Welcome to Centmin Mod Community
Register Now

Cloudflare SSL Cloudflare free SSL in mid-October

Discussion in 'Domains, DNS, Email & SSL Certificates' started by eva2000, Aug 8, 2014.

  1. BamaStangGuy

    BamaStangGuy Premium Member Premium Member

    651
    189
    43
    May 25, 2014
    Ratings:
    +264
    Local Time:
    10:03 PM
    3 hours left until they are supposed to be caught up.
     
  2. BamaStangGuy

    BamaStangGuy Premium Member Premium Member

    651
    189
    43
    May 25, 2014
    Ratings:
    +264
    Local Time:
    10:03 PM
    Still waiting...
     
  3. rdan

    rdan Well-Known Member

    4,988
    1,186
    113
    May 25, 2014
    Ratings:
    +1,808
    Local Time:
    11:03 AM
    Mainline
    10.2
    Same hahaha :D
     
  4. eva2000

    eva2000 Administrator Staff Member

    45,434
    10,311
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +15,991
    Local Time:
    1:03 PM
    Nginx 1.19.x
    MariaDB 5.5/10.x
    strange my flexible SSL status went from issuing to SSL expired ?
     
  5. eva2000

    eva2000 Administrator Staff Member

    45,434
    10,311
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +15,991
    Local Time:
    1:03 PM
    Nginx 1.19.x
    MariaDB 5.5/10.x
    asked tech support why my status is SSL expired and basically the response is pay for Pro plan if you want it setup faster or not set your site to default to https yet :)

     
  6. eva2000

    eva2000 Administrator Staff Member

    45,434
    10,311
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +15,991
    Local Time:
    1:03 PM
    Nginx 1.19.x
    MariaDB 5.5/10.x
    straight from the blog comments an explanation for the SSL expired status with Cloudflare Universal SSL
    Indeed my project's domain on Cloudflare Universal SSL does contain a brand name or similar, so guess that's what triggered the SSL expired status !
     
  7. rdan

    rdan Well-Known Member

    4,988
    1,186
    113
    May 25, 2014
    Ratings:
    +1,808
    Local Time:
    11:03 AM
    Mainline
    10.2
    My test site still not issued :(
     
  8. eva2000

    eva2000 Administrator Staff Member

    45,434
    10,311
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +15,991
    Local Time:
    1:03 PM
    Nginx 1.19.x
    MariaDB 5.5/10.x
    neither is mine... guess the saying is true - there really is no free lunch in this world and there's always a price whether it be monetary in nature or not :)
     
  9. eva2000

    eva2000 Administrator Staff Member

    45,434
    10,311
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +15,991
    Local Time:
    1:03 PM
    Nginx 1.19.x
    MariaDB 5.5/10.x
    I switched my Cloudflare flexible SSL domain's htaccess back to non-https for normal http traffic over Cloudflare's network. Constellix monitoring from geographical locations don't show the Cloudflare geographical benefits for response times it seems ? Some slow response time spikes up to 9,783 ms or 9.783 seconds on New York, USA it seems

    constellix_cloudflare_http_monitoring_051014_00.png
     
  10. rdan

    rdan Well-Known Member

    4,988
    1,186
    113
    May 25, 2014
    Ratings:
    +1,808
    Local Time:
    11:03 AM
    Mainline
    10.2
    Weird, It was enabled now on other domain I did not requested it :D
    upload_2014-10-5_21-26-1.png

    But still not on the domain I tried the other day.
     
  11. eva2000

    eva2000 Administrator Staff Member

    45,434
    10,311
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +15,991
    Local Time:
    1:03 PM
    Nginx 1.19.x
    MariaDB 5.5/10.x
    What the.... just checked and yes same here other domain on Cloudflare is set to SSL issuing but I did not request it on that domain ! The domain requested is still set to SSL expired !
     
  12. Peter Downey

    Peter Downey Member

    64
    24
    8
    May 28, 2014
    Ratings:
    +27
    Local Time:
    11:03 PM
    Their system must have flagged a huge amount of sites. One of my domains is listed as expired, I assume because it has the word "game" in the address. If their rules are that tight, I have to imagine that they've created quite the headache for themselves as far as manual approvals go.
     
  13. eva2000

    eva2000 Administrator Staff Member

    45,434
    10,311
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +15,991
    Local Time:
    1:03 PM
    Nginx 1.19.x
    MariaDB 5.5/10.x
    indeed..

    and imagine their free SSL is 12 months validity.. so basically we'd have to live through this delay again in 12 months time when they reissue all free Universal SSL certificates ! :eek:

    hmm, what about if for whatever reason Cloudflare needs to revoke and reissue all Universal SSL certificates like previous OpenSSL heartbleed vulnerability forcing folks to reissue their SSL certificates ? Wonder if there would be similar delays ?
     
  14. eva2000

    eva2000 Administrator Staff Member

    45,434
    10,311
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +15,991
    Local Time:
    1:03 PM
    Nginx 1.19.x
    MariaDB 5.5/10.x
    For the domain I DID NOT request flexible SSL for, it has now got SSL activated status it seems but looks like some command line tools like curl will have problems despite being 100% okay in Opera and Chrome browsers

    Code:
    curl -I https://mydomain.com/
    curl: (51) SSL: certificate subject name 'ssl2000.cloudflare.com' does not match target host name 'mydomain.com'
    or it might be that the server I am testing and calling curl from hasn't got the updated status as the browser shows a different subject name
     
  15. Peter Downey

    Peter Downey Member

    64
    24
    8
    May 28, 2014
    Ratings:
    +27
    Local Time:
    11:03 PM
    I've still got 6 domains with ssl issuing or expired over here.
     
  16. rdan

    rdan Well-Known Member

    4,988
    1,186
    113
    May 25, 2014
    Ratings:
    +1,808
    Local Time:
    11:03 AM
    Mainline
    10.2
    My main domain phcorner.net has SSL Active already :D
    Trying it now.
     
  17. rdan

    rdan Well-Known Member

    4,988
    1,186
    113
    May 25, 2014
    Ratings:
    +1,808
    Local Time:
    11:03 AM
    Mainline
    10.2
    Now my problem is the redirect loop.
    How to fix it :/
     
  18. rdan

    rdan Well-Known Member

    4,988
    1,186
    113
    May 25, 2014
    Ratings:
    +1,808
    Local Time:
    11:03 AM
    Mainline
    10.2
  19. s.molinari

    s.molinari New Member

    10
    4
    3
    Aug 31, 2014
    Ratings:
    +4
    Local Time:
    4:03 AM
    Hey George,

    What SSL service is Cloudfare giving, when this is in their FAQ? Sort of confused me there.
    The issue of SSL certificates is one of the bigger concerns we have with Skooppa too, as we want to offer an "only over SSL" service.

    Scott
     
  20. rdan

    rdan Well-Known Member

    4,988
    1,186
    113
    May 25, 2014
    Ratings:
    +1,808
    Local Time:
    11:03 AM
    Mainline
    10.2
    All my domain on Cloudflare are now Flexible SSL enabled.
    But still not using, cause it has some problems with Windows XP users.