Cloudflare Universal SSL

cloudflare Key managementcloudflare-ssl-tls

Free domain-validated edge certificates issued and renewed automatically for every zone.

Provider: cloudflare
Kind: Key management
Category: Security
Official docs: https://developers.cloudflare.com/ssl/origin-configuration/ssl-modes/

Properties · 2 set by this component

property	type	values	required	kind default	this component
encryptionMode · component property	enum	automatic \| off \| flexible \| full \| full-strict \| strict-origin-pull	no	automatic	inherited
envelopeEncryption	boolean	—	no	false	inherited
hostnameCoverage · component property	enum	apex-and-first-level \| all-subdomains	no	apex-and-first-level	inherited
hsm	boolean	—	no	false	inherited
managed	boolean	—	no	true	▸ true
minimumTlsVersion · component property	enum	1.0 \| 1.1 \| 1.2 \| 1.3	no	1.0	inherited
rotationAutomated	boolean	—	no	false	▸ true
rotationDays	integer	—	no	—	inherited
validationLevel · component property	enum	dv \| ov \| ev	no	dv	inherited

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "ssl-tls", component: "cloudflare-ssl-tls" }

Other Key management products · 53

Certificate Management Servicealibaba-certificate-managementalibabacloudkey-management Data Encryption Servicealibaba-data-encryption-servicealibabacloudkey-management AWS Certificate Manageraws-acmawskey-management AWS KMSaws-kmsawskey-management AWS Payment Cryptographyaws-payment-cryptographyawskey-management AWS Private Certificate Authorityaws-private-caawskey-management AWS Secrets Manageraws-secrets-managerawskey-management AWS Signeraws-signerawskey-management AWS Systems Manager Parameter Storeaws-ssm-parameter-storeawskey-management AWS CloudHSMcloudhsmawskey-management Artifact Signingazure-artifact-signingazurekey-management Azure Cloud HSMazure-cloud-hsmazurekey-management Azure Dedicated HSMazure-dedicated-hsmazurekey-management Azure Key Vaultazure-key-vaultazurekey-management Azure Key Vault Managed HSMazure-managed-hsmazurekey-management Advanced Certificate Managercloudflare-advanced-certificate-managercloudflarekey-management Cloudflare Geo Key Managercloudflare-geo-key-managercloudflarekey-management Cloudflare Keyless SSLcloudflare-keyless-sslcloudflarekey-management Cloudflare mTLS client certificatescloudflare-mtlscloudflarekey-management Cloudflare Origin CAcloudflare-origin-cacloudflarekey-management Cloudflare Secrets Storecloudflare-secrets-storecloudflarekey-management Bitwardenbitwardenkey-management cert-managercert-managerkey-management CyberArk Conjurconjurkey-management Dopplerdopplerkey-management EJBCAejbcakey-management Entrust nShield HSMentrust-nshieldkey-management HashiCorp Vaulthashicorp-vaultkey-management HCP Vault Dedicatedhcp-vaultkey-management Infisicalinfisicalkey-management Generic key managementkey-managementkey-management 1Password Connectonepassword-connectkey-management OpenBaoopenbaokey-management Sealed Secretssealed-secretskey-management Smallstep step-castep-cakey-management Thales Luna HSMthales-luna-hsmkey-management Certificate Authority Servicegoogle-certificate-authority-servicegcpkey-management Certificate Managergoogle-certificate-managergcpkey-management Cloud External Key Managergoogle-cloud-ekmgcpkey-management Cloud HSMgoogle-cloud-hsmgcpkey-management

and 13 more → Key management page

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# Cloudflare Universal SSL: free DV edge certificates issued and renewed automatically for every zone.
3# "SSL/TLS encryption modes" and "TLS protocols": new zones default to Automatic SSL/TLS and to a
4# minimum TLS version of 1.0; Universal SSL covers the apex and first-level subdomains only.
5schemaVersion: "1"
6type: "component"
7id: "cloudflare-ssl-tls"
8kind: "key-management"
9provider: "cloudflare"
10docs: "https://developers.cloudflare.com/ssl/origin-configuration/ssl-modes/"
11defaults:
12  managed: true
13  rotationAutomated: true
14properties:
15  encryptionMode:
16    type: "enum"
17    values: ["automatic", "off", "flexible", "full", "full-strict", "strict-origin-pull"]
18    default: "automatic"
19  minimumTlsVersion:
20    type: "enum"
21    values: ["1.0", "1.1", "1.2", "1.3"]
22    default: "1.0"
23  validationLevel:
24    type: "enum"
25    values: ["dv", "ov", "ev"]
26    default: "dv"
27  hostnameCoverage:
28    type: "enum"
29    values: ["apex-and-first-level", "all-subdomains"]
30    default: "apex-and-first-level"

The same page as markdown, for an agent: /catalogue/components/cloudflare-ssl-tls.md