如何解决Cloudflare无效SSL (error526)？
我把我的网站主机从Bluehost移到Inmotion，但是域目前在Bluehost上(它在Bluehost上有Cloudflare )。现在我把它移到了Inmotion，我为它创建了一个Cloudflare帐户，用于在我的网站上设置它。我设置了Cloudflare，并将域DNS更改为Cloudflare DNS，但是现在当我从Cloudflare面板启动Cloudflare时，它在我的网站上显示了526错误。我和Inmotion和Bluehost支持谈过很多次，他们告诉我应该和Cloudflare团队联系，因为问题来自Cloudflare，没有人回答我。
为了获得更多信息，我尝试了在Cloudflare社区或google中找到的所有方法，但都无法解决这个问题。请帮帮我。
回答 1
Stack Overflow用户
发布于 2021-12-06 13:25:42
当Cloudflare无法验证服务器的SSL/TLS证书时，Cloudflare错误526触发器。这种情况通常发生在Cloudflare中的完整SSL(严格)模式中。
您在cloudflare中使用的模式是什么？完全(严格)模式？如果是，请看：
Full (strict) mode is the most common reason for the 526 error. A quick fix to solve it would be to change the SSL mode to Full instead of Full (strict) from the Overview tab of Cloudflare SSL/TLS section for the particular domain.
If the issue persists even after changing the SSL mode to Full, then it would be more likely related to the origin web server’s SSL certificates. We need to verify that:
1. The certificate is not expired
2. The certificate is not revoked
3. The certificate is signed by a Certificate Authority such as GlobalSign, Verisign, GeoTrust, Comodo, etc, and is not a self-signed SSL certificate.
4. The requested domain name and hostname are in the certificate’s Common Name or Subject Alternative Name.
5. Origin web server accepts connections over port SSL port 443
6. Temporarily pause Cloudflare and cross-check the certificate with any SSL verification sites like https://www.sslshopper.com to verify that no issues exist with the origin SSL certificate.
If the origin server is using an expired, revoked or self -signed certificate, the next step to fix this error would be to install a proper SSL certificate signed by a Certificate Authority.
Likewise, it is important to have the requested domain name and hostname in the certificate’s Common Name or Subject Alternative Name. If we have added a CNAME for the hostname on Cloudflare, the Common Name or SAN may also match the CNAME target.
Cloudflare can also issue origin certificates to you on request if you don’t want to pay for or acquire one from a third-party. The 526 error should disappear after the installation of a valid certificate on the origin server and the server it accept secure (HTTPS) connections.如果您想更改另一种模式：
在CloudFlare panel Domain -> SSL/TLS -> Overview -> Pick the mode中)。当您选择一种模式时，将显示加密将如何工作。
如果在端点中使用80/tcp端口，则需要灵活使用模式(加密浏览器和Cloudflare之间的通信)。
但是，如果在端点中使用443/tcp端口，则需要完全使用模式(对端到端加密，在服务器上使用自签名证书)。对于完全可用的模式，可以在虚拟主机中使用自签名SSL证书。
https://stackoverflow.com/questions/70235453
复制相似问题
腾讯云开发者
