• 15

A PHP Error was encountered

Severity: Notice

Message: Undefined index: userid

Filename: views/question.php

Line Number: 191


File: /home/prodcxja/public_html/questions/application/views/question.php
Line: 191
Function: _error_handler

File: /home/prodcxja/public_html/questions/application/controllers/Questions.php
Line: 433
Function: view

File: /home/prodcxja/public_html/questions/index.php
Line: 315
Function: require_once

  1. I want to use Cloudflare CDN/HTTP proxy for my web-site that already has HTTPS through LetsEncrypt certificate.
  2. I don't want to use Cloudflare's Free SSL certificate as it doesn't work on WindowsXP and some old browsers. Neither I want to upgrade the plan to pay monthly fees.
  3. If I turn on Cloudflare proxying without enabling their SSL, it keeps redirecting my web-site from HTTPS to HTTP. If I turn on their SSL, I end-up with the limitations of their free SSL certificates.

So, is there a walkaround to use own SSL certificates and benefit from Cloudflare optimizations, CDN, etc.?

    • I don't know what exactly is possible with their service. But what would technically be possible depends on whether you want them to MITM the traffic or not. Also keep in mind, that clients which support neither SNI nor IPv6 are becoming increasingly difficult to support. Such clients will probably soon start losing access to some sites - if it is not already happening.
  1. Yes, the browser will do HTTPS over HTTP2 to CloudFlare, then they will use HTTPS to your origin server.

  2. This rules out CloudFlare for you. Either accept XP can't access the site or pay for the additional feature.

  3. Yes, that's right.

No, there's no way to do what you want to do, within the constraints you've placed. CloudFlare must terminate the browser session, and if you disable HTTPS it will be HTTP. If you want to use CloudFlare you need to change your requirements or constraints.

  • 1
Reply Report
      • 1
    • That's correct. If you want universal SSL and Windows XP support you need to pay for their business plan. XP is still 10% of browsers, so it's significant, but they're probably used to not being able to get to some websites. You can just use http. You could consider using CloudFront, or one of the other CDNs, but they're all paid.

In Crypto SSL Settings turn Set SSL To Full or just turn it off.

  • -2
Reply Report

Trending Tags