If you're using Cloudflare's free SSL certificate and encounter an SSL error, don't worry. This is a common issue, and it's usually caused by one of two things. Here’s a simple user guide to help you fix it.
Cause 1: SSL Mode is Not Set to Full (strict)
This is the most frequent reason for SSL errors. Cloudflare has various SSL modes, and if it's not configured correctly, the connection between Cloudflare and your origin server might not be secure, leading to an error.
How to fix it:
-
Log in to your Cloudflare Dashboard.
-
In the left-hand menu, click on the SSL/TLS tab, then select Overview.
-
Find the SSL/TLS encryption mode section.
-
Click on Full (strict) to activate this mode.
Setting the mode to Full (strict) ensures that Cloudflare not only encrypts the connection from the user to Cloudflare but also validates and encrypts the connection from Cloudflare to your origin server. This resolves the SSL error and enhances your site's overall security.
Cause 2: The DNS Record is Not Proxied
If your DNS record isn't proxied through Cloudflare, the traffic will go directly to your origin server, bypassing Cloudflare's network. As a result, Cloudflare's free SSL certificate won't be applied.
How to fix it:
-
In your Cloudflare Dashboard, go to the DNS tab.
-
Click on Records.
-
Find the record (usually an A or CNAME record) for your domain or subdomain.
-
Look at the Proxy status column. If the cloud icon is grey, the proxy is off.
-
Click the cloud icon to turn it orange. This means you've enabled Cloudflare's proxy.
When the proxy is on (orange cloud), your website's traffic is routed through Cloudflare, allowing the free SSL certificate to be active and function correctly.
If you've followed both of these steps and the issue persists, try clearing your browser's cache and visiting the site again. In most cases, these two configurations are the culprits behind SSL errors with Cloudflare's free certificate.