Cloudflare Developers•2mo ago

Any way to opt a subdomain back in to Total TLS

I have Total TLS enabled on my account and had one of the subdomains get stuck validating for a while. I then deleted the cert and DNS record and re-added the DNS record, assuming it would attempt to make a cert using the Total TLS again. I wasn't aware of the warning about assumed opt-out in https://developers.cloudflare.com/ssl/edge-certificates/additional-options/total-tls/. The guide doesn't provide any means of opting back in. Is there a way of doing so? Perhaps by updating something via one of their APIs?

Cloudflare Docs

Total TLS | Cloudflare SSL/TLS docs

Total TLS allows Cloudflare to issue individual certificates for your proxied hostnames. These certificates will protect proxied hostnames not covered by Universal certificates.

2 Replies

Chaika•2mo ago

I don't believe there is a way. If there's an API it's not documented anywhere, and not even turning the entire feature on/off again works. You can just issue an adv. cert manually though, you get 100 included with ACM

estgdOP•2mo ago

Thanks for the info... crazy it works this way

Gaming

Programming

Any way to opt a subdomain back in to Total TLS