You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: src/content/docs/learning-paths/get-started-free/onboarding/check-ssl.mdx
+9-12Lines changed: 9 additions & 12 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -3,21 +3,18 @@ title: Check domain SSL/TLS
3
3
pcx_content_type: learning-unit
4
4
sidebar:
5
5
order: 4
6
-
7
6
---
8
7
9
-
import { Details, Render } from"~/components"
8
+
import { Details, Render } from"~/components";
10
9
11
10
Once you [add and activate](/learning-paths/get-started-free/onboarding/add-and-activate/) your domain at Cloudflare, you also should check your domain's SSL/TLS certificate is working correctly.
12
11
13
-
14
12
<Detailsheader="What are SSL/TLS certificates?">
15
13
16
14
SSL/TLS certificates let websites use `https` at the start of the URL (instead of `http`), which is a more secure connection protocol. HTTPS is good for website security, user privacy, SEO, and much more.
17
15
18
16
For more details on SSL/TLS, refer to the [Learning Center](https://www.cloudflare.com/learning/ssl/what-is-ssl/).
19
17
20
-
21
18
</Details>
22
19
23
20
By default, Cloudflare issues — and renews — free, unshared, publicly trusted **Universal SSL** certificates to all domains added to and activated on Cloudflare.
@@ -37,21 +34,21 @@ Sometimes, domains added to Cloudflare can experience issues in SSL/TLS certific
37
34
```mermaid
38
35
flowchart TD
39
36
accTitle: Potential SSL/TLS issues
40
-
A[Request to <code>https://example.com</code>] --> B[<code>ERR_SSL_VERSION_OR_CIPHER_MISMATCH</code>]
37
+
A[Request to <code>https://</code><code>example.com</code>] --> B[<code>ERR_SSL_VERSION_OR_CIPHER_MISMATCH</code>]
41
38
B --> C[Domain or subdomain not covered by certificate]
42
39
A --> D[<code>ERR_TOO_MANY_REDIRECTS</code>]
43
40
D --> E[Redirect loop between <code>http</code> and <code>https</code>]
44
41
A --> F[Error <code>525</code> or <code>526</code>]
45
42
F --> G[Mismatch origin and Cloudflare settings]
46
43
```
47
44
48
-
<br/>
45
+
<br/>
49
46
50
47
For more details on these errors and how to fix them, refer to the following resources:
Copy file name to clipboardExpand all lines: src/content/docs/ssl/troubleshooting/too-many-redirects.mdx
+26-31Lines changed: 26 additions & 31 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,7 +5,6 @@ sidebar:
5
5
order: 3
6
6
head: []
7
7
description: Learn how to troubleshoot ERR_TOO_MANY_REDIRECTS when using Cloudflare SSL/TLS.
8
-
9
8
---
10
9
11
10
After you [add a new domain](/fundamentals/setup/manage-domains/add-site/) to Cloudflare, your visitors' browsers might display `ERR_TOO_MANY_REDIRECTS` or `The page isn’t redirecting properly` errors.
@@ -15,32 +14,30 @@ This error occurs when visitors get stuck in a redirect loop.
15
14
```mermaid
16
15
flowchart LR
17
16
accTitle: Redirect loops illustration
18
-
A[Request for <code>http://example.com</code>] --> B[Redirect to <code>https://example.com</code>]
19
-
B --> C[Redirect to <code>http://example.com</code>]
17
+
A[Request for <code>http://</code><code>example.com</code>] --> B[Redirect to <code>https://</code><code>example.com</code>]
18
+
B --> C[Redirect to <code>http://</code><code>example.com</code>]
20
19
C --> B
21
20
subgraph Redirect Loop
22
21
B
23
22
C
24
23
end
25
24
```
26
25
27
-
<br/>
26
+
<br/>
28
27
29
28
This error is commonly caused by:
30
29
31
-
* A misconfiguration of your [SSL/TLS Encryption mode](#encryption-mode-misconfigurations).
32
-
* Various settings in [**SSL/TLS** > **Edge Certificates**](#edge-certificate-settings).
33
-
* A misconfigured [redirect rule](#redirect-rules).
30
+
- A misconfiguration of your [SSL/TLS Encryption mode](#encryption-mode-misconfigurations).
31
+
- Various settings in [**SSL/TLS** > **Edge Certificates**](#edge-certificate-settings).
32
+
- A misconfigured [redirect rule](#redirect-rules).
34
33
35
34
:::note
36
35
37
-
38
36
For assistance determining if your origin web server is responding with redirects, contact your hosting provider or site administrator.
39
37
40
-
41
38
:::
42
39
43
-
***
40
+
---
44
41
45
42
## Encryption mode misconfigurations
46
43
@@ -57,8 +54,8 @@ Redirect loops will occur if your origin server automatically redirects all HTTP
57
54
```mermaid
58
55
flowchart TD
59
56
accTitle: Redirect loops illustration for Flexible mode
60
-
A[Request for <code>https://example.com</code>] --> B[Encryption mode redirects to <code>http://example.com</code>]
61
-
B --> C[Origin server redirects to <code>https://example.com</code>]
57
+
A[Request for <code>https://</code><code>example.com</code>] --> B[Encryption mode redirects to <code>http://</code><code>example.com</code>]
58
+
B --> C[Origin server redirects to <code>https://</code><code>example.com</code>]
62
59
C --> B
63
60
subgraph Cloudflare
64
61
B
@@ -68,7 +65,7 @@ C
68
65
end
69
66
```
70
67
71
-
<br/>
68
+
<br/>
72
69
73
70
To solve this issue, either remove HTTPS redirects from your origin server or update your SSL/TLS Encryption Mode to be [**Full**](/ssl/origin-configuration/ssl-modes/full/) or higher (requires an SSL certificate configured at your origin server).
74
71
@@ -81,8 +78,8 @@ Redirect loops will occur if your origin server automatically redirects all HTTP
81
78
```mermaid
82
79
flowchart TD
83
80
accTitle: Redirect loops illustration for Full or Full (strict) mode
84
-
A[Request for <code>http://example.com</code>] --> B[Encryption mode redirects to <code>https://example.com</code>]
85
-
B --> C[Origin server redirects to <code>http://example.com</code>]
81
+
A[Request for <code>http://</code><code>example.com</code>] --> B[Encryption mode redirects to <code>https://</code><code>example.com</code>]
82
+
B --> C[Origin server redirects to <code>http://</code><code>example.com</code>]
86
83
C --> B
87
84
subgraph Cloudflare
88
85
B
@@ -92,11 +89,11 @@ C
92
89
end
93
90
```
94
91
95
-
<br/>
92
+
<br/>
96
93
97
94
To solve this issue, remove HTTP redirects from your origin server.
98
95
99
-
***
96
+
---
100
97
101
98
## Edge certificate settings
102
99
@@ -109,8 +106,8 @@ Redirect loops will occur if your origin server automatically redirects all HTTP
109
106
```mermaid
110
107
flowchart TD
111
108
accTitle: Redirect loops illustration for Always Use HTTPS
112
-
A[Request for <code>http://example.com</code>] --> B[Always Use HTTPS redirects to <code>https://example.com</code>]
113
-
B --> C[Origin server redirects to <code>http://example.com</code>]
109
+
A[Request for <code>http://</code><code>example.com</code>] --> B[Always Use HTTPS redirects to <code>https://</code><code>example.com</code>]
110
+
B --> C[Origin server redirects to <code>http://</code><code>example.com</code>]
114
111
C --> B
115
112
subgraph Cloudflare
116
113
B
@@ -120,7 +117,7 @@ C
120
117
end
121
118
```
122
119
123
-
<br/>
120
+
<br/>
124
121
125
122
To solve this issue, remove HTTPS redirects from your origin server or [disable **Always Use HTTPS**](/ssl/edge-certificates/additional-options/always-use-https/).
126
123
@@ -133,10 +130,10 @@ Redirect loops will occur if your origin server automatically redirects all HTTP
133
130
```mermaid
134
131
flowchart TD
135
132
accTitle: Redirect loops illustration for HTTP Strict Transport Security
136
-
A[Request for <code>https://example.com</code>] --> B[Encryption mode redirects to <code>http://example.com</code>]
137
-
B --> C[HSTS redirects to <code>https://example.com</code>]
133
+
A[Request for <code>https://</code><code>example.com</code>] --> B[Encryption mode redirects to <code>http://</code><code>example.com</code>]
134
+
B --> C[HSTS redirects to <code>https://</code><code>example.com</code>]
138
135
C --> B
139
-
C --> D[Origin server redirects to <code>http://example.com</code>]
136
+
C --> D[Origin server redirects to <code>http://</code><code>example.com</code>]
140
137
D --> C
141
138
subgraph Cloudflare
142
139
B
@@ -147,13 +144,13 @@ D
147
144
end
148
145
```
149
146
150
-
<br/>
147
+
<br/>
151
148
152
149
To solve this issue, remove HTTPS redirects from your origin server and make sure your domain's encryption mode is [**Flexible**](/ssl/origin-configuration/ssl-modes/flexible/) or higher.
153
150
154
151
Alternatively, [disable **HTTP Strict Transport Security (HSTS)**](/ssl/edge-certificates/additional-options/http-strict-transport-security/).
155
152
156
-
***
153
+
---
157
154
158
155
## Redirect rules
159
156
@@ -162,23 +159,21 @@ Redirect loops can also occur if you have conflicting URL redirects.
162
159
```mermaid
163
160
flowchart TD
164
161
accTitle: Redirect loops illustration for redirect rules
165
-
A[Request for <code>https://a.example.com</code>] --> B[Redirect to <code>http://b.example.com</code>]
166
-
B --> C[Redirect to <code>https://a.example.com</code>]
162
+
A[Request for <code>https://</code><code>a.example.com</code>] --> B[Redirect to <code>http://</code><code>b.example.com</code>]
163
+
B --> C[Redirect to <code>https://</code><code>a.example.com</code>]
167
164
C --> B
168
165
subgraph Cloudflare
169
166
B
170
167
C
171
168
end
172
169
```
173
170
174
-
<br/>
171
+
<br/>
175
172
176
173
To solve this issue, review your various [redirect rules](/rules/url-forwarding/) and [Page Rules](/rules/page-rules/) to make sure no rules are not in conflict with each other.
177
174
178
175
:::note
179
176
180
-
181
-
To reduce the potential for redirect loops and [mixed content errors](/ssl/troubleshooting/mixed-content-errors/), Cloudflare recommends WordPress users to install the [Cloudflare WordPress plugin](https://wordpress.org/plugins/cloudflare/) at their origin web server and enable the *Automatic HTTPS rewrites* option within the plugin. Alternatively, Cloudflare recommends the [SSL insecure content fixer](https://en-gb.wordpress.org/plugins/ssl-insecure-content-fixer/) or [Really Simple SSL plugin](https://en-gb.wordpress.org/plugins/really-simple-ssl/).
182
-
177
+
To reduce the potential for redirect loops and [mixed content errors](/ssl/troubleshooting/mixed-content-errors/), Cloudflare recommends WordPress users to install the [Cloudflare WordPress plugin](https://wordpress.org/plugins/cloudflare/) at their origin web server and enable the _Automatic HTTPS rewrites_ option within the plugin. Alternatively, Cloudflare recommends the [SSL insecure content fixer](https://en-gb.wordpress.org/plugins/ssl-insecure-content-fixer/) or [Really Simple SSL plugin](https://en-gb.wordpress.org/plugins/really-simple-ssl/).
0 commit comments