Skip to content

Commit 956cad6

Browse files
[SSL] dvc-conflicting-records partial and details on custom certs (#25871)
* Create dvc-conflicting-records partial and add to CF4SaaS * Add instructions on how to delete custom certificates
1 parent 62b24da commit 956cad6

File tree

4 files changed

+32
-12
lines changed

4 files changed

+32
-12
lines changed

src/content/docs/cloudflare-for-platforms/cloudflare-for-saas/security/certificate-management/issue-and-validate/validate-certificates/delegated-dcv.mdx

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -33,6 +33,8 @@ Once this is complete, Cloudflare will place two TXT DCV records - one for `exam
3333

3434
If desired, you could also manually fetch the DCV tokens and share them with your customers.
3535

36+
<Render file="dcv-conflicting-records" product="ssl" />
37+
3638
## Moved domains
3739

3840
If you [move your SaaS zone to another account](/fundamentals/manage-domains/move-domain/), you will need to update the `CNAME` record with a new hostname value.

src/content/docs/ssl/edge-certificates/changing-dcv-method/methods/delegated-dcv.mdx

Lines changed: 2 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ head:
88
content: Delegated DCV — Domain Control Validation — SSL/TLS
99
---
1010

11-
import { Example, FeatureTable } from "~/components";
11+
import { Example, FeatureTable, Render } from "~/components";
1212

1313
Delegated DCV allows zones with [partial DNS setups](/dns/zone-setups/partial-setup/) - meaning authoritative DNS is not provided by Cloudflare - to delegate the DCV process to Cloudflare.
1414

@@ -72,15 +72,7 @@ _acme-challenge.sub.example.com CNAME sub.example.com.<COPIED_VALIDATION_URL>.
7272

7373
</Example>
7474

75-
:::caution[Remove previous TXT records]
76-
77-
Existing TXT records for `_acme-challenge` will conflict with the delegated DCV CNAME record. Make sure to check and remove records such as the following:
78-
79-
```txt
80-
_acme-challenge.example.com TXT <CERTIFICATE_VALIDATION_VALUE>
81-
```
82-
83-
:::
75+
<Render file="dcv-conflicting-records" product="ssl" />
8476

8577
Once the `CNAME` records are in place, Cloudflare will add TXT DCV tokens for every hostname on the Advanced certificate that has a DCV delegation record in place, as long as the zone is [active](/dns/zone-setups/reference/domain-status/) on Cloudflare.
8678

src/content/docs/ssl/edge-certificates/custom-certificates/uploading.mdx

Lines changed: 14 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -179,9 +179,9 @@ To update a certificate in the dashboard:
179179

180180
<DashButton url="/?to=/:account/:zone/ssl-tls/edge-certificates" />
181181

182-
2. In **Edge Certificates**, locate a custom certificate and click on it to expand.
182+
2. In **Edge Certificates**, locate a custom certificate and select it to expand.
183183

184-
3. Select the wrench icon and select **Replace SSL certificate and key**.
184+
3. Select the wrench button and choose **Replace SSL certificate and key**.
185185

186186
4. Follow the same steps as [upload a new certificate](#upload-a-custom-certificate).
187187

@@ -196,3 +196,15 @@ To update a certificate using the API, send a [`PATCH`](/api/resources/custom_ce
196196
To update the **Private Key Restriction** setting of a certificate, delete and re-add the certificate.
197197

198198
:::
199+
200+
---
201+
202+
## Delete a custom certificate
203+
204+
1. In the Cloudflare dashboard, go to the SSL/TLS **Edge Certificates** page.
205+
206+
<DashButton url="/?to=/:account/:zone/ssl-tls/edge-certificates" />
207+
208+
2. In **Edge Certificates**, locate a custom certificate and select it to expand.
209+
3. Select the cross button.
210+
4. Select **Confirm** to delete the certificate.
Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
---
2+
{}
3+
4+
---
5+
6+
:::caution[Remove previous TXT records]
7+
8+
Existing TXT records for `_acme-challenge` will conflict with the delegated DCV CNAME record. Make sure to check and remove records such as the following:
9+
10+
```txt
11+
_acme-challenge.example.com TXT <CERTIFICATE_VALIDATION_VALUE>
12+
```
13+
14+
:::

0 commit comments

Comments
 (0)