So free ssl isn't an option?

I tried for the first time to add free SSL on my website but it seems like I can’t for any reason

Quote Admin

“”"Hi Ian,

A great post! You’re right for the most part. StartSSL is the only free SSL provider I know which can be used with InfinityFree, but their certificates were blacklisted. Let’s Encrypt supports both web and TXT record validation, sslforfree.com is simply one of many implementations of the Let’s Encrypt system.

I have not seen any providers who use method 3, considering that it would be impossible to get an SSL certificate if you would need to have a valid SSL certificate to get the certificate in the first place.

One possible workaround is to use Cloudflare, who provide free SSL as well. However, that’s only possible if you have your own domain name and you can change the nameservers, using Cloudflare with free subdomains is not possible.“”"

So since free SSL from most providers is pointless the only option is Cloudflare, and only if you own a domain.

I own a domain

I have the NS of the domain pointing to Cloudflare CDN and the Cloudflare CDN pointing to Infinity free NS

(Domain Register -->> NS Cloudflare → NS Infinity Free)

This seems like its working because I have HTTP access to my site.

Next, I log in to Cloudflare go to Crypto

Set this to Full

Then I go to Origin Certificates

And create a certificate

But no matter what I do I get this message in the end

““The certificate uploaded is NOT for the domain name xxx.xx””

Knowledgebase quote

“”“Cloudflare’s Origin Certificates are not valid certificates. Cloudflare is not a recognized SSL vendor, so their “Origin Certificates” cannot be uploaded. To use Cloudflare on your site, you can configure Cloudflare to use “Full” SSL mode in conjunction with the default certificate, which also ensures your connection is encrypted the whole way. If you insist on using “Full (strict)” mode, you must use a regular SSL certificate for your site instead.”“”

Do I do something wrong or there is no chance for a free certificate and I should forget it?

@Geocheats2 said:
I tried for the first time to add free SSL on my > website but it seems like I can’t for any reason

Quote Admin

“”"Hi Ian,

A great post! You’re right for the most part. > StartSSL is the only free SSL provider I know > which can be used with InfinityFree, but their > certificates were blacklisted. Let’s Encrypt > > supports both web and TXT record > validation, sslforfree.com is simply one of > many implementations of the Let’s Encrypt > system.

I have not seen any providers who use method 3, considering that it would be impossible to get an SSL certificate if you would need to have a valid SSL certificate to get the certificate in the first place.

One possible workaround is to use Cloudflare, who provide free SSL as well. However, that’s only possible if you have your own domain name and you can change the nameservers, using Cloudflare with free subdomains is not possible.“”"

So since free SSL from most providers is pointless the only option is Cloudflare, and only if you own a domain.

I own a domain

I have the NS of the domain pointing to Cloudflare CDN and the Cloudflare CDN pointing to Infinity free NS

(Domain Register -->> NS Cloudflare → NS Infinity Free)

This seems like its working because I have HTTP access to my site.

Next, I log in to Cloudflare go to Crypto

Set this to Full

Then I go to Origin Certificates

And create a certificate

But no matter what I do I get this message in the end

““The certificate uploaded is NOT for the domain name xxx.xx””

Knowledgebase quote

“”“Cloudflare’s Origin Certificates are not valid certificates. Cloudflare is not a recognized SSL vendor, so their “Origin Certificates” cannot be uploaded. To use Cloudflare on your site, you can configure Cloudflare to use “Full” SSL mode in conjunction with the default certificate, which also ensures your connection is encrypted the whole way. If you insist on using “Full (strict)” mode, you must use a regular SSL certificate for your site instead.”“”

Do I do something wrong or there is no chance for a free certificate and I should forget it?

Cloudflare is not a CA and the common name of the shared SSL is ssl12345678.cloudlfare.com or randomize and cpanel won’t upload it if the common name doesn’t matches your domain.

And once you have used Cloudflare your website will start working with SSL and you don’t need anything it will just install your SSL for you without configuring the cpanel, you’ll just have to wait up to 24 hours if you enabled Cloudflare just a minutes or hours ago cause it needs to propagate due to what so called “DNS PROPAGATION”

@Geocheats2 said:
I tried for the first time to add free SSL on my website but it seems like I can’t for any reason

Quote Admin

“”"Hi Ian,

A great post! You’re right for the most part. StartSSL is the only free SSL provider I know which can be used with InfinityFree, but their certificates were blacklisted. Let’s Encrypt supports both web and TXT record validation, sslforfree.com is simply one of many implementations of the Let’s Encrypt system.

I have not seen any providers who use method 3, considering that it would be impossible to get an SSL certificate if you would need to have a valid SSL certificate to get the certificate in the first place.

One possible workaround is to use Cloudflare, who provide free SSL as well. However, that’s only possible if you have your own domain name and you can change the nameservers, using Cloudflare with free subdomains is not possible.“”"

So since free SSL from most providers is pointless the only option is Cloudflare, and only if you own a domain.

I own a domain

I have the NS of the domain pointing to Cloudflare CDN and the Cloudflare CDN pointing to Infinity free NS

(Domain Register -->> NS Cloudflare → NS Infinity Free)

This seems like its working because I have HTTP access to my site.

Next, I log in to Cloudflare go to Crypto

Set this to Full

Then I go to Origin Certificates

And create a certificate

But no matter what I do I get this message in the end

““The certificate uploaded is NOT for the domain name xxx.xx””

Knowledgebase quote

“”“Cloudflare’s Origin Certificates are not valid certificates. Cloudflare is not a recognized SSL vendor, so their “Origin Certificates” cannot be uploaded. To use Cloudflare on your site, you can configure Cloudflare to use “Full” SSL mode in conjunction with the default certificate, which also ensures your connection is encrypted the whole way. If you insist on using “Full (strict)” mode, you must use a regular SSL certificate for your site instead.”“”

Do I do something wrong or there is no chance for a free certificate and I should forget it?

@UnknownLolz said:
And once you have used Cloudflare your website will start working with SSL and you don’t need anything it will just install your SSL for you without configuring the cpanel, you’ll just have to wait up to 24 hours if you enabled Cloudflare just a minutes or hours ago cause it needs to propagate due to what so called “DNS PROPAGATION”

You should wait for at least 24 hours as @UnknownLolz said, then the free SSL will be automatically installed on your website.
You won’t need to do anything else, just be patient.

Cloudflare does not provide free SSL certificates.

They are a website caching/CDN service, not an SSL certificate provider. They just happen to install SSL certificates on websites served through their platform.

You can point your domain to Cloudflare’s nameservers and have them cache your website and serve it over HTTPS. But the certificate they get for your domain name cannot be exported and installed elsewhere.

You don’t need to install Origin Certificates in “Full” mode.

We already install a self-signed certificate on all websites, which is enough for “Full” SSL mode. You only need a certificate which is trusted by Cloudflare in Full Strict mode.

@Geocheats2 said:
So since free SSL from most providers is pointless the only option is Cloudflare, and only if you own a domain.

Let’s Encrypt is the only free SSL provider I know. Let’s Encrypt is also the only SSL provider I know doesn’t work on InfinityFree. Since 100% of the free SSL providers I know don’t work here, you could indeed say that “free SSL from most providers is pointless”. But I think that’s a misleading phrase.

@Admin said:
Cloudflare does not provide free SSL certificates.
It does!
Elsewhere, my website https://www.pctips.gq and many others would not have SSL!
They provide Free SSL only when you use their services.

@ChrisPAR said:

@Admin said:
Cloudflare does not provide free SSL certificates.
It does!
Elsewhere, my website https://www.pctips.gq and many others would not have SSL!
They provide Free SSL only when you use their services.

No, Cloudflare does not provide free SSL certificates. Were you able to upload your own CSR to their service and get a certificate you can install on your hosting? Were you able to download the private key and certificate which is trusted by browsers?

No, you can’t do that! Because Cloudflare does not provide free SSL certificates!

Cloudflare provides a website caching and optimization service. They install SSL certificates for their customers on their edge servers. But they don’t “provide” the certificates. How can you claim they “provide” free SSL certificates when they never give you the certificate?

@Admin said:

@ChrisPAR said:

@Admin said:
Cloudflare does not provide free SSL certificates.
It does!
Elsewhere, my website https://www.pctips.gq and many others would not have SSL!
They provide Free SSL only when you use their services.

No, Cloudflare does not provide free SSL certificates. Were you able to upload your own CSR to their service and get a certificate you can install on your hosting? Were you able to download the private key and certificate which is trusted by browsers?

No, you can’t do that! Because Cloudflare does not provide free SSL certificates!

Cloudflare provides a website caching and optimization service. They install SSL certificates for their customers on their edge servers. But they don’t “provide” the certificates. How can you claim they “provide” free SSL certificates when they never give you the certificate?

You can create Origin CA cetificates from CloudFlare, they give you some but they are self-signed and may not be trusted by all browsers.

@ChrisPAR do you have in any way a paid subscription on Cloudflare (??? :stuck_out_tongue: )?

After waiting for almost 1 day not only I don’t have SSL but also I don’t have a website :p.

Keep in mind I didn’t use the CloudFlare Manager from inside the Cpanel, should I have used that?

I reset my Cloudflare account and started over, this means 1 day again. Thanks, to everyone for making this clearer.

@ChrisPAR said:

@Admin said:

@ChrisPAR said:

@Admin said:
Cloudflare does not provide free SSL certificates.
It does!
Elsewhere, my website https://www.pctips.gq and many others would not have SSL!
They provide Free SSL only when you use their services.

No, Cloudflare does not provide free SSL certificates. Were you able to upload your own CSR to their service and get a certificate you can install on your hosting? Were you able to download the private key and certificate which is trusted by browsers?

No, you can’t do that! Because Cloudflare does not provide free SSL certificates!

Cloudflare provides a website caching and optimization service. They install SSL certificates for their customers on their edge servers. But they don’t “provide” the certificates. How can you claim they “provide” free SSL certificates when they never give you the certificate?

You can create Origin CA cetificates from CloudFlare, they give you some but they are self-signed and may not be trusted by all browsers.

Correction: the “Origin Certificates” are not trusted by any browser in the world. Cloudflare is not added as a trusted certificate authority to any web browser or operating system, so everyone would see an invalid SSL certificate warning if they try to visit an Origin Certificates site. Only Cloudflare trusts Cloudflare issued certificates.

@Admin said:

@ChrisPAR said:

@Admin said:

@ChrisPAR said:

@Admin said:
Cloudflare does not provide free SSL certificates.
It does!
Elsewhere, my website https://www.pctips.gq and many others would not have SSL!
They provide Free SSL only when you use their services.

No, Cloudflare does not provide free SSL certificates. Were you able to upload your own CSR to their service and get a certificate you can install on your hosting? Were you able to download the private key and certificate which is trusted by browsers?

No, you can’t do that! Because Cloudflare does not provide free SSL certificates!

Cloudflare provides a website caching and optimization service. They install SSL certificates for their customers on their edge servers. But they don’t “provide” the certificates. How can you claim they “provide” free SSL certificates when they never give you the certificate?

You can create Origin CA cetificates from CloudFlare, they give you some but they are self-signed and may not be trusted by all browsers.

Correction: the “Origin Certificates” are not trusted by any browser in the world. Cloudflare is not added as a trusted certificate authority to any web browser or operating system, so everyone would see an invalid SSL certificate warning if they try to visit an Origin Certificates site. Only Cloudflare trusts Cloudflare issued certificates.

Aren’t Cloudflare origin certificates signed by Comodo?
So it should be trusted.

I always check the CA Chain:
<img src=“Imgur: The magic of the Internet
Imgur: The magic of the Internet

It didn’t take a day just about 2 hours to load correctly, my site feels a bit faster and it looks like it has SSL on Firefox, Chrome, and Edge. I don’t really care about it but Google does so that’s why I wanted it. The certificate says it is signed by COMODO CA Limited.

LOL, after my post about SSL, someone is asking the same question…

@UnknownLolz said:

@Admin said:

@ChrisPAR said:

@Admin said:

@ChrisPAR said:

@Admin said:
Cloudflare does not provide free SSL certificates.
It does!
Elsewhere, my website https://www.pctips.gq and many others would not have SSL!
They provide Free SSL only when you use their services.

No, Cloudflare does not provide free SSL certificates. Were you able to upload your own CSR to their service and get a certificate you can install on your hosting? Were you able to download the private key and certificate which is trusted by browsers?

No, you can’t do that! Because Cloudflare does not provide free SSL certificates!

Cloudflare provides a website caching and optimization service. They install SSL certificates for their customers on their edge servers. But they don’t “provide” the certificates. How can you claim they “provide” free SSL certificates when they never give you the certificate?

You can create Origin CA cetificates from CloudFlare, they give you some but they are self-signed and may not be trusted by all browsers.

Correction: the “Origin Certificates” are not trusted by any browser in the world. Cloudflare is not added as a trusted certificate authority to any web browser or operating system, so everyone would see an invalid SSL certificate warning if they try to visit an Origin Certificates site. Only Cloudflare trusts Cloudflare issued certificates.

Aren’t Cloudflare origin certificates signed by Comodo?
So it should be trusted.

I always check the CA Chain:
<img src=“Imgur: The magic of the Internet
Imgur: The magic of the Internet

Nope. Their edge certificates are provided by Comodo. Their origin certificates are signed by themselves.

If you download an Origin Certificate and decode the SSL text file (either using something like OpenSSL or a web based tool), you’ll see it’s signed by “CloudFlare, Inc.”.

@Geocheats2 said:
@ChrisPAR do you have in any way a paid subscription on Cloudflare (??? :stuck_out_tongue: )?

After waiting for almost 1 day not only I don’t have SSL but also I don’t have a website :p.

Keep in mind I didn’t use the CloudFlare Manager from inside the Cpanel, should I have used that?

I reset my Cloudflare account and started over, this means 1 day again. Thanks, to everyone for making this clearer.

??? :smiley:
Also, of course you need a website for SSL to work, CloudFlare installs it automatically (or makes it look like) and no, there is no problem that you didn’t use the CloudFlare Manager.
If you had used it, you would aslo had free Railgun.

@Admin is it allowed that we talk in any other language than English?
I don;t mean when we ask something, of course then it should be in English if we want it to be answered but I mean the members of the community in here, when we want to expalin something to somebody better.
Also, if this is not possible, could a Multi-Language Forum (like forum.com/el/ or /en/) be created (keep in mind that I am asking this only if it is not allowed, if it is allowed there is no reason why you should answer to the second part)?

@ChrisPAR said:
@Admin is it allowed that we talk in any other language than English?
I don;t mean when we ask something, of course then it should be in English if we want it to be answered but I mean the members of the community in here, when we want to expalin something to somebody better.
Also, if this is not possible, could a Multi-Language Forum (like forum.com/el/ or /en/) be created (keep in mind that I am asking this only if it is not allowed, if it is allowed there is no reason why you should answer to the second part)?

I don’t think it’s beneficial to the community if the discussions get split up by locale. Especially since I’m not sure whether there are moderators who speak all those languages.

But I think it’s fine if you write something in another language as long as you include an English translation, so people who don’t speak the language can still follow the thread and participate in the discussion.

@Admin said:
But I think it’s fine if you write something in another language as long as you include an English translation, so people who don’t speak the language can still follow the thread and participate in the discussion.
Ok thanks.
And:

@Geocheats2 said:
@ChrisPAR do you have in any way a paid subscription on Cloudflare (??? :stuck_out_tongue: )?
No I don’t have one, I’m sorry :frowning:

Thank you all very much for the info, if you follow the steps correctly (which I didn’t do the first time) you have something that looks like free SSL and to be honest, that’s enough for me.

@ChrisPAR I just wanted to make sure there was no difference. Btw I am pretty sure I have been to your site in the past for some other reason, but it looked familiar.

@Geocheats2 said:
@ChrisPAR I just wanted to make sure there was no difference. Btw I am pretty sure I have been to your site in the past for some other reason, but it looked familiar.
If you can rememeber, would you mind sharing with me the content you checked on my website? :slight_smile: