CloudFlare and websocket support

For discussion of the Poker Mavens server module and other administration topics
Kent Briggs
Site Admin
Posts: 5620
Joined: Wed Mar 19, 2008 8:47 pm

Re: CloudFlare and websocket support

Post by Kent Briggs »

RCP wrote:SSL
Flexible
Try either Full or Full-Strict
Kent Briggs - [email protected]
Briggs Softworks - http://www.briggsoft.com
RCP
Posts: 4
Joined: Sat Apr 18, 2020 4:02 pm

Re: CloudFlare and websocket support

Post by RCP »

Thanks Kent! Changed it to strict and it worked right away. Tested everything, and all seems to be working smoothly. Appreciate the prompt replies :D

Last few things I've noticed:
1. Entering the URL without https:// or www. gives a error and website doesn't load. i.e.
- https://pokersiteurl.com ---works
- pokersiteurl.com ---does not work
- www.pokersiteurl.com --- sometimes works

2. Firefox - My lobby doesn't load on Firefox. After entering the site password, it just shows the loading bar and doesn't load the site. Other PM websites work fine on my FF browser. Cleared caches.
3. Is there anyway to hide the password in URL with this setup after you've logged in? https://pokersiteurl.com/?SitePassword= ... Language=0 -
Kent Briggs
Site Admin
Posts: 5620
Joined: Wed Mar 19, 2008 8:47 pm

Re: CloudFlare and websocket support

Post by Kent Briggs »

RCP wrote:1. Entering the URL without https:// or www. gives a error and website doesn't load. i.e.
Use my HTTP Redirect Utility from this page: http://www.briggsoft.com/docs/pmavens/Utilities.htm
2. Firefox - My lobby doesn't load on Firefox. After entering the site password, it just shows the loading bar and doesn't load the site. Other PM websites work fine on my FF browser. Cleared caches.
Email me your link (and reference this thread) and I'll see what it does for me.
3. Is there anyway to hide the password in URL with this setup after you've logged in? https://pokersiteurl.com/?SitePassword= ... Language=0 -
Not that I know of.
Kent Briggs - [email protected]
Briggs Softworks - http://www.briggsoft.com
deltahedge
Posts: 10
Joined: Sun May 03, 2020 2:58 pm

Re: CloudFlare and websocket support

Post by deltahedge »

jfullerton44 wrote:I solved my issue, the issue was the since I was hosting the server on an AWS EC2 there was a firewall created that did not allow for cloudflare connections. Once I configured the firewall to allow for cloudflare connections and set the SSL on cloudflare to strict everything started working.
I am also trying to get this working with AWS EC2 and cloudflare.

in the AWS console, i added two ports to the inbound rules in security groups for my instance. i added 443 and 8880.
also, in the remote desktop program for AWS EC2, i opened those same ports in windows firewall.

When i enter subdomain.mydomain.com, i am prompted to enter my server password and after that i get a websocket connection error

connecting to WSS://subdomain.mydomain.com:8880
websocket connection error

I have tried this with the server setting Proxy WSS=Yes and No
I also have set proxy IP header=CF-Connecting-IP

Im not sure what else to try.
Kent Briggs
Site Admin
Posts: 5620
Joined: Wed Mar 19, 2008 8:47 pm

Re: CloudFlare and websocket support

Post by Kent Briggs »

deltahedge wrote:connecting to WSS://subdomain.mydomain.com:8880
8880 is not in Cloudflare's list of available SSL ports. Use one of these instead: 2053, 2083, 2087, 2096, 8443
Kent Briggs - [email protected]
Briggs Softworks - http://www.briggsoft.com
deltahedge
Posts: 10
Joined: Sun May 03, 2020 2:58 pm

Re: CloudFlare and websocket support

Post by deltahedge »

Kent Briggs wrote:
deltahedge wrote:connecting to WSS://subdomain.mydomain.com:8880
8880 is not in Cloudflare's list of available SSL ports. Use one of these instead: 2053, 2083, 2087, 2096, 8443
Thank you. That fixed my issue. I think I read that port was available in step 3, and then I must have skipped over your note later in the instructions about cloudflare SSL connections.
derhussl
Posts: 28
Joined: Fri Jun 26, 2020 10:06 pm

Re: CloudFlare and websocket support

Post by derhussl »

I followed the instructions and I am stuck at when I start the poker server I get SSL Library not found? Any idea on what I am missing here?

I installed the .cert .key and then the one downloadable file and that is the error I am getting. I put it all in the pokermaven folder
Kent Briggs
Site Admin
Posts: 5620
Joined: Wed Mar 19, 2008 8:47 pm

Re: CloudFlare and websocket support

Post by Kent Briggs »

derhussl wrote:I followed the instructions and I am stuck at when I start the poker server I get SSL Library not found? Any idea on what I am missing here?
Answered in the other thread: viewtopic.php?f=8&t=3279#p13751
Kent Briggs - [email protected]
Briggs Softworks - http://www.briggsoft.com
specialcoders
Posts: 6
Joined: Thu Sep 24, 2020 2:06 pm

Re: CloudFlare and websocket support

Post by specialcoders »

first of all thanks for the explanation i was struggling with this the entire time.
I followed all the steps mentioned but there is still something missing and couldnt make it works.
I am using the API to login and when i added the SSL as mentioned in the steps i got this error
Error: SSL: certificate subject name 'Cloudflare' does not match target host name
The SSL in poker maven was generated with my domain name in cloudfare, how can fix this? I tried to add IP or Host name of my windows server but nothing works, i am new to this kind of stuff
Kent Briggs
Site Admin
Posts: 5620
Joined: Wed Mar 19, 2008 8:47 pm

Re: CloudFlare and websocket support

Post by Kent Briggs »

Error: SSL: certificate subject name 'Cloudflare' does not match target host name
Go to this page and paste in your cert file:

https://www.sslshopper.com/certificate-decoder.html

What info is displayed? Mine shows this:

Common Name: CloudFlare Origin Certificate
Subject Alternative Names: *.pm-demo.com, pm-demo.com
Organization: CloudFlare, Inc.
Organization Unit: CloudFlare Origin CA
Valid From: May 5, 2017
Valid To: May 1, 2032
Issuer: CloudFlare, Inc.
Serial Number: 1d80d57b13d234e760094266524eff3abea1af81
Kent Briggs - [email protected]
Briggs Softworks - http://www.briggsoft.com
Post Reply