[DigitalPoint] App for Cloudflare® 1.9.1.1

[MaximilianKohler]

Bot fight mode is fine.

I left this on and it prevented my Let's Encrypt SSL from renewing.

 

[digitalpoint]

I left this on and it prevented my Let's Encrypt SSL from renewing.

How would that work? Cloudflare proxy (and everything that goes along with it like Bot Fight Mode) only affects inbound HTTP requests. So unless Let’s Encrypt is proactively contacting an API you have setup on your server to push an SSL cert to your server, it wouldn’t affect it. If your server is going out (making the connection), it’s not going through Cloudflare.

 

[MaximilianKohler]

How would that work?

https://community.centminmod.com/threads/troubleshoot-invalid-ssl-certificate-error-526-403-401.26901/

 

[NealC]

Just upgraded to 2.3.6 and I'm using your latest add-on. The country codes in Windows/Chrome are hit or miss. Wasn't an issue in 2.2.

 

[digitalpoint]

When did it start working for you on 2.2? Windows doesn’t support emoji flags (regardless of XenForo version).

Post in thread '[DigitalPoint] App for Cloudflare®'

Feb 26, 2025

The operating system you use. Microsoft doesn’t allow Windows to show the actual flag.

Yes, Windows. I'd prefer not to see the text but like the flags. Maybe an option would be to hide it on Windows so it's flags or nothing?

• NealC

 

[NealC]

Hold on, I think what I'm seeing are older posts prior to this feature. Disregard.

 

[Kirby]

Cloudflare proxy (and everything that goes along with it like Bot Fight Mode) only affects inbound HTTP requests.

Let's Encrypt (with HTTP-01 verification) performs an inbound HTTP request to check if the challenge can be read from ./well-known/acme-challenge/... - this request can (and if smth. is misconfigured will) be blocked by Cloudflare WAF.

 

[digitalpoint]

Let's Encrypt (with HTTP-01 verification) performs an inbound HTTP request to check if the challenge can read read from ./well-known/acme-challenge/... - this request can (and if smth. is misconfigured will) be blocked by Cloudflare WAF.

Ah… clearly I don’t use Let’s Encrypt.

 

[Kirby]

Its's not just Let's Encrypt, the same would apply for any CA using the ACME protocol and HTTP-01

 

[digitalpoint]

Its's not just Let's Encrypt, the same would apply for any CA using the ACME protocol and HTTP-01

Yep.

 

[Alvin63]

I have Turkey blocked in the Firewall. And a new member has an IP address in Turkey! Now noticeably, all their posts went for manual approval, but they still got on the site!