Is there anyway to set certs if the origin certs was generated via cloudflare? Extra explanaiton Maybe the way I say it isn’t clear enough, coz I am new to these Certs things. Here’s what I gonna do: Cloudflare > SSL/TLS > Origin Server > Create certs (RSA/ECC) I would like to upload the certs p…

The problem for you is, Fly doesn’t yet support “bring your own certs” with their application load balancer (HTTP/S load balancer). So, it does not matter if you choose to generate certs with (public) Trusted CA / (Cloudflare) Origin CA. Unless there’s an easier way I missed, you have no choice but…

Hello, You could save it in secrets and then get it in and out of your app with the necessary code for it. Secrets are made available via env variables to the app. There’s likely a size limit for any given secret, in the order of a few kilobyes or so. At least that’s what I remember reading a fe…

I don’t think Cloudflare lets you download private keys of the certs they generate to also use it with your other deployments. What Cloudflare lets you do (on Enterprise plans?) is upload your own public (private certs don’t require Enterprise plan, iirc) certs generated elsewhere (with services li…

Hey, thanks for making me dig more :stuck_out_tongue: Looked around a bit and found that CF allows you to take the private key only when you’re creating them, and not later… as the private key is not stored. https://developers.cloudflare.com/ssl/origin-configuration/origin-ca#1-create-an-origin-ca…

“Origin Certs” are not public certs, though, right? Then OP’s question really is (which you answered): “How to use Fly.io as an origin server with Cloudflare Origin CA”…? which I misunderstood as “How to use same certs as Cloudflare does for my domain proxied through it”.

No worries, I could still be wrong. We’ll find out soon anyway.

Your response is faster than my server. :innocent: Thanks @FrequentFlyer and @ignoramous First of all, I am not a good server guy. Maybe me myself already misunderstood the whole infrastructure of the cert things. hehe I think what I am looking for is “How to use Fly.io as an origin server with Cl…

Ahh. That’s beyond my skill :grin: . Thanks for the awesome explanation and I think I will stay with fly.io generated Let’s Encrypt cert. One thing Just curious about SSL things. Let’s say I use cloudflare SSL and flyio’s side couldn’t verify the domain name. In this situation, the connection is s…

Let’s say I use cloudflare SSL and flyio’s side couldn’t verify the domain name. In this situation, the connection is still secured? The website is still accessible via https The connection between a client and Cloudflare’s reverse proxies is “secure” (over HTTPS). The connection between Cloudfla…

@Loonb This should help: [image] Cloudflare 525 error randomly occurs I got it running, thanks everyone for your help. These are the exact steps I took: 1 Add your domain to Cloudflare CF will not give an origin cert for a domain that they do not control. Yo…

I see, now i get the whole view. Thanks :gift_heart:

Use Cloudflare Certs to FlyIO

Questions / Help

FrequentFlyer January 27, 2022, 2:51am 11

@Loonb This should help: