From a0d2919fa63c64699f15673a07d3d4e696aec8bd Mon Sep 17 00:00:00 2001 From: Chris Martinelli <56095825+chris-martinelli@users.noreply.github.com> Date: Tue, 1 Jul 2025 08:56:34 -0500 Subject: [PATCH 1/3] Update minimum-tls.mdx added info about minimum TLS version behavior --- .../edge-certificates/additional-options/minimum-tls.mdx | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/src/content/docs/ssl/edge-certificates/additional-options/minimum-tls.mdx b/src/content/docs/ssl/edge-certificates/additional-options/minimum-tls.mdx index 656dff8cb25c734..4d59298dce4097f 100644 --- a/src/content/docs/ssl/edge-certificates/additional-options/minimum-tls.mdx +++ b/src/content/docs/ssl/edge-certificates/additional-options/minimum-tls.mdx @@ -92,6 +92,12 @@ In the following example, the minimum TLS version for a specific hostname will b }} /> +:::note + +Minimum TLS version is set when a certificate is deployed. The zone setting will not override the custom hostname setting because it doesn't re-deploy the custom hostname certificate. + +::: + ## Test supported TLS versions To test supported TLS versions, attempt a request to your website or application while specifying a TLS version. From edb098a43280073ab74497e2b029ebe8cf9b66ca Mon Sep 17 00:00:00 2001 From: Chris Martinelli <56095825+chris-martinelli@users.noreply.github.com> Date: Tue, 1 Jul 2025 09:26:57 -0500 Subject: [PATCH 2/3] Update minimum-tls.mdx --- .../ssl/edge-certificates/additional-options/minimum-tls.mdx | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/content/docs/ssl/edge-certificates/additional-options/minimum-tls.mdx b/src/content/docs/ssl/edge-certificates/additional-options/minimum-tls.mdx index 4d59298dce4097f..6bf5c39828a8438 100644 --- a/src/content/docs/ssl/edge-certificates/additional-options/minimum-tls.mdx +++ b/src/content/docs/ssl/edge-certificates/additional-options/minimum-tls.mdx @@ -96,6 +96,8 @@ In the following example, the minimum TLS version for a specific hostname will b Minimum TLS version is set when a certificate is deployed. The zone setting will not override the custom hostname setting because it doesn't re-deploy the custom hostname certificate. +When a Custom Hostname is created via API and min_tls_version is not specified, the Custom Hostname will default to using the Zone's Minimum TLS Version. + ::: ## Test supported TLS versions From 4895834aec5083b397ecaa81c29ef99dca419d8f Mon Sep 17 00:00:00 2001 From: Chris Martinelli <56095825+chris-martinelli@users.noreply.github.com> Date: Wed, 2 Jul 2025 07:17:16 -0500 Subject: [PATCH 3/3] Update minimum-tls.mdx modified wording on min tls behavior --- .../ssl/edge-certificates/additional-options/minimum-tls.mdx | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/src/content/docs/ssl/edge-certificates/additional-options/minimum-tls.mdx b/src/content/docs/ssl/edge-certificates/additional-options/minimum-tls.mdx index 6bf5c39828a8438..3523c6867e3e8da 100644 --- a/src/content/docs/ssl/edge-certificates/additional-options/minimum-tls.mdx +++ b/src/content/docs/ssl/edge-certificates/additional-options/minimum-tls.mdx @@ -94,9 +94,7 @@ In the following example, the minimum TLS version for a specific hostname will b :::note -Minimum TLS version is set when a certificate is deployed. The zone setting will not override the custom hostname setting because it doesn't re-deploy the custom hostname certificate. - -When a Custom Hostname is created via API and min_tls_version is not specified, the Custom Hostname will default to using the Zone's Minimum TLS Version. +The zone minimum TLS setting will override the custom hostname minmimum TLS setting if the custom hostname minimum TLS version was not defined when created via API. :::