Please help - Problem Enabling https

[Ryan123]

Hi,

I just recently signed up for hosting. I initially built my site on the auto-assigned infinityfree subdomain (using wordpress). Then I purchased a domain and parked it as per instructions so requests are forwarded to the infinityfree subdomain. Everything appeared to work fine.

Next, I added my domain to cloudflare (changed infinityfree’s nameservers to cloudflare’s nameservers with my registrar as required). I didn’t run into any issues and checking my SSL, it appears to work fine. However, my site still shows as insecure. I’ve tried all suggestions for the past 2 days and still not making a headway. If I check the site on http, it works fine (but of course with the insecure page warning). If I try https, I get an “ERR_SSL_PROTOCOL_ERROR”.

I’ve checked SSL on my site using several different tools and it passed in every single case. If I use the Really Simple SSL plugin on Wordpress, it breaks the site. And I have to go in the database and reset the URLS.

What am I doing wrong? Please help.

[KangJL]

You need to do these

How to get Free SSL (HTTPS) on InfinityFree

If you’re using free hosting with your own domain or a subdomain, you’ll want to make your website work over HTTPS (SSL). Fortunately, InfinityFree provides all the tools you need to make it so. If you like videos better then text guides, scroll on down to the bottom of this guide. This guide uses the control panel functions and the Free SSL Certificates tool provided by InfinityFree to get SSL up and running on your site. Step 1: Set up the domain on your hosting account The first thing to do…

How to install an SSL certificate

In order to get a padlock in the address bar in your website, you need to install an SSL certificate on your website. This article describes how to do that. If you would rather watch a video, scroll down to the bottom of this article. Installing an SSL certificate The first step to install an SSL certificate is of course to get the SSL certificate. You will need to get your SSL certificate from a certificate vendor of your choice. InfinityFree also provides free SSL certificates in the client …

How to force all traffic to HTTPS

After you’ve enabled SSL for your website, you’ll probably want to redirect all traffic on your website to the https version of your site. There are multiple ways to do that. Let’s compare some commonly used ways. Using script configuration Some scripts (including Wordpress) have a setting which allows you to set your website URL. By changing this URL from http://example.com to https://example.com, the script will probably redirect visitors to the https version of your site. Even if your script…

[KangJL]

@Ryan123

using Cloudflare

Did you read?

How to force all traffic to HTTPS

After you’ve enabled SSL for your website, you’ll probably want to redirect all traffic on your website to the https version of your site. There are multiple ways to do that. Let’s compare some commonly used ways. Using script configuration Some scripts (including Wordpress) have a setting which allows you to set your website URL. By changing this URL from http://example.com to https://example.com, the script will probably redirect visitors to the https version of your site. Even if your script…

[Ryan123]

Yes, I did actually. No luck, unfortunately. When I enable “Always use HTTPS”, the site is completely unreachable.

[KangJL]

Any SSL installed for the free subdomain?

[Ryan123]

No, I didn’t install any. Just registered for hosting, installed wordpress, then parked my custom domain and added the custom domain to cloudflare.

[KangJL]

That explains why!!!

Do these for the free subdomain

Please help - Problem Enabling https

You need to do these

“ERR_SSL_PROTOCOL_ERROR” you get is because free subdomain is lacking SSL cert

[Ryan123]

I’m confused. Are you saying I need a separate SSL certificate even if I’m using Cloudflare? Or Infinityfree specifically does not support Cloudflare?

[KangJL]

CloudFlare is only for you custom domain. Free subdomain has no SSL installed.
Since WP is installed on free subdomain with no SSL, there is no way your custom domain (SSL enabled) can forward to free subdomain (non SSL).

Unless you migrate WP from free subdomain to your custom domain, you will need SSL for free subdomain as well

[Ryan123]

Aaaah I see.
Ok, let me try adding SSL certs to the subdomain. If that works, I might look into migrating WP so I don’t have to do both. Thanks. I’ll report back.

[KangJL]

@Ryan123

look into migrating WP

Take note if you migrate, you will need to change your custom domain from parked domain to addon domain

[Ryan123]

Yes, I’m aware of this. Thanks. I’m actually just going ahead with the migration option instead. Still on it now…

[Ryan123]

{sigh}

No luck. I must be overlooking something somewhere.
I added my custom domain as an addon domain (removed it from parked domain).

• First copied all files over to the new domain, site launched fine and all, but still insecure.
• Activated Really Simple SSL plugin, broke site
• Regained access through database, then purged cloudflare cache. Back to insecure
• Completely removed site from cloudflare and re-added it. Same thing - still insecure
• Deleted all files under new domain, installed WP from scratch and migrated files over
• Tried again, same thing - insecure and if Really Simple SSL is activated, site is unreachable

Not sure what else I could be overlooking…

[wackyblackie]

Really Simple SSL can’t install SSL Certificates on our platform for various reasons. You’ll need to manually install an SSL from Login to your account - InfinityFree (I recommend Self Signed issuer) and then install it with cPanel. After you do that, you can set your CloudFlare SSL settings to Full and then install Really Simple SSL. You can also use automatic http rewrites in CloudFlare.

Please let me know if you need any help! Thanks!

[KangJL]

@Ryan123

First copied all files over to the new domain

If it’s on the same hosting account, just use filezilla to drag the files over. Is faster this way.

@Ryan123

Activated Really Simple SSL plugin

Since you are using CF, not really needed

[Ryan123]

@wackyblackie

You’ll need to manually install an SSL from app.infinityfree.net/sslCertificates (I recommend Self Signed issuer) and then install it with cPanel. After you do that, you can set your CloudFlare SSL settings to Full and then install Really Simple SSL. You can also use automatic http rewrites in CloudFlare.

Thanks. I did this and it seemed I made some progress - site shows up as secure but contents are all over the place. I then tried Really Simple SSL and everything went south. Can’t access the site. Message shows Cloudflare is fine but error is on the host’s side:

[Ryan123]

@KangJL

If it’s on the same hosting account, just use filezilla to drag the files over. Is faster this way.

Thanks. I did this and I was in fact able to get to the site (like I mentioned earlier). But the issue was not fixed, so I just though to start all over. Still stuck though.

[Greenreader9]

That error happens when your Cloudflare SSL settings are not correct. Can you please make sure it is set to “Full” and not “Full (Strict)”?

If you want me to check your site, can you share the domain name?

[Ryan123]

@Greenreader9 Thank you. I looked through Cloudflare and turned off “Always use HTTPS”. I also deleted Really Simple SSL. completely. Now the site loads again, but it’s back to insecure status… lol.

I know this makes it harder to get the help I need, but unfortunately, I’m not at liberty to share the domain name; I’m working on this for someone. Hope you understand.

Just to clarify, the A records in Cloudflare should point to the IP address of Infinityfree server, right?

Also, I’m thinking maybe I’m missing a step or two in the SSL generation. Here’s what I’ve done:

• I generated a free SSL from app.infinityfree.net/sslCertificates
• After generating, I clicked “Install”. Ensuing page shows it’s installed
• Then I went to SSL section in cPanel (because site still wasn’t secured) and I clicked to "Generate Key/CSR) - not sure if this was necessary

Instructions I’m reading appear to suggest that the key/CSR combination needs to be sent to some ‘vendor’ who would then provide me a Certificate that I’d need to upload. Am I right? Is this necessary in my case? I feel like I’m bungling something.

[jaikrishna.t]

You can click on the profile picture of @Greenreader9 and click on the message button. You can then send a personal message to him/her.