SSL & TLS Encryption Modes

Encryption

Manage SSL/TLS encryption modes (Off, Flexible, Full, Strict), enforce HTTPS, and configure minimum TLS 1.3.

cflare ssl <get|set> <domain> [mode]
cflare ssl https <on|off> <domain>

📖 Full Explanation

\1 controls encryption between visitors, Cloudflare edge servers, and your origin. Avoid insecure 'Flexible' SSL configurations and mandate end-to-end authenticated TLS with Full (Strict) mode in a single terminal command.

⚙️ Command Options & Flags

Option / Flag	Description	Default
set <domain> <mode>	Set SSL mode: off, flexible, full, strict	-
https on <domain>	Enforce Always Use HTTPS 301 edge redirects	-
--min-tls <version>	Set minimum TLS version: 1.0, 1.1, 1.2, 1.3	1.2

🔬 Technical Corollary & Edge Mechanics

Modifies \1 and \1. In Full (Strict) mode, Cloudflare verifies that the origin presents a valid CA-signed or Origin CA certificate and that the hostname matches.

🎯 Real-World DevOps Use Cases

Enforcing Full Strict SSL

Harden edge-to-origin encryption to prevent man-in-the-middle attacks.

$ cflare ssl set namishkumar.in strict

Mandating Modern TLS 1.3

Disable deprecated TLS 1.0 and 1.1 protocols for enterprise PCI-DSS compliance.

$ cflare ssl set namishkumar.in --min-tls 1.3

💻 Live Output Simulation

$ cflare ssl set namishkumar.in strict
✔ SSL/TLS mode updated to: strict (Full Strict)
🔒 End-to-end certificate verification enabled.

← Previous

DNS Record Management

Edge Cache & Global Purge