Hey I have Cloudflare protecting my website. I had a Let's Encrypt SSL certificate encrypting it before. If I send a request and it passes through Cloudflare.

When it gets to my web server will it be secured by the Let's Encrypt SSL certificate?

  • I have edited your question as far as I was able to understand the meaning, but it still needs clarification. – Tom K. Apr 18 at 13:24
up vote 2 down vote accepted

From Cloudflare Support - SSL FAQ:

What do the SSL options mean?

Your domain's SSL option determines how Cloudflare connects to your server either using encryption or not.

Flexible SSL:

SSL is terminated at the Cloudflare edge servers. Everything between your client and Cloudflare is encrypted, but between Cloudflare and your origin server is not encrypted. You would not need a certificate directly installed on your server for full encryption.

SSL Full:

SSL is terminated at the Cloudflare edge server. Then it is encrypted again, and sent back to your servers all encrypted. You would need an SSL certificate installed directly on your server for this option. You can also use a self-signed certificate for this option.

SSL Full Strict:

Same as SSL Full, but you must have a trusted certificate that is signed by a valid Certificate Authority (such as GlobalSign or DigiCert).

Custom SSL (Business/Enterprise ONLY)

Customers on these plans are able to upload their own SSL key and certificate, so CloudFlare's name will not show if a visitor checks the certificate.

So as long as your domain is using the "SSL Full" or "SSL Full Strict" option, the traffic should be encrypted from Cloudflare to your server.

Cloudflare Dashboard - Crypto Panel - SSL Option

To set this option, go to the Cloudflare Dashboard for your domain, select the "Crypto" panel, and change the SSL Option from the default of "Flexible" to "Full (strict)". Since you're using Let's Encrypt on the origin server, strict mode should be acceptable for you.

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.