You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: src/content/docs/ssl/client-certificates/index.mdx
+3-24Lines changed: 3 additions & 24 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -15,31 +15,10 @@ Use Cloudflare public key infrastructure (PKI) to create client certificates, or
15
15
<GlossaryDefinitionterm="mTLS (mutual TLS)" />
16
16
17
17
:::note[mTLS at Cloudflare]
18
-
For a broader overview of mTLS at Cloudflare refer to the [learning path](/learning-paths/mtls/concepts/).
18
+
For a broader overview of mTLS at Cloudflare refer to [learning paths](/learning-paths/mtls/concepts/).
19
19
:::
20
-
---
21
-
22
-
Use these certificates with Cloudflare [API Shield](/api-shield/) or [Cloudflare Workers](/workers/runtime-apis/bindings/mtls/) to enforce mutual Transport Layer Security (mTLS) encryption.
23
-
24
-
<Renderfile="client-cert-shared" />
25
-
26
-
## API Shield
27
-
28
-
To use API Shield to protect your API or web application, you must do the following:
29
-
30
-
1. Use Cloudflare’s fully hosted public key infrastructure (PKI) to [create a client certificate](/ssl/client-certificates/create-a-client-certificate/).
31
-
32
-
2.[Configure your mobile app or IoT device](/ssl/client-certificates/configure-your-mobile-app-or-iot-device/) to use your Cloudflare-issued client certificate.
33
-
34
-
3.[Enable mTLS](/ssl/client-certificates/enable-mtls/) for the hosts you wish to protect with API Shield.
35
-
36
-
4. Create WAF custom rules that [require API requests to present a valid client certificate](/api-shield/security/mtls/configure/).
37
-
38
-
<Renderfile="cloudflare-managed-client-cert" />
39
20
40
-
## Workers
21
+
## Scope
41
22
42
-
To authenticate Workers requests using mTLS:
43
23
44
-
1. Use Cloudflare’s fully hosted public key infrastructure (PKI) to [create a client certificate](/ssl/client-certificates/create-a-client-certificate/).
45
-
2. Create and use an [mTLS binding](/workers/runtime-apis/bindings/mtls/) to authenticate Workers connections.
0 commit comments