Configure dedicated SSL certificate from Cloudflare on my droplet

June 27, 2017 3.3k views
DigitalOcean Ubuntu
musicos
By:
musicos

I recently bought a dedicated ssl certificate with cloudflare.
https://www.cloudflare.com/ssl/dedicated-certificates/

The certificate is active, however, the result test is as it follows:

curl -sv -o /dev/null https://www.mysite.com/ --resolve www.mysite.com:443:my.ip.num.ber
* Added www.mysite.com:443:my.ip.num.ber to DNS cache
* Hostname www.mysite.com was found in DNS cache
*   Trying my.ip.num.ber...
* TCP_NODELAY set
* Connection failed
* connect to my.ip.num.ber port 443 failed: Operation timed out
* Failed to connect to www.mysite.com port 443: Operation timed out
* Closing connection 0

From cloudflare recommend me to open port 443 at my origin webserver/droplet.
How can i do this? do i need anything else to be done?

Log In to Comment
2 Answers
hansen June 27, 2017

Hi @musicos

Since you’re running Ubuntu, I’m guessing you might have setup the UFW firewall, so run this command to see if it’s active and allowing port 443:

sudo ufw status

But I don’t know how the dedicated certificate works on CloudFlare. I’m not sure if it’s required to have encrypted traffic between CloudFlare and your server - if it is, then you need to put the certificate on your web server as well.
You should be able to see more in the control panel on CloudFlare - it should tell if it has connectivity with your server or not.

Reply
  • musicos June 27, 2017

    I have utf firewall active. I added port 443 since it wasn’t listed.
    Do i need anything else?

    • hansen June 27, 2017

      Well, you need to set your web server to listen on 443 too for https traffic. And to do that, you would also need to add the certificate to the web server.

musicos June 27, 2017

this is my actual configuration,

<VirtualHost my.droplet.ip.num.ber:80>

        ServerAdmin mymail@gmail.com

        DocumentRoot /var/www/mysite/

        ServerName mysite.com

        ServerAlias www.mysite.com

        ErrorLog /var/www/error.log

        CustomLog ${APACHE_LOG_DIR}/access.log combined

        <Directory /var/www/mysite/>
                Options Indexes FollowSymLinks
                AllowOverride All
                Order allow,deny
                Allow from all
                Require all granted
        </Directory>

</VirtualHost>

How can i use both ports?

Reply
Have another answer? Share your knowledge.

Related