Using Custom Certificate

Community Support
1

Hello, I am trying to use a Origin Server Cloudflare certificate and it is kinda working. The private key and cert itself are valid, but the CA Bundle totally failing, it says it’s “optional”, but that’s not true. Anyways I got one from CF docs website, it works, but many applications says our website is down and has a self-singed SSL. How would I fix that?

2

Turn on cloudflare proxy, doesnt work if you use them without it.

1 Like
3

Hey, I use CF Proxy, turning it off will just put my website at risk releaving the IP

4

https://docs.hestiacp.com/admin_docs/web/ssl_certificates.html#can-i-use-a-cloudflare-origin-ssl-certificate-with-cloudflare

Should work fine

1 Like
5

Unfortunatly that didn’t help, do you need any kind of debugging?

6

Any response?

7

Documentation has been used many times by myself and work follow the steps or hire somebody…

8

Ok so 1 is totally done, but how would I do this? Origin CA certificates · Cloudflare SSL/TLS docs

9

What do you mean? You literally just linked to the directions I would have given you if you had asked that question in the Cloudflare Community.

10

Actually my bad,

  1. Complete, keys received
  2. The keys are inserted in the HestiaCP settings for the website
  3. Done
  4. The key is inserted in the HestiaCP as it is required

And this is all still resulting in errors. If you need an url for the website, ask

11

You need to include:

https://developers.cloudflare.com/ssl/static/origin_ca_rsa_root.pem

As wel…

12

Well include in the intermediate certificate right? I’ve done it

13

You should not need the Cloudflare Origin CA root certificate. Cloudflare already has it in its trust store, so there is no need to send it in the CA bundle. You don’t want your server to trust certificates issued by that CA, so you don’t want it on your system trust store nor your webserver trusted CA list.

14

What is the specific error you see and what exactly are you doing that triggers the error?

If you are receiving an untrusted certificate error when you connect directly to your origin server, that is the expected behavior. Cloudflare Origin CA certificates are intended to be trusted by only the Cloudflare proxy.

15

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.