信任在cloudflare上创建的源服务器证书

[woshidadi2026]

Prerequisites

• I have checked the Wiki and Discussions and found no answer

• I have searched other issues and found no duplicates

• I want to request a feature or enhancement and not ask a question

The problem

我在cloudflare中创建源服务器证书，并输入到adguard home，证书链显示无效，当然实际上还是可以使用的，但是我有个建议，就是信任这些cloudflare的证书

Proposed solution

信任来自cloudflare中的证书

Alternatives considered and additional information

No response

[rajaeem]

You need to add Origin CA certificate to the trusted root certificates inside the container.

Copy the certificate to /usr/local/share/ca-certificates/ and then run update-ca-certificates.

[woshidadi2026]

You need to add Origin CA certificate to the trusted root certificates inside the container.

Copy the certificate to and then run ./usr/local/share/ca-certificates/``update-ca-certificates

我是在Windows中安装的，不是使用容器

[sofvaskina]

Cloudflare Origin CA certificates are only meant for the Cloudflare-to-origin connection. They are not publicly trusted by browsers or regular DoH/DoT clients.

So this result is expected: AdGuard Home can show the chain as invalid, and this is not specific to Windows.

If you want to use AdGuard Home HTTPS / DoH / DoT directly from client devices, you should use a publicly trusted certificate, such as Let's Encrypt.

[woshidadi2026]

Cloudflare Origin CA 证书仅适用于 Cloudflare 到起源的连接。浏览器或常规DoH/DoT客户端都不信任它们。

所以这个结果是预期中的：AdGuard Home 可以显示链条无效，这并非 Windows 特有。

如果你想直接从客户端设备使用 AdGuard Home HTTPS / DoH / DoT 格式，应该使用公开可信的证书，比如 Let's Encrypt。

明白了

[woshidadi2026]

Cloudflare Origin CA 证书仅适用于 Cloudflare 到起源的连接。浏览器或常规DoH/DoT客户端都不信任它们。

所以这个结果是预期中的：AdGuard Home 可以显示链条无效，这并非 Windows 特有。

如果你想直接从客户端设备使用 AdGuard Home HTTPS / DoH / DoT 格式，应该使用公开可信的证书，比如 Let's Encrypt。

那adguard home有机会改变这一点吗，我知道常规的DoH客户端不信任这个证书，但是可以让adguard home未来支持这个证书吗

[sofvaskina]

This is possible. The information has been forwarded to the developers. Thank you!