Cloudflare ssl error on openlitespeed in aapanel

kamranhanif496

When I select flexible it's working but when I select full or full (strict) it give me following error. When I deploy let's encrypt certificate on it then it's working. But I am getting B grade at ssllabs.com. I get A grade when I only select let's encrypt certificate from aapanel.
Help me in the issue @JAY @aaPanel_Jose
Thanks!

kamranhanif496

@JAY @aaPanel_Jose

kamranhanif496

@aaPanel_Jose
Jose brother please help in this issue?

aaPanel_Jose

kamranhanif496
You lived with a grade B, it should be related to the SSL configuration of aaPanel, you can check this post, we will arrange to update after the test

https://www.aapanel.com/forum/d/1317-enhancement-request-for-apache-ssl-configuration-on-aapanel-667

kamranhanif496

aaPanel_Jose but my problem not this. My website not accessible when i turn on full. It give me origin webserver does not have a valid ssl certificate?
When I select flexible it's working but when I select full or full (strict) it give me following error. When I deploy let's encrypt certificate on it then it's working.

aaPanel_Jose

kamranhanif496
When selecting full, your website must deploy SSL certificate, otherwise cloudflare cannot access port 443 of your website

kamranhanif496

aaPanel_Jose so you mean that server side lets' encrypt and cloudflare has also it's ssl both will present at same time. Will it make delay or not?

aaPanel_Jose

kamranhanif496
After going through the cloudflare proxy, your back-end site not using ssl will be faster than using ssl, but users should not perceive

Stealth

kamranhanif496

Bro, you can´t use 2 SSL certificates in 1 row. Use only Cloudflares SSL or Lets Encrypt. When you want use the FULL on Cloudflare then must download from Cloudflare that SSL and import in aaPanel. Only 1 encryption at time...

When Cloudflare routing to your server with CF SSL, and getting back Lets Encrypt SSL, he say: "WTF is this???" This isn´t like mine encryption, who want manipulate? Error 526, not acceptable.

(When you import SSL to aaPanel, and set the CF there will be minimum 24 hours to set, when no more...)

aaP_vicktors200

Sorry for reopening this post, but I ran into the same problem and I'll share the solution.

To resolve it, simply login to your Cloudflare account and create a new certificate. The steps are:

Source server ~> Creat certificate ~>Creat (no need to change anything)

Afterwards, import the information into Aapanel's SSL menu and enjoy.

Tested on wordpress.

aapanel_power

aaP_vicktors200 Thank you for sharing