You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: src/content/docs/learning-paths/mtls/mtls-app-security/index.mdx
+8-2Lines changed: 8 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -15,10 +15,10 @@ By default, mTLS uses Client Certificates issued by a Cloudflare Managed CA. Clo
15
15
16
16
## 1. Enable mTLS
17
17
18
-
1. Go to your Cloudflare dashboard and selecting your account.
18
+
1. Go to your Cloudflare dashboard and select your account.
19
19
2. Select **SSL/TLS** > **[Client Certificates](/ssl/client-certificates/)** tab and add the Hosts (hostnames) you want to [enable mTLS](/ssl/client-certificates/enable-mtls/) for.
3. Select **Create Certificate** to generate the private key (usually referred to as Private Certificate) and Certificate Signing Request (CSR) with Cloudflare (which includes the Public Certificate), or use your own private key and CSR. Using your own allows you to also [label client certificates](/ssl/client-certificates/label-client-certificate/).
Or use a script like this one from [GitHub](https://github.com/erfianugrah/rootcatest/blob/main/fullgenerator.py).
32
32
33
+
Do not forget to copy the values shown when creating the certificate as they become unavailable after creation.
34
+
33
35
## 2. Install the client certificate
34
36
35
37
In order for a client to utilize the Client Certificate you created, it must be on the devices that you want to use them on. You will want to place them in the same directory as your process / script that targets your APIs / hostnames.
@@ -44,12 +46,16 @@ Another example is to generate a [PKCS12 (P12) certificate](https://en.wikipedia
mTLS is verified and checked in the [Cloudflare WAF phase](/waf/reference/phases/). This is done by creating WAF [Custom Rules](/waf/custom-rules/) using the dynamic fields.
Copy file name to clipboardExpand all lines: src/content/docs/learning-paths/mtls/mtls-app-security/related-features.mdx
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -158,4 +158,4 @@ Cloudflare Workers can provide details around the Client Certificate, such as re
158
158
159
159
160
160
:::note
161
-
Snippets do not support any [Bindings](/workers/runtime-apis/bindings/) and does not work with mTLS.
161
+
Snippets do not support any [Bindings](/workers/runtime-apis/bindings/) and do not work with mTLS. However, you can [validate JSON web tokens (JWT)](/rules/snippets/examples/jwt-validation/).
0 commit comments