Using OpalStack's OpenSSL with Cloudflare's DNS

sean

kptac If your rule was for *.domain.com then you'll need a second rule for domain.com since we test every domain that's attached to the site.

kptac

sean oh my bad, I didn't realize it! I have run out of the free 3 page rules, so I generated an origin certificate from CF, which works well for now.

kptac

sean, had a similar situation with a new domain and cloudflare. I tried setting both rules, with domain.com and *.domain.com but LE failed to generate with this msg:

Lets Encrypt failed to generate a certificate for your site: <site_name>. The site is served by a CDN which produced a redirect at the challenge URL.

sean

kptac that's pretty weird, we do test <domain>/.well-known/acme-challenge/ for a redirect but if you have the page rule set up then it shouldn't redirect.

If this is still failing for you then please feel free to email support with the details, ie the domain and page rules, and we'll be happy to look into it further.

zgp

Hello sean - I've transferred a site from webfaction to Opalstack (thanks v much for your tools - so helpful!). The DNS goes through Cloudflare and it all seems to be working except that when I request a Lets Encrypt cert via the Opalstack site route after a few minutes I get the message:

Lets Encrypt failed to generate a certificate for your site: pweventhire. The site is served by a CDN which produced a redirect at the challenge URL.

At cloudflare I have turned off SSL / TLS encryption mode to see if that was getting in the way but this hasn't made a difference.

If you have any ideas about how to get the cert issued I'd really appreciate it? Thanks!

sean

zgp It's not the encryption mode that is the problem. The problem is that you have a page rule or something that redirects all requests to HTTPS.

We do the verification check over HTTP (since the site won't have a certificate yet) so if everything redirects to HTTPS we can't do that.

If that doesn't seem to be the case for you then please email support with the details (domain and site) and we'll look into it further.

zgp

sean Thanks Sean - I can't see any page rules or redirects anywhere. I will contact support to see if they can help - thank you!

« Previous Page