Increase the minimum TLS version for your domains

You set the minimum TLS version once for your Custom Domain, and CloudCannon shows which of its Subdomains meet it. On CloudCannon, the minimum TLS version is either 1.2 by default, or 1.3. For more about the minimum TLS version and how to choose between 1.2 and 1.3, please read our documentation on what an SSL Certificate is.

New Subdomains start at the minimum TLS version for your Custom Domain. When you raise the minimum for your Custom Domain, CloudCannon also raises every Subdomain below it, and the wildcard SSL Certificate that covers subdomains you haven't set up. Subdomains update shortly after you save.

When you lower the minimum for your Custom Domain, Subdomains keep their own minimum TLS version unless you check the Also lower [Number] subdomains to TLS [Version] checkbox. With the checkbox checked, CloudCannon lowers every Subdomain above the new minimum, and the wildcard SSL Certificate, to the new minimum. Without it, only new Subdomains start at the lower version.

CloudCannon saves the minimum TLS version on every Subdomain. CloudCannon's Cloudflare network applies it to Subdomains on CloudCannon Hosting and Cloudflare Proxy. Single Origin Subdomains count toward the check below like any other Subdomain.

Check which Subdomains meet your minimum TLS version#

The Minimum TLS Card on the Summary tab of the Domain page shows the minimum TLS version for your Custom Domain, the lowest version any Subdomain accepts. Below the version, the Card confirms that all Subdomains meet it, or says how many Subdomains are below it.

The TLS section under the Domain Settings tab sets the minimum TLS version for your Custom Domain, and shows the same check in more detail. When you select a new version from the Minimum TLS version dropdown, CloudCannon lists the Subdomains that change to that version under These subdomains change to TLS [Version] (or This subdomain changes to TLS [Version] for one), with each Subdomain's own minimum TLS version. Click the Card for a Subdomain in the list to open its page. If every Subdomain already meets the version you select, the section says All subdomains meet TLS [Version]. instead. After you save, until the change reaches them shortly after, the section lists the Subdomains still below the new minimum under [Number] subdomains are below TLS [Version].

Set the minimum TLS version for your Custom Domain#

To set the minimum TLS version for your Custom Domain:

1. Log in to CloudCannon.
2. Select the Organization your Custom Domain is connected to.
3. Click the Custom Domains link in the App Sidebar. CloudCannon will open the Domains Browser.
4. Click the Card for the domain you want to update. CloudCannon will open the Summary tab of the Domain page for this Custom Domain.
5. Click the View TLS settings link below the Minimum TLS Card. CloudCannon will open the TLS section under the Domain Settings tab.
6. Select a version number from the Minimum TLS version dropdown. CloudCannon will list the Subdomains that change to that version.
7. (Optional.) If you are lowering the minimum, check the Also lower [Number] subdomains to TLS [Version] checkbox.
8. Click the Update minimum TLS button.

CloudCannon will save the minimum TLS version for your Custom Domain, raise the Subdomains below it, and show The minimum TLS version for [Base Domain] is now [Version].

Raise the minimum TLS version for one Subdomain#

You can give one Subdomain a higher minimum TLS version than the rest of your Custom Domain, such as 1.3 for a Subdomain that handles sign-ins while the others stay on 1.2. A Subdomain's minimum can't be lower than the minimum for its Custom Domain, so the Minimum TLS version dropdown only offers versions at or above it.

On the Subdomain page for your Base Domain (e.g., example.com), the minimum you choose also applies to subdomains you haven't set up, which the wildcard SSL Certificate covers.

To set the minimum TLS version for one Subdomain:

1. Log in to CloudCannon.
2. Select the Organization your Custom Domain is connected to.
3. Click the Custom Domains link in the App Sidebar. CloudCannon will open the Domains Browser.
4. Click the Card for the domain that has the Subdomain. CloudCannon will open the Summary tab of the Domain page.
5. Click the Subdomains tab. CloudCannon will open the list of Subdomains.
6. Click the Card for the Subdomain. CloudCannon will open the page for that Subdomain.
7. Click the Configure HTTPS button in the HTTPS section. CloudCannon will open the HTTPS for [Subdomain] modal.
8. Select a version from the Minimum TLS version dropdown under HTTP.
9. Click the Save HTTPS button.

CloudCannon will save the minimum TLS version for the Subdomain and apply it shortly after.