|ImpressCMS, SSL and Cloudflare Free|
by fiammybe on 2019/1/16 3:33:40
I setup my ImpressCMS site using a Let's Encrypt SSL certificate. Everything works fine, nothing specific to configure other than putting 'https' in your root url. The site was running a bit sluggish, due to the server being on the other end of the world, so I decided to activate the free Cloudflare option my hosting company offered.
After that, once Cloudflare was up and running, my site was unreachable due to 'the site redirecting in an incorrect way'. Because the site has been working without issue before, I figured it was the cloudflare setup that needed adapting.
I found this article on the cloudflare support site that explains what was happening : my site was SSL-only, but the cloudflare default setting is for 'Flexible SSL'. The Flexible SSL option acts as a SSL proxy between your users and your site, and can be a good option if you don't have the opportunity to run your site with an SSL certificate, but you want to expose an SSL address to the world. Cloudflare then exposes a HTTPS address to the outside world, but communicates with your servers without it.
Changing the option from 'Flexible SSL' to 'Full SSL' immediately fixed the issue for me. Site response times have improved considerably since then.