Hacker News Reader

Comment by alex_marchant | Hacker News Reader

But seems like only the http connection is working, i get a warning in Chrome when visiting https://cloudflarechallenge.com. Isn't that the only situation where the key would be checked. That's the part that doesn't make sense.

View on HN

Subdomains are separate domains, and you put www.cloudflarechallenge.com in your hosts, so when going to the domain without the www subdomain your entry in the hosts is not used.

Either go to https://www.cloudflarechallenge.com or remove the www subdomain from your hosts entry.

Try setting 'www.cloudflarechallenge.com' in /etc/hosts instead, and when visiting the URL hit <shift>-<reload> to ensure your browser isn't caching anything.

I see Indutny's blog for 'https://www.cloudflarechallenge.com'[/etc/hosts mapped to 165.225.128.15] in both FF and Chrome.

Ok adding www to the hosts entry worked, appreciate it

Also possible to verify using OpenSSL commandline:

    openssl s_client -connect 165.225.128.15:443 -showcerts \ 
                  -servername www.cloudflarechallenge.com

(Though to fully check, you need to compare certificates with the one off the real site, and ensure that his blog appears upon an HTTP request - to exclude proxying.)

Try https://www.cloudflarechallenge.com/

Reply on news.ycombinator.com