Comment on Centralized SSL certificate management?
KairuByte@lemmy.dbzer0.com 4 weeks agoCloudflare doesn’t pass the cert you have through, it generates its own cert (or uses one you provide).
Comment on Centralized SSL certificate management?
KairuByte@lemmy.dbzer0.com 4 weeks agoCloudflare doesn’t pass the cert you have through, it generates its own cert (or uses one you provide).
moodoovoodoo@lemmy.world 4 weeks ago
Depends on your config, I’m just doing DNS (proxied). So you hit my nginx and that’s where the cert is provided.
KairuByte@lemmy.dbzer0.com 4 weeks ago
Have you actually confirmed that is the case? My understanding is that cloudflare pretty much always re-signs with their own SSL cert. and I’m fairly certain that would be absolutely required when using their DNS proxies.
moodoovoodoo@lemmy.world 3 weeks ago
I have confirmed it - it’s how I run all my services
KairuByte@lemmy.dbzer0.com 3 weeks ago
Yes, it’s also how I run all my services. I checked just this moment, and locally my certs verified by field is
Let’s Encrypt, while remotely that field isGoogle Trust ServicesI have never personally provisioned a cert from Google. I have only ever utilized Let’s Encrypt. That leaves just one involved party that could have requested, received and presented this cert: Cloudflare.