Cloudflare 的 renewed the certificate 需要怎么弄呢

moowee

Cloudflare has detected that your configuration is using our Authenticated Origin Pulls feature. Recently, we renewed the certificate that our edge network presents to your origin due to the upcoming expiration of the current certificate on January 11, 2020.

To ensure uninterrupted service, you need to update your origin server to authenticate with the new authenticated origin pull certificate anytime before January 11, 2020.

You can find the updated certificate and follow the instructions for updating popular origin servers in this Cloudflare Help Center article: https://support.cloudflare.com/hc/en-us/articles/204899617/

Need help? Please contact us at https://support.cloudflare.com/

Thanks again for choosing Cloudflare!
The Cloudflare Team

=======================
机器翻译的：

Cloudflare 已检测到您的配置正在使用我们的"经过身份验证的原点拉取"功能。最近，我们更新了由于当前证书将于2020 年 1 月 11日到期而向您的来源提供的边缘网络证书。

为了确保不间断的服务，您需要在2020 年 1 月 11日之前随时更新源服务器，以使用新的经过身份验证的原点拉取证书进行身份验证。

您可以在此 Cloudflare 帮助中心一篇文章中找到更新的证书并按照更新常用源服务器的说明进行操作：https://support.cloudflare.com/hc/en-us/articles/204899617/

需要帮助？请通过https://support.cloudflare.com/联系我们

再次感谢您选择云片！
云片团队

aRNoLD

在这里给它设置成OFF

路飞

本帖最后由 路飞 于 2019-12-19 11:34 编辑

Flexible Full Full (strict)

abysscong

ssl_client_certificate /etc/nginx/certs/cloudflare.crt;
ssl_verify_client on;
更新下证书，没有上述配置就不用管

moowee

abysscong 发表于 2019-12-19 11:28

ssl_client_certificate /etc/nginx/certs/cloudflare.crt;
ssl_verify_client on;
更新下证书，没有上述配 ...
好像没有用过这个配置，cf说检查到我在用，所以被弄迷糊了

灵尘子

我也收到了邮件提醒，按照官方文档弄下就好了。

https://support.cloudflare.com/hc/en-us/articles/204899617/

nginx添加：

ssl_client_certificate /etc/nginx/certs/cloudflare.crt;
ssl_verify_client on;


下载Origin Pull Certificate

https://support.cloudflare.com/hc/en-us/article_attachments/360044928032/origin-pull-ca.pem

无时崩溃

灵尘子 发表于 2019-12-19 12:38

我也收到了邮件提醒，按照官方文档弄下就好了。

https://support.cloudflare.com/hc/en-us/articles/2048 ...
马克布丁

ncnc

同样收到邮件 不知道什么个东西的

moowee

灵尘子 发表于 2019-12-19 12:38

我也收到了邮件提醒，按照官方文档弄下就好了。

https://support.cloudflare.com/hc/en-us/articles/2048 ...
看上去是选择了Full (strict)的要添加这个设置了。以前好像不需要啊

Encrypts end-to-end, but requires a trusted CA or Cloudflare Origin CA certificate on the server

mooweemoowee

用了这个设置后，影响我没有使用cf的Full (strict)功能的子域名，又去掉了

Full (strict)
Encrypts end-to-end, but requires a trusted CA or Cloudflare Origin CA certificate on the server

trusted CA

or

Cloudflare Origin CA certificate

是or ，所以如果用的3个月的免费证书，应该是没有影响