How to Configure Cloudflare SSL/TLS Correctly

This article helps customers choose the correct Cloudflare SSL/TLS mode and avoid common HTTPS errors.

Overview

For production websites, Libyan Spider recommends installing SSL on the origin first, then using Full (strict) in Cloudflare. Full (strict) validation validates the certificate on the origin server and provides end-to-end HTTPS.

Recommended Steps

1. Install a valid SSL certificate on cPanel, Plesk, or the server.
2. Verify that https://yourdomain Works directly through the hosting configuration, changing Cloudflare settings only when necessary.
3. In Cloudflare, open SSL/TLS and set the encryption mode to Full (strict).
4. Enable Always Use HTTPS only after confirming SSL works.
5. Check for mixed-content issues within the website application.
6. Avoid Flexible SSL except as a temporary diagnostic state.

Common Mistakes to Avoid

• Using Flexible SSL while the origin redirects HTTP to HTTPS, which can cause redirect loops.
• Using Full instead of Full (strict) when a valid origin certificate is available.
• Forgetting to renew or reinstall the origin certificate.
• Assuming Cloudflare edge SSL replaces the SSL certificate needed on the server.

Share this: