Skip to content

Commit 7e2a0e6

Browse files
committed
Updated to reflect RSA and ECDSA cert bundling on custom hostnames
1 parent 2961b4c commit 7e2a0e6

File tree

2 files changed

+13
-3
lines changed

2 files changed

+13
-3
lines changed

src/content/docs/cloudflare-for-platforms/cloudflare-for-saas/security/certificate-management/custom-certificates/index.mdx

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -28,6 +28,4 @@ Cloudflare also only accepts publicly trusted certificates of these types:
2828
* `SHA1WithRSA`
2929
* `ECDSAWithSHA256`
3030

31-
You can only use one of the different supported types. For example, you cannot upload an `SHA256WithRSA` + `ECDSAWithSHA256` certificate.
32-
3331
If you attempt to upload another type of certificate or a certificate that has been self-signed, it will be rejected.

src/content/docs/cloudflare-for-platforms/cloudflare-for-saas/security/certificate-management/custom-certificates/uploading-certificates.mdx

Lines changed: 13 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ For more details on bundle method, refer to [Bundle Methodologies](/ssl/edge-cer
2828

2929
### With the API
3030

31-
The call below will upload a certificate for use with `app.example.com`.
31+
### The call below will upload a certificate for use with `app.example.com`.
3232

3333
Note that if you are using an ECC key generated by OpenSSL, you will need to first remove the `-----BEGIN EC PARAMETERS-----...-----END EC PARAMETERS-----` section of the file.
3434

@@ -58,6 +58,18 @@ Use a [POST request](/api/resources/custom_hostnames/methods/create/) to upload
5858

5959
The serial number returned is unique to the issuer, but not globally unique. Additionally, it is returned as a string, not an integer.
6060

61+
## Certificate bundling
62+
63+
Use a [PATCH request](/api/resources/custom_hostnames/methods/edit/) to upload an RSA and/or ECDSA certificate to a custom hostname.
64+
65+
### Delete a custom certificate and custom key for custom hostname
66+
67+
Use a [DELETE request](/api/resources/custom_hostnames/subresources/certificate_pack/) to remove one custom certificate and key from a custom hostname. You cannot delete a certificate if it is the only remaining certificate in the pack.
68+
69+
### Replace a custom certificate and custom key in custom hostname
70+
71+
Use a [PUT request](/api/resources/custom_hostnames/subresources/certificate_pack/subresources/certificates/methods/update/) to replace a single custom certificate within a certificate pack within a certificate pack that contains two bundled certificates. You can only replace an RSA certificate with another RSA certificate or an ECDSA certificate with another ECDSA certificate.
72+
6173
***
6274

6375
## Move to a Cloudflare certificate

0 commit comments

Comments
 (0)