[rudra]

that point was first raised by tiwil above, albeit in a somewhat mixed way. But I guess it was more problem of expression than understanding on his part. So if turning one ssl off was the solution then he is the one deserving our thanks here.

but i do say again @tiwil @Rehan
you can keep both ssl on if configured right.
Just use Cloudflare Full or Full strict mode.

if cloudflare Ssl is in flexible mode then make sure your server does not redirect http to https. or you get loop too. cause CF Flexible mode expects http traffic from (your )origin servers.

Keeping both SSL on makes both half secured by https (with the assumption that we believe in CF not tampering anything in the middle and or CF not getting hacked and as a result letting the hacker tamper it).

Also remember to make sure that it is either www(.)siteurl(.)com or without www in all places and that vhost redirects and wordpress url settings are in order. Think about the request reply chains in mind.

source.
https://support.cloudflare.com/hc/en-us/...oop-errors-