Now the problem is the SSL option set to “Flexible”, which needs more configuration to work properly:
WordPress is a great and very popular website building tool, and Cloudflare is a great way to get HTTPS on your website for free. Thanks to Cloudflare’s Flexible SSL system, you don’t even need to manage SSL certificates to use it!
However, getting WordPress to show a padlock and make all pages work can be a bit tricky. This article explains a good way to configure your website correctly with Cloudflare Flexible SSL.
Heads up! Instead of making WordPress work with Flexible SSL, you can also c…
The easiest and best way to work around this is to configure a self-signed certificate on your hosting account for your domain, then set the SSL option to “Full” in the Cloudflare dashboard, using this article:
By default, Cloudflare uses a system called “Flexible SSL”. In this system, Cloudflare secures the connection between your visitors and Cloudflare, but not the connection between Cloudflare and your website. Not only is this less secure, some websites (notably WordPress) have trouble detecting whether HTTPS is in use, causing all sorts of issues.
The best way to resolve this is by using Full SSL in Cloudflare. This way, the connection between Cloudflare and your website is encrypted, and your w…
7 Likes