Using SSL with Cloudflare

Learn about SSL options on a Cloudflare-enabled account, including using cPanel SSL certificates, managing root domains and subdomains, and what to do if your site does not yet have an SSL certificate.

Note

For instructions on activating Cloudflare, see Activating Cloudflare. For details on configuring Cloudflare, consult the Cloudflare documentation.

Using Cloudflare with an SSL Certificate

To secure connections for your users, an SSL certificate must be installed on your site. With an SSL certificate and Cloudflare enabled, connections are encrypted from the browser to Cloudflare and from Cloudflare to your server.

cPanel SSL Certificates

cPanel SSL is a free, automated certificate recognized by most modern browsers. It is supported on nearly every new hosting account and can be generated automatically. These certificates can be used for the Cloudflare SSL configurations described below.

Cloudflare SSL-Enabled Root Domains

For SSL on your root domain (e.g., example.com), upgrading to Cloudflare Pro is required to use SSL with Cloudflare.

Cloudflare offers two SSL options for root domains:

1. Full SSL

   • Requires at least a self-signed SSL certificate.

   • If Cloudflare is disabled, visitors will see browser warnings about an untrusted certificate.

   • To avoid this, purchase a valid SSL certificate from a Certificate Authority.

2. Full SSL (Strict)

   • Requires a valid SSL certificate from a Certificate Authority.

   • This is the preferred option because the certificate remains valid even if Cloudflare is disabled.

Note: To view SSL options, visit ruachost SSL certificates.

Cloudflare SSL-Enabled Subdomains

• If SSL is enabled on a subdomain, the free Cloudflare plan can still be used for the root domain.

• The SSL-enabled subdomain must be disabled in Cloudflare settings (gray cloud icon).

• To use Cloudflare with an SSL-enabled subdomain, upgrade to Cloudflare Pro.

Using Cloudflare Without an SSL Certificate

• If your site has no SSL certificate, you can use Cloudflare Universal SSL.

• Universal SSL encrypts connections between users’ browsers and Cloudflare, but not between Cloudflare and your server. To secure the full connection, install an SSL certificate on your server.

• Universal SSL requires modern browsers that support Server Name Indication (SNI). Most current browsers support this.

• Universal SSL should not be used for sites handling sensitive information, such as payment or personally identifiable data. For complete security, install a proper SSL certificate.

For more information, see Cloudflare Universal SSL and browser support details.