CloudFlare and AutoSSL Validation

[lkraav]

Uh, what's the solution for sites behind Cloudflare, where SSL redirect happens before it ever reaches the origin server?

 

[cPanelMichael]

Hello,

CloudFlare allows the use of SSL certificates on the server hosting the website as far as I know. They offer a FAQ entry on this topic at:

Why isn't SSL working for my site?

Could you let us know the specific issue you are facing?

Thank you.

 

[benito]

Hello Michael, i do not know if this is the same issue for ikraav but we are facing something similar. I post the autossl log for one domain using cloudflare.

Now it has his own ssl crt but is close to due date and we want the autossl crt.

7:45:02 AM Checking websites for “cpanelusername” …
7:45:02 AM The website “domainname.com”, owned by “cpanelusername”, has a valid SSL certificate, but additional SSL coverage may be possible for the domains “domainname.com”, “domainname.com.ar”, “www.domainname.com”, and “www.domainname.com.ar”. The system will attempt to replace this certificate with one that includes these additional domains.
7:45:02 AM This website’s SSL certificate lacks the following domain: www.fb.domainname.com. AutoSSL will not replace a certificate that an installed AutoSSL provider did not generate unless it expires within 3 days.
7:45:07 AM WARN The domain “domainname.com” failed domain control validation: The content “6045” of the <abbr title="Domain Control Validation">DCV</abbr> file, as accessed at “<a href="Domain Name Registration at Reputable Provider | Easy domain name search & lots of extras">Domain Name Registration at Reputable Provider | Easy domain name search & lots of extras</a>” and redirected from “<a href="http://domainname.com/BF91C41820972511F19BBE82F11648F0.txt">http://domainname.com/BF91C41820972511F19BBE82F11648F0.txt</a>”, did not match the expected value. The domain “domainname.com” resolved to an IP address “167.114.118.145” that does not exist on this server. at bin/autossl_check.pl line 562.
7:45:11 AM WARN The domain “domainname.com.ar” failed domain control validation: The content “5177” of the <abbr title="Domain Control Validation">DCV</abbr> file, as accessed at “<a href="Domain Name Registration at Reputable Provider | Easy domain name search & lots of extras">Domain Name Registration at Reputable Provider | Easy domain name search & lots of extras</a>” and redirected from “<a href="http://domainname.com.ar/A4A2C2C2A5D22AB41362CDDD35FA3C60.txt">http://domainname.com.ar/A4A2C2C2A5D22AB41362CDDD35FA3C60.txt</a>”, did not match the expected value. The domain “domainname.com.ar” resolved to an IP address “104.24.106.69” that does not exist on this server. at bin/autossl_check.pl line 562.
7:45:13 AM WARN The domain “www.domainname.com” failed domain control validation: The system queried for a temporary file at “<a href="https://www.domainname.com/404.shtml">https://www.domainname.com/404.shtml</a>”, which was redirected from “<a href="http://www.domainname.com/19EDF330E235C47CD2904E14704ADD6C.txt">http://www.domainname.com/19EDF330E235C47CD2904E14704ADD6C.txt</a>”. The web server responded with the following error: 404 (Not Found). A <abbr title="Domain Name System">DNS</abbr> or web server misconfiguration may exist. The domain “www.domainname.com” resolved to an IP address “104.25.234.116” that does not exist on this server. at bin/autossl_check.pl line 562.
7:45:16 AM WARN The domain “www.domainname.com.ar” failed domain control validation: The content “5177” of the <abbr title="Domain Control Validation">DCV</abbr> file, as accessed at “<a href="Domain Name Registration at Reputable Provider | Easy domain name search & lots of extras">Domain Name Registration at Reputable Provider | Easy domain name search & lots of extras</a>” and redirected from “<a href="http://www.domainname.com.ar/1834C0E84657AC00CF5A72190B459AC5.txt">http://www.domainname.com.ar/1834C0E84657AC00CF5A72190B459AC5.txt</a>”, did not match the expected value. The domain “www.domainname.com.ar” resolved to an IP address “104.24.107.69” that does not exist on this server. at bin/autossl_check.pl line 562.
7:45:16 AM WARN All of “domainname.com”’s unsecured domains failed domain control validation. AutoSSL skip this website. at bin/autossl_check.pl line 437.
7:45:16 AM The system has completed the AutoSSL check for “cpanelusername”.

 

[benito]

I opened the ticket 8291289 for this.

Thanks

 

[cPanelMichael]

I opened the ticket 8291289 for this.

Thanks

Hello,

To update, here's a quote regarding the answer to this question from the ticket:

I understand that you are inquiring about any additional or necessary steps required to allow websites that utilize CloudFlare services to be use the AutoSSL feature provided by cPanel. I apologize, however cPanel's AutoSSL functionality does not work for any domains utilizing CloudFlare and/or any CDN/proxy type services. For SSL Domain Control Validation to succeed, the domain must resolve to an IP address located on your cPanel server. At this time there is no known work arounds, other than disabling CloudFlare.

Thank you.