Cloudflare 中文文档

Cloudflare 中文文档

Overview
Concepts
Get started
Edge certificates
Universal SSL

Enable Universal SSL certificates
Disable Universal SSL certificates
Alerts
Limitations
Troubleshooting

Advanced certificates

Manage advanced certificates
API commands

Custom certificates

Manage custom certificates
Renewal and expiration
Bundle methodologies
Remove key file password
Troubleshooting

Enforce HTTPS connections
Domain control validation (DCV)

Methods

Delegated
TXT
Email
HTTP

Validation backoff schedule
Domain control validation flow
Troubleshooting

Geo Key Manager

Setup
Supported options

Add CAA records
Disable weak cipher suites
Staging environment (Beta)
Backup certificates
ECH Protocol (beta)
Additional options

Certificate Transparency Monitoring
HTTP Strict Transport Security (HSTS)
Certificate Signing Requests (CSRs)
TLS 1.3
Minimum TLS Version
Automatic HTTPS Rewrites
Total TLS

Enable
Error messages

Always Use HTTPS
Opportunistic Encryption

Troubleshooting

CAs and certificates FAQ
Certification Authority Authorization (CAA) FAQ
Origin server
Encryption modes

Off (no encryption)
Flexible
Full
Full (strict)
Strict (SSL-Only Origin Pull)

SSL/TLS Recommender
Origin CA certificates
Authenticated Origin Pulls (mTLS)

About
Setup

Zone-level
Per-hostname

AWS integration

Custom Origin Trust Store
Cipher suites
Client certificates
Create a client certificate
Configure your mobile app or IoT device
Enable mTLS
Bring your own CA for mTLS
Label client certificates
Revoke a client certificate
Troubleshooting
mTLS for Zero Trust
Cloudflare for SaaS
Keyless SSL
Get started

Cloudflare Tunnel
Public DNS

Hardware security modules

Configuration
AWS cloud HSM
Azure Dedicated HSM
Azure Managed HSM
SoftHSMv2
Entrust nShield Connect
IBM cloud HSM
Google Cloud HSM

Upgrade your key server
Reference

High availability
Scaling and benchmarking
Keyless delegation

Glossary
Troubleshooting
Reference
Cipher suites

Customize cipher suites
Recommendations
Supported cipher suites
Compliance status
Custom certificates
Match on origin
Troubleshooting

TLS protocols
Certificate and hostname priority
Certificate authorities
Browser compatibility
迁移指南

Let's Encrypt chain update
DigiCert update

Universal certificates
Advanced certificates
SSL for SaaS

Changes to HTTP DCV

Certificate pinning
Certificate statuses
Validity periods and renewal
Features and plans
Cloudflare and CVE-2019-1559
PCI compliance and vulnerabilities mitigation
Troubleshooting
ERR_SSL_VERSION_OR_CIPHER_MISMATCH
ERR_TOO_MANY_REDIRECTS
FAQ
General SSL errors
Mixed content errors

Troubleshooting edge certificates

Learn more about troubleshooting issues with your edge certificates:

Troubleshooting domain control validation (DCV)