Can a self-signed SSL certificate be used on the origin server when Cloudflare SSL Strict mode is enabled?

Question

Grade: Education Subject: Support
Can a self-signed SSL certificate be used on the origin server when Cloudflare SSL Strict mode is enabled?
Asked by:
106 Viewed 106 Answers

Answer (106)

Best Answer
(440)
No, a self-signed SSL certificate *cannot* be used on the origin server when Cloudflare SSL Strict mode is enabled. SSL Strict mode specifically requires the origin server's certificate to be signed by a publicly trusted Certificate Authority (CA) or a Cloudflare Origin CA certificate. Self-signed certificates are not trusted by public CAs, and Cloudflare will fail to validate them, resulting in an SSL handshake error (e.g., Error 526).