Why can't use SSL certificate created by cloudflare ?

[yufeiluo]

Login int my account in cloudflare,go to :

ssl/tls --> origin server --> create certificate --> create
   |---->origin certificate --> copy and save as cert.pem  file
-->
   |---->private certificate --> copy and save as key.pem  file.

Push into my vps:

scp  cert.pem  root@vps_ip:/etc/ssl/server-cert.pem
scp  private.pem  root@vps_ip:/etc/ssl/server-key.pem

Set in my local machine: cp cert.pem trojan/ca-cert.pem

Start the trojan service,so many errors occurs:

SSL handshake failed with xxx.xxx.xxx.xxx:443: certificate verify failed

If i set false for verify and verify_hostname in config.json:

   "ssl": {
   "verify": true,
   "verify_hostname": true,

Restart trojan again,it works fine!

How can set the value of verify and verify_hostname as true and make SSL handshake suceessful with self-signed certificate for trojan service?

[0xj0hn]

I've also created a self-signed certificate but still doesn't work. It says SSL handshake failed!

[fz68]

Set Cloudflare SSL/TLS encryption mode to FULL Keep Authenticated Origin Pulls to be Off