Forums

Configuration of a subdomain with cloudflare using HTTPS

Hi,

I'm using Cloudflare as a CDN for my app, and I also want to upload an SSL certificate from Cloudflare to my app. I want to use a subdomain to redirect to my pythonanywhere app.

Here is what I've done:

  • In Cloudflare, I've set up a CNAME from this.that.mydomain.com to webapp-1029013.pythonanywhere.com, and a CNAME from www.this.that.mydomain.com to webapp-1029013.pythonanywhere.com
  • In Cloudflare, I've created an "origin certificate", and I've uploaded it to my web page in pythonanywhere (I've uploaded the private key and certificate pair in the "webapp" tab)
  • In Cloudflare, under SSL/TLS -> Edge certificates -> Disable Universal SSL, I've disabled universal SSL
  • In Cloudflare, under SSL/TLS -> Overview, I selected Full (strict) encryption I get error ERR_SSL_VERSION_OR_CIPHER_MISMATCH when trying to access mydomain.com. However, I can access it using HTTP instead of HTTPS. How to make https://this.that.mydomain.com accessible?

Thanks

It looks like some problem with the origin cert. Did you get the correct one?

What do you mean? It's the certificate from Cloudflare. I don't see how it can be incorrect

You're right, the certificate that you have set up on PythonAnywhere should work fine as a backend cert when communicating with Cloudflare's servers. I think that your setup on the PythonAnywhere side is correct.

However, as far as I can see, the ERR_SSL_VERSION_OR_CIPHER_MISMATCH error (which I also see if I go to https://this.that.mydomain.com) is coming directly from Cloudflare, before our own servers are contacted. Your best bet would be to get in touch with Cloudflare support -- this thread on their help forums migth be a good starting point.

same problem with www.radiomagnetica.com.ar

That suggests that you should contact CloudFlare, as @giles suggested