Letsencrypt and Cloudflare as DNS

Texangeek

So as a followup to my previous post, I realized that I have been using Cloudflare as my DNS provider (i.e. the IP address for my server is specified on Cloudflare).

As far as I can tell I therefore need to specify the -le and --dns="dns_cf flags to obtain the necessary letsencrypt certificate for my site. So I ran the following command:

wo site update examplesite.com -le --dns=dns_cf

and obtained the following output:

Certificate type : domain
Validation mode : DNS mode with dns_cf
Issuing SSL cert with acme.sh   [OK]
Deploying SSL cert              [OK]
Securing WordOps backend with current cert
Adding HTTPS redirection        [OK]
Updating site url with https    [OK]
Testing Nginx configuration     [OK]
Reloading Nginx                 [OK]
Congratulations! Successfully Configured SSL on https://wildcatwellness.org
Your cert will expire within 89 days.

Cloudflare shows my SSL/TLS encryption mode as "flexible" however I still get an ERROR 522 - Connection Timed Out error when I try to access my site using https://www.examplesite.com/wp-admin.

Can anyone help?

vasiler

From SSL Flexibile set to SSL Full (in Cloudflare).

Texangeek

Changed to SSL full but still get the same result when I try to access the WP site. Are there any logs generated on the server that might indicate what ngineX is doing with the request that its receives? Otherwise I kind of feel that I'm shooting the dark.

jaxxnux

I'm having the same issue.

jond1

There is a known issue within Cloudflare that causes infinite redirects within WordPress.

Installing this plugin fixes it for me, worth trying

https://wordpress.org/plugins/cloudflare-flexible-ssl/

jond1

Personally, I don't use LE at all and I leverage Cloudflare for SSL termination 100%.

Everything in my cluster runs on port 80 within my VPC at AWS.

mram

Check to make sure your Settings/General/WordPress Address URL and Site Address both begin with https:// (not http://). Not having https:// here will cause CloudFlare to redirect loop.

portofacil

There is a plugin to prevent the redirection loop:

wp plugin install --activate cloudflare-flexible-ssl

Just remember to use Flexible SSL on CF settings.