then. Just as well it was on one of my very little traffic project domains

BamaStangGuy · Oct 1, 2014

Reverted back OrchidsForum until the dust settles. Not ready to pay for Cloudflare but willing to give it a trial run on an SSL site once they catch up.

CarlosMST · Oct 1, 2014

Hi, today I configured CloudFlare in my site with an existed SSL certificate, but now when I tested in SSL Labs appears two IPs and the result Grade M, and appears a message about Certificate name mismatch.
Is this normal? How to fix this?
Thanks!

eva2000 · Oct 1, 2014

CarlosMST said: ↑

Hi, today I configured CloudFlare in my site with an existed SSL certificate, but now when I tested in SSL Labs appears two IPs and the result Grade M, and appears a message about Certificate name mismatch.
Is this normal? How to fix this?
Thanks!
Click to expand...

normal - read Universal SSL: Be just a bit more patient

eva2000 · Oct 2, 2014

For folks using Centmin Mod Nginx and thinking of using Cloudflare's free SSL certificate offer see some setup instructions at SSL - Cloudflare Flexible SSL, Nginx & XenForo

Log in / Register

Forums

Learn about Centmin Mod LEMP Stack today

Cloudflare SSL Cloudflare free SSL in mid-October

eva2000 Administrator Staff Member

Peter Downey Member

eva2000 Administrator Staff Member

rdan Well-Known Member

eva2000 Administrator Staff Member

rdan Well-Known Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

rdan Well-Known Member

eva2000 Administrator Staff Member

rdan Well-Known Member

eva2000 Administrator Staff Member

BamaStangGuy Active Member

rdan Well-Known Member

rdan Well-Known Member

eva2000 Administrator Staff Member

BamaStangGuy Active Member

CarlosMST Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

.

Log in / Register

Useful Searches

Learn about Centmin Mod LEMP Stack today

Cloudflare SSL Cloudflare free SSL in mid-October

eva2000 Administrator Staff Member

Peter Downey Member

eva2000 Administrator Staff Member

rdan Well-Known Member

eva2000 Administrator Staff Member

rdan Well-Known Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

rdan Well-Known Member

eva2000 Administrator Staff Member

rdan Well-Known Member

eva2000 Administrator Staff Member

BamaStangGuy Active Member

rdan Well-Known Member

rdan Well-Known Member

eva2000 Administrator Staff Member

BamaStangGuy Active Member

CarlosMST Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

.