Skip to content

Commit 822f62b

Browse files
Second batch: always-use-https has some good contextual edits
1 parent 672914a commit 822f62b

File tree

8 files changed

+47
-35
lines changed

8 files changed

+47
-35
lines changed

src/content/docs/ssl/edge-certificates/additional-options/always-use-https.mdx

Lines changed: 7 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ sidebar:
88
order: 15
99
---
1010

11-
import { FeatureTable, TabItem, Tabs } from "~/components";
11+
import { FeatureTable, TabItem, Tabs, DashButton } from "~/components";
1212

1313
Always Use HTTPS redirects all your visitor requests from `http` to `https`, for all subdomains and hosts in your application.
1414

@@ -36,10 +36,12 @@ If only some parts of your application can support HTTPS traffic, do not enable
3636

3737
To enable **Always Use HTTPS** in the dashboard:
3838

39-
1. Log in to your [Cloudflare account](https://dash.cloudflare.com) and go to a specific domain.
40-
2. In **SSL/TLS** > **Overview**, make sure that your [SSL/TLS encryption mode](/ssl/origin-configuration/ssl-modes/off/) **is not** set to **Off**. When you set your encryption mode to **Off**, the **Always Use HTTPS** option will not be visible in your Cloudflare dashboard.
41-
3. Go to **SSL/TLS** > **Edge Certificates**.
42-
4. For **Always Use HTTPS**, switch the toggle to **On**.
39+
1. Make sure that your [SSL/TLS encryption mode](/ssl/origin-configuration/ssl-modes/off/) **is not** set to **Off** (check on the [**SSL/TLS Overview**](https://dash.cloudflare.com/?to=/:account/:zone/ssl-tls) page). When you set your encryption mode to **Off**, the **Always Use HTTPS** option will not be visible in your Cloudflare dashboard.
40+
2. In the Cloudflare dashboard, go to the **Edge Certificates** page.
41+
42+
<DashButton url="/?to=/:account/:zone/ssl-tls/edge-certificates" />
43+
44+
3. For **Always Use HTTPS**, switch the toggle to **On**.
4345

4446
</TabItem> <TabItem label="API">
4547

src/content/docs/ssl/edge-certificates/additional-options/automatic-https-rewrites.mdx

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ sidebar:
55
order: 14
66
---
77

8-
import { FeatureTable, Render, TabItem, Tabs } from "~/components";
8+
import { FeatureTable, Render, TabItem, Tabs, DashButton } from "~/components";
99

1010
Automatic HTTPS Rewrites prevents end users from seeing "mixed content" errors by rewriting URLs from `http` to `https` for resources or links on your web site that can be served with HTTPS.
1111

@@ -31,9 +31,11 @@ For security reasons, this feature will run on URLs pointing to `localhost` if t
3131

3232
To enable **Automatic HTTPS Rewrites** in the dashboard:
3333

34-
1. Log in to your [Cloudflare account](https://dash.cloudflare.com) and go to a specific domain.
35-
2. Go to **SSL/TLS** > **Edge Certificates**.
36-
3. For **Automatic HTTPS Rewrites**, switch the toggle to **On**.
34+
1. In the Cloudflare dashboard, go to the **Edge Certificates** page.
35+
36+
<DashButton url="/?to=/:account/:zone/ssl-tls/edge-certificates" />
37+
38+
2. For **Automatic HTTPS Rewrites**, switch the toggle to **On**.
3739

3840
</TabItem> <TabItem label="API">
3941

src/content/docs/ssl/edge-certificates/additional-options/cipher-suites/customize-cipher-suites/api.mdx

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ Note that:
2222
- Updating the cipher suites will result in certificates being redeployed.
2323
- Cipher suites are used in combination with other [SSL/TLS settings](/ssl/edge-certificates/additional-options/cipher-suites/#related-ssltls-settings).
2424
- You cannot set specific TLS 1.3 ciphers. Instead, you can [enable TLS 1.3](/ssl/edge-certificates/additional-options/tls-13/#enable-tls-13) for your entire zone and Cloudflare will use all applicable [TLS 1.3 cipher suites](/ssl/edge-certificates/additional-options/cipher-suites/supported-cipher-suites/).
25-
- Each cipher suite also supports a specific algorithm (RSA or ECDSA) so you should consider the algorithms in use by your edge certificates when making your ciphers selection. You can find this information under each certificate listed in [**SSL/TLS** > **Edge Certificates**](https://dash.cloudflare.com/?to=/:account/:zone/ssl-tls/edge-certificates).
25+
- Each cipher suite also supports a specific algorithm (RSA or ECDSA) so you should consider the algorithms in use by your edge certificates when making your ciphers selection. You can find this information under each certificate listed on the [**Edge Certificates**](https://dash.cloudflare.com/?to=/:account/:zone/ssl-tls/edge-certificates) page.
2626
- It is not possible to configure minimum TLS version nor cipher suites for [Cloudflare Pages](/pages/) hostnames.
2727
- If you use Windows you might need to adjust the `curl` syntax, refer to [Making API calls on Windows](/fundamentals/api/how-to/make-api-calls/#making-api-calls-on-windows) for further guidance.
2828

src/content/docs/ssl/edge-certificates/additional-options/cipher-suites/customize-cipher-suites/dashboard.mdx

Lines changed: 11 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ sidebar:
66
label: Use the dashboard
77
---
88

9-
import { Render, Details } from "~/components";
9+
import { Render, Details, DashButton } from "~/components";
1010

1111
<Render file="cipher-suites-definition" product="ssl" />
1212

@@ -28,20 +28,22 @@ For any of the modes, you should keep in mind the following configuration condit
2828
* Each cipher suite also supports a specific algorithm (RSA or ECDSA), so you
2929
should consider the algorithms in use by your edge certificates when making
3030
your ciphers selection. You can find this information under each certificate
31-
listed in [**SSL/TLS** > **Edge
32-
Certificates**](https://dash.cloudflare.com/?to=/:account/:zone/ssl-tls/edge-certificates).
31+
listed on the [**Edge
32+
Certificates**](https://dash.cloudflare.com/?to=/:account/:zone/ssl-tls/edge-certificates) page.
3333
* It is not possible to configure minimum TLS version nor cipher suites for
3434
[Cloudflare Pages](/pages/) hostnames.
3535
</Details>
3636

3737
## Steps
3838

39-
1. Log in to the [Cloudflare dashboard](https://dash.cloudflare.com/login) and select your account and domain.
40-
2. Go to **SSL/TLS** > **Edge Certificates**.
41-
3. For the **Cipher suites** setting select **Configure**.
42-
4. Choose a mode to select your cipher suites and select **Next**.
43-
5. Select a predefined set of cipher suites or, if you opted for **Custom**, specify which cipher suites you want to allow. Make sure you are aware of how your selection will interact with Minimum TLS version, TLS 1.3, and the certificate algorithm (ECDSA or RSA).
44-
6. Select **Save** to confirm.
39+
1. In the Cloudflare dashboard, go to the **Edge Certificates** page.
40+
41+
<DashButton url="/?to=/:account/:zone/ssl-tls/edge-certificates" />
42+
43+
2. For the **Cipher suites** setting select **Configure**.
44+
3. Choose a mode to select your cipher suites and select **Next**.
45+
4. Select a predefined set of cipher suites or, if you opted for **Custom**, specify which cipher suites you want to allow. Make sure you are aware of how your selection will interact with Minimum TLS version, TLS 1.3, and the certificate algorithm (ECDSA or RSA).
46+
5. Select **Save** to confirm.
4547

4648
:::note[Modern or PCI DSS]
4749
When used with [TLS 1.3](/ssl/edge-certificates/additional-options/cipher-suites/#tls-13), Modern is the same as PCI DSS.

src/content/docs/ssl/edge-certificates/additional-options/minimum-tls.mdx

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -43,10 +43,11 @@ To manage the TLS version applied to your whole zone when proxied through Cloudf
4343

4444
<Tabs syncKey="dashPlusAPI"> <TabItem label="Dashboard">
4545

46-
1. Log in to the [Cloudflare dashboard](https://dash.cloudflare.com) and select your account.
47-
2. Select your website.
48-
3. Go to **SSL/TLS** > **Edge Certificates**.
49-
4. For **Minimum TLS Version**, select an option.
46+
1. In the Cloudflare dashboard, go to the **Edge Certificates** page.
47+
48+
<DashButton url="/?to=/:account/:zone/ssl-tls/edge-certificates" />
49+
50+
2. For **Minimum TLS Version**, select an option.
5051

5152
</TabItem> <TabItem label="API">
5253

src/content/docs/ssl/edge-certificates/additional-options/opportunistic-encryption.mdx

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ pcx_content_type: concept
33
title: Opportunistic Encryption
44
---
55

6-
import { FeatureTable, Render, TabItem, Tabs } from "~/components";
6+
import { FeatureTable, Render, TabItem, Tabs, DashButton } from "~/components";
77

88
Opportunistic Encryption allows browsers to access HTTP URIs over an encrypted TLS channel. It's not a substitute for HTTPS, but provides additional security for otherwise vulnerable requests.
99

@@ -21,9 +21,11 @@ You do not need to configure your origin web server to support Opportunistic Enc
2121

2222
To enable Opportunistic Encryption in the dashboard:
2323

24-
1. Log in to your [Cloudflare account](https://dash.cloudflare.com) and go to a specific domain.
25-
2. Go to **SSL/TLS** > **Edge Certificates**.
26-
3. For **Opportunistic Encryption**, switch the toggle to **On**.
24+
1. In the Cloudflare dashboard, go to the **Edge Certificates** page.
25+
26+
<DashButton url="/?to=/:account/:zone/ssl-tls/edge-certificates" />
27+
28+
2. For **Opportunistic Encryption**, switch the toggle to **On**.
2729

2830
</TabItem> <TabItem label="API">
2931

src/content/docs/ssl/edge-certificates/additional-options/tls-13.mdx

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -27,9 +27,11 @@ TLS 1.3 can be activated in the Cloudflare dashboard or through the API:
2727

2828
To enable TLS 1.3 in the dashboard:
2929

30-
1. Log in to your [Cloudflare account](https://dash.cloudflare.com) and go to a specific domain.
31-
2. Go to **SSL/TLS** > **Edge Certificates**.
32-
3. For **TLS 1.3**, switch the toggle to **On**.
30+
1. In the Cloudflare dashboard, go to the **Edge Certificates** page.
31+
32+
<DashButton url="/?to=/:account/:zone/ssl-tls/edge-certificates" />
33+
34+
2. For **TLS 1.3**, switch the toggle to **On**.
3335

3436
</TabItem> <TabItem label="API">
3537

src/content/docs/ssl/edge-certificates/additional-options/total-tls/enable.mdx

Lines changed: 6 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -8,18 +8,19 @@ head:
88
content: Enable Total TLS
99
---
1010

11-
import { Render, TabItem, Tabs } from "~/components";
11+
import { Render, TabItem, Tabs, DashButton } from "~/components";
1212

1313
To enable [Total TLS](/ssl/edge-certificates/additional-options/total-tls/) - which issues individual certificates for your proxied hostnames - follow these instructions:
1414

1515
<Tabs syncKey="dashPlusAPI"> <TabItem label="Dashboard">
1616

1717
To enable Total TLS in the dashboard:
1818

19-
1. Log into the [Cloudflare dashboard](https://dash.cloudflare.com).
20-
2. Choose your account and domain.
21-
3. Go to **SSL/TLS** > **Edge Certificates**.
22-
4. For **Total TLS**, switch the toggle to **On** and - if desired - choose an issuing **Certificate Authority**.
19+
1. In the Cloudflare dashboard, go to the **Edge Certificates** page.
20+
21+
<DashButton url="/?to=/:account/:zone/ssl-tls/edge-certificates" />
22+
23+
2. For **Total TLS**, switch the toggle to **On** and - if desired - choose an issuing **Certificate Authority**.
2324

2425
</TabItem> <TabItem label="API">
2526

0 commit comments

Comments
 (0)