1

We have a website running on Drupal 6 and Cloudflare.

We've installed the certificate on our Apache server but we are having a rough time configuring Cloudflare with SSL.

Which crypto settings to use in Cloudflare, flexible high or strict high? Some configuration tips would be helpful!

1

If you want your site only to be accessible via HTTPS then you use strict, use .htaccess or Cloudflare to redirect all traffic from HTTP to HTTPS. Strict will not work correct if you have not installed the SSL cert correctly on your server, since strict means the origin server (your hosting) most have a valid SSL.

You should disable Cloudflare temporary in the DNS settings within the Cloudflare dashboard then use a SSL labs to test the CERT install.

After you validated the issue you should force redirect using either Apache or Cloudflare, below is the Cloudflare page rule, should you want CF to handle it.

Cloudflare Page Rule 301 Redirect from HTTP to HTTPS

  1. Login to Cloudflare
  2. Select your site using the dropdown menu found in the upper left corner
  3. Click the Page Rules icon at the top of the screen
  4. Click the Create Page Rule button
  5. Enter http://example.com/ but obviously changing the domain with yours.
  6. Under “Then the settings are:” click + Add a Setting
  7. Click the dropdown list, find and click option “Always Use HTTPS”
  8. Finally click Save and Deploy

If you are getting mixed issues warnings then you will need to edit your content or template files to remove all traces of absolute URLS with HTTP:// and replace either // or https://

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.