Discourse 与 Cloudflare

[epskpsdsc]

@Richard - Communiteq

I think I understand it pretty well. You are right, it can be redirected to HTTPS, but it depends on Cloudflare settings and webserver configuration whether that will work or not, since initially there will be no valid certificate on the origin server.

I agree, I just pointed out your inaccuracy that it will straight up never work.

---

@Richard - Communiteq

@epskpsdsc

But it isn’t hardcoded to start the request on port 80

Yes, they can be redirected to a different port, but HTTP-01 challenges must always start on port 80.

The quoting of my sentence you have executed here is quite evil since it suggests the wrong circumstance of discussion and implies another meaning. My full sentence was

@epskpsdsc

But it isn’t hardcoded to start the request on port 80, ignore any HTTP code redirects and fail outright if it can’t find the token.

and the important part of my sentence was the combination of “hardcoded to start the request on port 80” AND “ignore any HTTP redirect” AND “fail outright”, since you said

@RGJ

Many people running Cloudflare set Cloudflare to automatically redirect HTTP to HTTPS, and that makes port 80 on the origin server unavailable, and that prevents HTTP-01 challenges from working.

and this implies that the reason of the HTTP-01 challenge failing is the redirect alone, which is not true.
Also, strictly speaking, a redirect does not make port 80 “unavailable”.