3 ms·

Faster man! Faster! :-) Thanks for doing this - such an excellent initiative.

by edent 12y ago

jgrahamc 12y ago
Since you ask so nicely I had your domain bumped up in the queue.
- jgrahamc 12y ago
  And now... $ curl -v https://dabr.eu * Adding handle: conn: 0x7faa1c000000 * Adding handle: send: 0 * Adding handle: recv: 0 * Curl_addHandleToPipeline: length: 1 * - Conn 0 (0x7faa1c000000) send_pipe: 1, recv_pipe: 0 * About to connect() to dabr.eu port 443 (#0) * Trying 104.28.21.97... * Connected to dabr.eu (104.28.21.97) port 443 (#0) * TLS 1.2 connection using TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 * Server certificate: sni10021.cloudflaressl.com * Server certificate: COMODO ECC Domain Validation Secure Server CA 2 * Server certificate: COMODO ECC Certification Authority * Server certificate: AddTrust External CA Root > GET / HTTP/1.1 > User-Agent: curl/7.30.0 > Host: dabr.eu > Accept: */*
  - edent 12y ago
    You guys rock :-) Better start updating my servers so they don't redirect wildly.
- vtlynch 12y ago
  Hi John, I know Cloudflare will be announcing later today, but how will people be enabling Full SSL (Strict) with this new rollout? I see these certs being issued out automatically are to subdomains at cloudflare. Will customers who want to enable Full SSL (Strict) be given the ability to enroll for another certificate for free that is issued to their Common Name via your site? (Context from Cloudflare's announcement: " Later today we'll be publishing a blog with instructions on how to do that at no cost. Once you've installed a certificate on your web server, you can enable the Full or Strict SSL modes which encrypt origin traffic and provide a higher level of security.")
  - oliverdavenport 12y ago
    I would expect that they issue you a certificate signed by Cloudflare, which allows them to verify your server & encrypt the connection, but it would not be a trusted CA in users' browsers, but rather it would be trused by Cloudflare internally.
- fishywang 12y ago
  After a week (or maybe a little earlier, I didn't check every day) I finally got my certifications. Thank you! But actually the https is broken because of mixed-content, caused by cloudflare. My page declare css in relative path, like inc/style.css. Via cloudflare it becomes absolute http url, like http://mydomain.com/inc/A.style.css.pagespeed.cf.5Dzr782jVo.css http://mydomain.com/inc/A.style.css.pagespeed.cf.5Dzr782jVo..... This won't work in https. You should change it to //, or better yet kept the relative path. Thanks.

Faster man! Faster! :-) Thanks for doing this - such an excellent initiative.

by edent 12y ago

Faster man! Faster! :-) Thanks for doing this - such an excellent initiative.

jgrahamc 12y ago

Since you ask so nicely I had your domain bumped up in the queue.

jgrahamc 12y ago
And now... $ curl -v https://dabr.eu * Adding handle: conn: 0x7faa1c000000 * Adding handle: send: 0 * Adding handle: recv: 0 * Curl_addHandleToPipeline: length: 1 * - Conn 0 (0x7faa1c000000) send_pipe: 1, recv_pipe: 0 * About to connect() to dabr.eu port 443 (#0) * Trying 104.28.21.97... * Connected to dabr.eu (104.28.21.97) port 443 (#0) * TLS 1.2 connection using TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 * Server certificate: sni10021.cloudflaressl.com * Server certificate: COMODO ECC Domain Validation Secure Server CA 2 * Server certificate: COMODO ECC Certification Authority * Server certificate: AddTrust External CA Root > GET / HTTP/1.1 > User-Agent: curl/7.30.0 > Host: dabr.eu > Accept: */*
- edent 12y ago
  You guys rock :-) Better start updating my servers so they don't redirect wildly.
vtlynch 12y ago
Hi John, I know Cloudflare will be announcing later today, but how will people be enabling Full SSL (Strict) with this new rollout? I see these certs being issued out automatically are to subdomains at cloudflare. Will customers who want to enable Full SSL (Strict) be given the ability to enroll for another certificate for free that is issued to their Common Name via your site? (Context from Cloudflare's announcement: " Later today we'll be publishing a blog with instructions on how to do that at no cost. Once you've installed a certificate on your web server, you can enable the Full or Strict SSL modes which encrypt origin traffic and provide a higher level of security.")
- oliverdavenport 12y ago
  I would expect that they issue you a certificate signed by Cloudflare, which allows them to verify your server & encrypt the connection, but it would not be a trusted CA in users' browsers, but rather it would be trused by Cloudflare internally.
fishywang 12y ago
After a week (or maybe a little earlier, I didn't check every day) I finally got my certifications. Thank you! But actually the https is broken because of mixed-content, caused by cloudflare. My page declare css in relative path, like inc/style.css. Via cloudflare it becomes absolute http url, like http://mydomain.com/inc/A.style.css.pagespeed.cf.5Dzr782jVo.css http://mydomain.com/inc/A.style.css.pagespeed.cf.5Dzr782jVo..... This won't work in https. You should change it to //, or better yet kept the relative path. Thanks.