Skip to content

Commit

Permalink
Remove steps about using full strict with Cloudflare (#283)
Browse files Browse the repository at this point in the history
* Remove steps about using full strict with Cloudflare

We are suggesting users to enable strict mode with custom domains and Linksharing TLS. This won't work, because we require that you don't proxy at all if using Linksharing TLS, or creation/renew cert challenges will fail.

It sort of works if you first create the certificate on Linksharing, _then_ change the setting to strict, but this is not reliable because it will fail in 3 months when the certificate is attempted to be renewed.

* Update page.md
  • Loading branch information
halkyon authored Oct 2, 2023
1 parent 9a2ae1d commit affff64
Showing 1 changed file with 2 additions and 4 deletions.
6 changes: 2 additions & 4 deletions app/dcs/code/static-site-hosting/custom-domains/page.md
Original file line number Diff line number Diff line change
Expand Up @@ -153,16 +153,14 @@ While Linksharing links are secure, when you use a custom domain the browser is

### Why am I seeing an "Invalid SSL certificate" error from Cloudflare?

Problem: Customers using Cloudflare (or likely anything as a reverse proxy) who have certain TLS settings may see an error. In an effort to improve security and bring users SSL certs without the need for a CDN proxy, we no longer support self-signed certificates for custom domains. Keep reading for two ways to resolve the problem.
Problem: Customers using Cloudflare (or likely anything as a reverse proxy) who have certain TLS settings may see an error. In an effort to improve security and bring users SSL certs without the need for a CDN proxy, we no longer support self-signed certificates for custom domains.

![Cloudflare Invalid SSL Certificate Error](https://link.storjshare.io/raw/jua7rls6hkx5556qfcmhrqed2tfa/docs/images/dsxcEfc44l_gwzQHRiRKS_167760201695824623.png)

**Solution 1: Update your Cloudflare SSL/TLS encryption mode to "Flexible"**
**Solution: Update your Cloudflare SSL/TLS encryption mode to "Flexible"**

![Cloudflare Flexible SSL/TLS encryption](https://link.storjshare.io/raw/jua7rls6hkx5556qfcmhrqed2tfa/docs/images/Y_EKNdQvTeG-lHQ52HbX9_image.png)

**Solution 2: Follow the steps above for [](docId:RI4zz1sLvVEZ4ZcZbuT7l)** (Pro Accounts only) - this will enable you to use the "Full (strict)" option with Cloudflare

### How do I verify my custom domain?

Verifying your custom domain with linksharing involves adding a TXT record to your domain's DNS configuration that contains a unique string or value provided by the service. The service then checks for the presence of this value in your domain's DNS records to confirm that you have control over the domain.
Expand Down

0 comments on commit affff64

Please sign in to comment.