Comment on Centralized SSL certificate management?
moodoovoodoo@lemmy.world 3 weeks agoWhy not handle certs on your end and just use CF for proxy? I use NPM for cert automation with CF proxying. It’s honestly ridiculous easy and I’ve had no issues.
KairuByte@lemmy.dbzer0.com 3 weeks ago
Cloudflare doesn’t pass the cert you have through, it generates its own cert (or uses one you provide).
moodoovoodoo@lemmy.world 3 weeks ago
Depends on your config, I’m just doing DNS (proxied). So you hit my nginx and that’s where the cert is provided.
KairuByte@lemmy.dbzer0.com 3 weeks ago
Have you actually confirmed that is the case? My understanding is that cloudflare pretty much always re-signs with their own SSL cert. and I’m fairly certain that would be absolutely required when using their DNS proxies.
moodoovoodoo@lemmy.world 2 weeks ago
I have confirmed it - it’s how I run all my services