• Welcome to the Chevereto User Community!

    Here, users from all over the world come together to learn, share, and collaborate on everything related to Chevereto. It's a place to exchange ideas, ask questions, and help improve the software.

    Please keep in mind:

    • This community is user-driven. Always be polite and respectful to others.
    • Support development by purchasing a Chevereto license, which also gives you priority support.
    • Go further by joining the Community Subscription for even faster response times and to help sustain this space

Enabling HTTPS Using Free Cloudflare SSL?

Status
Not open for further replies.
I need an FTP account that allows me to see the Chevereto files on your installation.
 
Then CloudFlare HTTPS is not properly installed. When you add https they add that in the request and G\ detects that and use HTTPS instead of HTTP.
 
Then CloudFlare HTTPS is not properly installed. When you add https they add that in the request and G\ detects that and use HTTPS instead of HTTP.
What should i do for proper installation ? You said HTTPS is auto-detected. How can i fix this? please help
 
lib/G/G.php

PHP:
define('G_HTTP_PROTOCOL', ((!empty($_SERVER['HTTPS']) and strtolower($_SERVER['HTTPS']) == 'on' ) or $_SERVER['HTTP_X_FORWARDED_PROTO'] == 'https') ? 'https' : 'http');

That "HTTP_X_FORWARDED_PROTO" is what CloudFlare sends to fool the local server HTTP into HTTPS. CloudFlare HTTPS doesn't work at server layer, is in the outside. So to make your system work with that it detects the HTTP_X_FORWARDED_PROTO sent by CloudFlare.

Maybe CloudFlare changed that (again) and they send another header, but for what I tested in your server I didn't noticed any CloudFlare header at the time I tested your website. That's why I told you to properly install/enable the thing.
 
You should contact CloudFlare directly, maybe is a new thing.
 
Today i received an email from Jhon Roberts (Cloudflare) saying: "We don't have an ETA to share on when Universal SSL certificates will be available to our customers who sign up via hosting partners" well i think its unfair because Cloudflare already providing free universal SSL on their free account then why not for hosting partners.😕
 
Last edited:
Status
Not open for further replies.
Back
Top