Skip to content

Commit 7da2ffe

Browse files
RebeccaTamachiroelithrar
authored andcommitted
[SSL] Fix unnecessary overviews (#16883)
* First pass adding all hideIndex: true * Rename custom-origin-trust-store.mdx and delete empty folder * Rename page with TroubleshootingList component * Re-org AOP setup: hide index and move extra content to new page * Add DirectoryListing to index.mdx in aop/set-up
1 parent 135c157 commit 7da2ffe

File tree

12 files changed

+73
-49
lines changed

12 files changed

+73
-49
lines changed

src/content/docs/ssl/edge-certificates/additional-options/index.mdx

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,8 @@ pcx_content_type: navigation
33
title: Additional options
44
sidebar:
55
order: 11
6+
group:
7+
hideIndex: true
68

79
---
810

src/content/docs/ssl/edge-certificates/troubleshooting/index.mdx

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,8 @@ pcx_content_type: navigation
33
title: Troubleshooting
44
sidebar:
55
order: 12
6+
group:
7+
hideIndex: true
68
head:
79
- tag: title
810
content: Troubleshooting edge certificates

src/content/docs/ssl/keyless-ssl/configuration/index.mdx

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,8 @@ title: Get started
33
pcx_content_type: navigation
44
sidebar:
55
order: 1
6+
group:
7+
hideIndex: true
68
head:
79
- tag: title
810
content: Get started with Keyless SSL

src/content/docs/ssl/keyless-ssl/reference/index.mdx

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,8 @@ title: Reference
33
pcx_content_type: navigation
44
sidebar:
55
order: 5
6+
group:
7+
hideIndex: true
68
head:
79
- tag: title
810
content: Reference — Keyless SSL

src/content/docs/ssl/origin-configuration/authenticated-origin-pull/set-up/index.mdx

Lines changed: 5 additions & 47 deletions
Original file line numberDiff line numberDiff line change
@@ -2,57 +2,15 @@
22
pcx_content_type: how-to
33
title: Setup
44
sidebar:
5-
order: 2
5+
order: 3
6+
group:
7+
hideIndex: true
68
head:
79
- tag: title
810
content: Set up Authenticated Origin Pulls
911

1012
---
1113

12-
import { Render } from "~/components"
14+
import { DirectoryListing } from "~/components"
1315

14-
To set up Authenticated Origin Pulls - which help ensure requests to your origin server come from the Cloudflare network - choose whether to enable them on [all hostnames in your zone](/ssl/origin-configuration/authenticated-origin-pull/set-up/zone-level/) or on a [per-hostname basis](/ssl/origin-configuration/authenticated-origin-pull/set-up/per-hostname/).
15-
16-
:::caution
17-
<Render file="aop-per-hostname-cert-requirement" />
18-
:::
19-
20-
***
21-
22-
## Other situations
23-
24-
### Use specialized certificates
25-
26-
To apply different client certificates simultaneously at both the zone and hostname level, you can combine zone-level and per-hostname custom certificates.
27-
28-
First set up [zone-level pulls](/ssl/origin-configuration/authenticated-origin-pull/set-up/zone-level/) using a certificate. Then, upload multiple, specialized certificates for [individual hostnames](/ssl/origin-configuration/authenticated-origin-pull/set-up/per-hostname/).
29-
30-
:::note[Note]
31-
32-
33-
Since per-hostname certificates are more specific, they take precedence over zone certificates.
34-
35-
36-
:::
37-
38-
### Delete a certificate
39-
40-
Client certificates are not deleted from Cloudflare upon expiration unless a [delete](/api/operations/zone-level-authenticated-origin-pulls-delete-certificate) or [replace](/api/operations/zone-level-authenticated-origin-pulls-upload-certificate) request is sent to the Cloudflare API.
41-
42-
However, requests are dropped at your origin if your origin only accepts a valid client certificate.
43-
44-
### Replace a client cert (without downtime)
45-
46-
For hostname:
47-
48-
1. [Upload the new certificate](/api/operations/per-hostname-authenticated-origin-pull-upload-a-hostname-client-certificate).
49-
50-
2. [Enable Authenticated Origin Pulls for that specific hostname](/api/operations/per-hostname-authenticated-origin-pull-enable-or-disable-a-hostname-for-client-authentication).
51-
52-
For global:
53-
54-
1. [Upload the new certificate](/api/operations/zone-level-authenticated-origin-pulls-upload-certificate).
55-
56-
2. [Check whether new certificate is Active](/api/operations/zone-level-authenticated-origin-pulls-get-certificate-details).
57-
58-
3. Once certificate is active, [delete the previous certificate](/api/operations/zone-level-authenticated-origin-pulls-delete-certificate).
16+
<DirectoryListing />
Lines changed: 48 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,48 @@
1+
---
2+
pcx_content_type: how-to
3+
title: Manage certificates
4+
sidebar:
5+
order: 3
6+
head:
7+
- tag: title
8+
content: Set up Authenticated Origin Pulls
9+
10+
---
11+
12+
Refer to the following sections to learn how to manage certificates used with the different Authenticated Origin Pulls setups.
13+
14+
## Use specialized certificates
15+
16+
To apply different client certificates simultaneously at both the zone and hostname level, you can combine zone-level and per-hostname custom certificates.
17+
18+
First set up [zone-level pulls](/ssl/origin-configuration/authenticated-origin-pull/set-up/zone-level/) using a certificate. Then, upload multiple, specialized certificates for [individual hostnames](/ssl/origin-configuration/authenticated-origin-pull/set-up/per-hostname/).
19+
20+
:::note[Note]
21+
22+
23+
Since per-hostname certificates are more specific, they take precedence over zone certificates.
24+
25+
26+
:::
27+
28+
## Delete a certificate
29+
30+
Client certificates are not deleted from Cloudflare upon expiration unless a [delete](/api/operations/zone-level-authenticated-origin-pulls-delete-certificate) or [replace](/api/operations/zone-level-authenticated-origin-pulls-upload-certificate) request is sent to the Cloudflare API.
31+
32+
However, requests are dropped at your origin if your origin only accepts a valid client certificate.
33+
34+
## Replace a client cert (without downtime)
35+
36+
For hostname:
37+
38+
1. [Upload the new certificate](/api/operations/per-hostname-authenticated-origin-pull-upload-a-hostname-client-certificate).
39+
40+
2. [Enable Authenticated Origin Pulls for that specific hostname](/api/operations/per-hostname-authenticated-origin-pull-enable-or-disable-a-hostname-for-client-authentication).
41+
42+
For global:
43+
44+
1. [Upload the new certificate](/api/operations/zone-level-authenticated-origin-pulls-upload-certificate).
45+
46+
2. [Check whether new certificate is Active](/api/operations/zone-level-authenticated-origin-pulls-get-certificate-details).
47+
48+
3. Once certificate is active, [delete the previous certificate](/api/operations/zone-level-authenticated-origin-pulls-delete-certificate).

src/content/docs/ssl/origin-configuration/authenticated-origin-pull/set-up/per-hostname.mdx

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -13,15 +13,18 @@ import { AvailableNotifications, Render } from "~/components"
1313

1414
When you enable Authenticated Origin Pulls per hostname, all proxied traffic to the specified hostname is authenticated at the origin web server. You can use client certificates from your Private PKI to authenticate connections from Cloudflare.
1515

16-
<Render file="aop-per-hostname-cert-requirement" /><br />
16+
17+
:::caution[Warning]
18+
<Render file="aop-per-hostname-cert-requirement" />
19+
:::
1720

1821
## 1. Upload custom certificate
1922

2023
First, follow the API instructions to [upload a custom certificate to Cloudflare](/ssl/edge-certificates/custom-certificates/uploading/#upload-a-custom-certificate), but use the [`/origin_tls_client_auth/hostnames/certificates` endpoint](/api/operations/per-hostname-authenticated-origin-pull-upload-a-hostname-client-certificate).
2124

2225
:::note
2326

24-
You must upload a [leaf certificate](/ssl/concepts/#chain-of-trust). If you upload a root CA instead, the API will return a `missing leaf certificate` error.
27+
You must upload a [leaf certificate](/ssl/concepts/#chain-of-trust). If you upload a root CA instead, the API will return a `missing leaf certificate` error.
2528
:::
2629

2730
In the API response, save the certificate `id` since it will be required in step 4.

src/content/docs/ssl/origin-configuration/index.mdx

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,8 @@ title: Origin server
33
pcx_content_type: navigation
44
sidebar:
55
order: 5
6+
group:
7+
hideIndex: true
68

79
---
810

src/content/docs/ssl/reference/index.mdx

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,8 @@ title: Reference
33
pcx_content_type: navigation
44
sidebar:
55
order: 10
6+
group:
7+
hideIndex: true
68

79
---
810

0 commit comments

Comments
 (0)