Just disable cloudflare optimization for your forum subdomain and it should in theory be able to generate ssl for you.