How to Setup Cloudflare FREE SSL on WordPress
A Complete Step by Step Guide with images in 2018
Google has already announced that, Beginning in July 2018 with the release of Chrome 68, Chrome will mark all HTTP sites as “not secure”.
In Chrome 68, the omnibox will display “Not secure” for all HTTP pages.
Now the question is, “How to overcome this not secure warning”
This article has the answer.
What is https?
According to Wikipedia
HTTP Secure (HTTPS) is an extension of the Hypertext Transfer Protocol (HTTP) for secure communication over a computer network, and is widely used on the Internet. In HTTPS, the communication protocol is encrypted using Transport Layer Security (TLS), or formerly, its predecessor, Secure Sockets Layer (SSL). The protocol is therefore also often referred to as HTTP over TLS, or HTTP over SSL.
HTTP Secure connection has now become major part of S.E.O. All websites in Google’s Top 10 result are secured with https.
A website with out HTTPS can kill your S.E.O and ranking in search results.
How to Add https to your Website?
Securing your website with https is quite easy. You don’t need to spend money for buying a SSL certificate. SSL cost is generally more than a web hosting package.
But this time all all major Web Hosting Companies provides a FREE SSL with the hosting package.
If your hosting company doesn’t provide a FREE SSL, Don’t worry, this article will guide you how can you obtain a FREE SSL without spending a penny.
Simply follow these steps you can secure your website FREE of cost with Cloudflare FREE SSL. This process is same for all types of website no matters its a wordpress site, a php site or a other cms site.
Go to CloudFlare.Com
Signup for a account. Click on “Add Site”. Here enter your domain name that you want to secure.
Select FREE Plan and hit Confirm Plan button.
In next step Confirm purchase.
Now cloudflare will trace your website all dns records including your website A Record IP, Name Server etc.
Don’t change any thing in this page.
Scroll down the page and Click Continue.
In next page, you will see a”Change Your Nameservers“option.
You will get a set of new nameservers provided by cloudflare. There is a help link available “I need help changing my nameservers”. Click on it.
Select your Registrar and follow the instructions.
If your registrar is not listed there then open your registrar website and change your nameservers.
Here cloudflare provide me eva.ns.cloudflare.com and matt.ns.cloudflare.com
Replace your old nameservers with new one provided by cloudflare and save the new records.
Now come back to cloudflare setup dashboard. Click on Continue button.
wait some time to resolve the cloudflare nameservers with your host.
How to Deploy FREE SSL
Now go to Crypto settings.
Select Full (strict) from drop down.
Scroll down the page below.
Go to Origin Certificates >> Click on Create Certificate button.
After clicking the button. You will see the installation page.
Tick Let the Cloudflare generate a private key and a CSR.
Scroll down the page and click “Next”
On the next page you will see “Origin certificate”
Copy this Origin Certificate code and Private Key code.
Now Login to your web hosting cPanel
Go to the Security section. Select SSL/TSL
Click on it You will be redirected to the next page.
Click on Manage SSL sites.
On the next page. On the top select the domain that you entered in Cloudflare dashboard for SSL.
Enter origin certificate and Private key codes that you have copied from your Cloudflare dashboard.
Be sure to use the codes provided by Cloudflare only and insert them carefully.
Scroll down below and Click Install button.
After clicking Install button a popup will appear with the following message.
SSL Certificate Successfully updated.
Note: If you see Certificate Authority Bundle error then go to Cloudflare community section. You will find the solution provided by Cloudflare.
Now go back to your Cloudflare dashboard.
Open Crypto menu again and do the following steps:
Always use HTTPS – ON
Automatic HTTPS Rewrites – ON
Now refresh your browser cache and open your site. You will see a Green lock pad before your name in the browser URL bar. If you see any error or warning on your screen, Please wait up to few hours. DNS takes time to resolve with the host.
Crawl some pages of your website. if you found some pages without Green Padlock through the following article to resolve the issue.
I have successfully performed this setup on InsideHost.Net domain.
You can click on the Green padlock in the address bar to see its a valid certificate.
Hope this article works for you for securing your site. If there is any issue you can comment below. I will try to resolve it for you.