Skip to content

[ZT] Remove cert warning banner #20393

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Mar 1, 2025
Merged

[ZT] Remove cert warning banner #20393

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
a5def0a
Reword default warning
maxvp Feb 28, 2025
997c793
Remove cert warning banners
maxvp Feb 28, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 0 additions & 2 deletions src/content/docs/cloudflare-one/applications/non-http/infrastructure-apps.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,8 +6,6 @@ sidebar:
badge:
variant: tip
text: New
banner:
content: The default global Cloudflare root certificate expired on 2025-02-02. If you installed the default Cloudflare certificate before 2024-10-17, you must <a href="/cloudflare-one/connections/connect-devices/user-side-certificates/#generate-a-cloudflare-root-certificate">generate a new certificate</a> and activate it for your Zero Trust organization to avoid inspection errors.
---

import { Badge, Details, Tabs, TabItem, Render } from "~/components";
Expand Down
2 changes: 0 additions & 2 deletions ...one/connections/connect-devices/user-side-certificates/automated-deployment.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,8 +5,6 @@ sidebar:
order: 1
head: []
description: Automatically deploy a root certificate on desktop devices.
banner:
content: The default global Cloudflare root certificate expired on 2025-02-02. If you installed the default Cloudflare certificate before 2024-10-17, you must <a href="/cloudflare-one/connections/connect-devices/user-side-certificates/#generate-a-cloudflare-root-certificate">generate a new certificate</a> and activate it for your Zero Trust organization to avoid inspection errors.
---

import { Details } from "~/components";
Expand Down
2 changes: 0 additions & 2 deletions ...e-one/connections/connect-devices/user-side-certificates/custom-certificate.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,8 +6,6 @@ sidebar:
head: []
description: Configure WARP to use a custom root certificate instead of the
Cloudflare certificate.
banner:
content: The default global Cloudflare root certificate expired on 2025-02-02. If you installed the default Cloudflare certificate before 2024-10-17, you must <a href="/cloudflare-one/connections/connect-devices/user-side-certificates/#generate-a-cloudflare-root-certificate">generate a new certificate</a> and activate it for your Zero Trust organization to avoid inspection errors.
---

import { Render, Tabs, TabItem } from "~/components";
Expand Down
4 changes: 1 addition & 3 deletions ...ocs/cloudflare-one/connections/connect-devices/user-side-certificates/index.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,6 @@ pcx_content_type: get-started
title: User-side certificates
sidebar:
order: 2
banner:
content: The default global Cloudflare root certificate expired on 2025-02-02. If you installed the default Cloudflare certificate before 2024-10-17, you must <a href="/cloudflare-one/connections/connect-devices/user-side-certificates/#generate-a-cloudflare-root-certificate">generate a new certificate</a> and activate it for your Zero Trust organization to avoid inspection errors.
---

import { Tabs, TabItem } from "~/components";
Expand All @@ -13,7 +11,7 @@ Advanced security features such as [HTTPS traffic inspection](/cloudflare-one/po

Zero Trust [generates a unique root CA](#generate-a-cloudflare-root-certificate) for each account and deploys it across the Cloudflare global network. Alternatively, Enterprise users can upload and deploy their own [custom certificate](/cloudflare-one/connections/connect-devices/user-side-certificates/custom-certificate/).

:::caution[Default WARP certificate expired on 2025-02-02]
:::caution[Default certificate expired on 2025-02-02]
The default Cloudflare certificate expired on 2025-02-02 at 16:05 UTC.

Review how this change impacts certificate propagation to your end-user devices and how to address browser issues in [Troubleshooting](/cloudflare-one/faq/troubleshooting/#as-of-february-2-2025-my-end-user-devices-browser-is-returning-a-your-connection-is-not-private-warning).
Expand Down
2 changes: 0 additions & 2 deletions ...re-one/connections/connect-devices/user-side-certificates/manual-deployment.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,8 +6,6 @@ sidebar:
head: []
description: Manually add a Cloudflare certificate to mobile devices and
individual applications.
banner:
content: The default global Cloudflare root certificate expired on 2025-02-02. If you installed the default Cloudflare certificate before 2024-10-17, you must <a href="/cloudflare-one/connections/connect-devices/user-side-certificates/#generate-a-cloudflare-root-certificate">generate a new certificate</a> and activate it for your Zero Trust organization to avoid inspection errors.
---

import { Details, Render, TabItem, Tabs } from "~/components";
Expand Down
2 changes: 0 additions & 2 deletions src/content/docs/cloudflare-one/policies/browser-isolation/index.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,6 @@ pcx_content_type: concept
title: Browser Isolation
sidebar:
order: 5
banner:
content: The default global Cloudflare root certificate expired on 2025-02-02. If you installed the default Cloudflare certificate before 2024-10-17, you must <a href="/cloudflare-one/connections/connect-devices/user-side-certificates/#generate-a-cloudflare-root-certificate">generate a new certificate</a> and activate it for your Zero Trust organization to avoid inspection errors.
---

:::note
Expand Down
2 changes: 0 additions & 2 deletions src/content/docs/cloudflare-one/policies/data-loss-prevention/index.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,6 @@ pcx_content_type: concept
title: Data Loss Prevention
sidebar:
order: 5
banner:
content: The default global Cloudflare root certificate expired on 2025-02-02. If you installed the default Cloudflare certificate before 2024-10-17, you must <a href="/cloudflare-one/connections/connect-devices/user-side-certificates/#generate-a-cloudflare-root-certificate">generate a new certificate</a> and activate it for your Zero Trust organization to avoid inspection errors.
---

import { GlossaryDefinition } from "~/components";
Expand Down
2 changes: 0 additions & 2 deletions src/content/docs/cloudflare-one/policies/gateway/block-page.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,6 @@ pcx_content_type: how-to
title: Block page
sidebar:
order: 14
banner:
content: The default global Cloudflare root certificate expired on 2025-02-02. If you installed the default Cloudflare certificate before 2024-10-17, you must <a href="/cloudflare-one/connections/connect-devices/user-side-certificates/#generate-a-cloudflare-root-certificate">generate a new certificate</a> and activate it for your Zero Trust organization to avoid inspection errors.
---

import { Render } from "~/components";
Expand Down
2 changes: 0 additions & 2 deletions ...ntent/docs/cloudflare-one/policies/gateway/http-policies/antivirus-scanning.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,6 @@ pcx_content_type: concept
title: AV scanning
sidebar:
order: 5
banner:
content: The default global Cloudflare root certificate expired on 2025-02-02. If you installed the default Cloudflare certificate before 2024-10-17, you must <a href="/cloudflare-one/connections/connect-devices/user-side-certificates/#generate-a-cloudflare-root-certificate">generate a new certificate</a> and activate it for your Zero Trust organization to avoid inspection errors.
---

import { Render, Details } from "~/components";
Expand Down
2 changes: 0 additions & 2 deletions src/content/docs/cloudflare-one/policies/gateway/http-policies/common-policies.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,8 +6,6 @@ sidebar:
head:
- tag: title
content: Common HTTP policies
banner:
content: The default global Cloudflare root certificate expired on 2025-02-02. If you installed the default Cloudflare certificate before 2024-10-17, you must <a href="/cloudflare-one/connections/connect-devices/user-side-certificates/#generate-a-cloudflare-root-certificate">generate a new certificate</a> and activate it for your Zero Trust organization to avoid inspection errors.
---

import { Render, Tabs, TabItem } from "~/components";
Expand Down
2 changes: 0 additions & 2 deletions src/content/docs/cloudflare-one/policies/gateway/http-policies/file-sandboxing.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,6 @@ pcx_content_type: concept
title: File sandboxing
sidebar:
order: 6
banner:
content: The default global Cloudflare root certificate expired on 2025-02-02. If you installed the default Cloudflare certificate before 2024-10-17, you must <a href="/cloudflare-one/connections/connect-devices/user-side-certificates/#generate-a-cloudflare-root-certificate">generate a new certificate</a> and activate it for your Zero Trust organization to avoid inspection errors.
---

import { Render, Details } from "~/components";
Expand Down
2 changes: 0 additions & 2 deletions src/content/docs/cloudflare-one/policies/gateway/http-policies/http3.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,6 @@ pcx_content_type: concept
title: HTTP/3 inspection
sidebar:
order: 3
banner:
content: The default global Cloudflare root certificate expired on 2025-02-02. If you installed the default Cloudflare certificate before 2024-10-17, you must <a href="/cloudflare-one/connections/connect-devices/user-side-certificates/#generate-a-cloudflare-root-certificate">generate a new certificate</a> and activate it for your Zero Trust organization to avoid inspection errors.
---

import { Details } from "~/components";
Expand Down
2 changes: 0 additions & 2 deletions src/content/docs/cloudflare-one/policies/gateway/http-policies/index.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,6 @@ pcx_content_type: configuration
title: HTTP policies
sidebar:
order: 4
banner:
content: The default global Cloudflare root certificate expired on 2025-02-02. If you installed the default Cloudflare certificate before 2024-10-17, you must <a href="/cloudflare-one/connections/connect-devices/user-side-certificates/#generate-a-cloudflare-root-certificate">generate a new certificate</a> and activate it for your Zero Trust organization to avoid inspection errors.
---

import { Details, InlineBadge, Render } from "~/components";
Expand Down
2 changes: 0 additions & 2 deletions src/content/docs/cloudflare-one/policies/gateway/http-policies/tenant-control.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,6 @@ pcx_content_type: how-to
title: Tenant control
sidebar:
order: 4
banner:
content: The default global Cloudflare root certificate expired on 2025-02-02. If you installed the default Cloudflare certificate before 2024-10-17, you must <a href="/cloudflare-one/connections/connect-devices/user-side-certificates/#generate-a-cloudflare-root-certificate">generate a new certificate</a> and activate it for your Zero Trust organization to avoid inspection errors.
---

With Gateway tenant control, you can allow your users access to corporate SaaS applications while blocking access to personal applications. This helps prevent the loss of sensitive or confidential data from a corporate network.
Expand Down
2 changes: 0 additions & 2 deletions src/content/docs/cloudflare-one/policies/gateway/http-policies/tls-decryption.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,6 @@ pcx_content_type: concept
title: TLS decryption
sidebar:
order: 2
banner:
content: The default global Cloudflare root certificate expired on 2025-02-02. If you installed the default Cloudflare certificate before 2024-10-17, you must <a href="/cloudflare-one/connections/connect-devices/user-side-certificates/#generate-a-cloudflare-root-certificate">generate a new certificate</a> and activate it for your Zero Trust organization to avoid inspection errors.
---

import {
Expand Down
8 changes: 3 additions & 5 deletions src/content/docs/cloudflare-one/policies/gateway/http-policies/websocket.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,12 +3,10 @@ pcx_content_type: how-to
title: WebSocket traffic
sidebar:
order: 7
banner:
content: The default global Cloudflare root certificate expired on 2025-02-02. If you installed the default Cloudflare certificate before 2024-10-17, you must <a href="/cloudflare-one/connections/connect-devices/user-side-certificates/#generate-a-cloudflare-root-certificate">generate a new certificate</a> and activate it for your Zero Trust organization to avoid inspection errors.
---

Gateway does not inspect or log [WebSocket](https://datatracker.ietf.org/doc/html/rfc6455) traffic. Instead, Gateway will only log the HTTP details used to make the WebSocket connection, as well as [network session information](/logs/reference/log-fields/account/zero_trust_network_sessions/). To filter your WebSocket traffic, create a policy with the `101` HTTP response code.

| Selector | Operator | Value | Action |
| ------------- | -------- | ----------------------- | ------ |
| HTTP Response | is | 101 SWITCHING_PROTOCOLS | Allow |
| Selector | Operator | Value | Action |
| ------------- | -------- | ------------------------- | ------ |
| HTTP Response | is | _101 SWITCHING_PROTOCOLS_ | Allow |