Skip to content

[SSL] Correcting AOP doc #25394

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
Oct 15, 2025
Merged

[SSL] Correcting AOP doc #25394

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
dfe9ef4
[SSL] Update per-hostname.mdx
ngayerie Sep 24, 2025
8b9a43b
[SSL] Update zone-level.mdx
ngayerie Sep 24, 2025
69fb23c
Merge branch 'production' into patch-23
RebeccaTamachiro Oct 15, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 3 additions & 7 deletions ...docs/ssl/origin-configuration/authenticated-origin-pull/set-up/per-hostname.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -46,21 +46,17 @@ In the API response, save the certificate `id` since it will be required in step
product="ssl"
/>

## 3. Enable Authenticated Origin Pulls (globally)

<Render file="aop-enable-feature" product="ssl" />

## 4. Enable Authenticated Origin Pulls for the hostname
## 3. Enable Authenticated Origin Pulls for the hostname

Use the Cloudflare API to send a [`PUT`](/api/resources/origin_tls_client_auth/subresources/hostnames/methods/update/) request to enable Authenticated Origin Pulls for specific hostnames.

If you had set up logging on your origin during step 2, test and confirm that Authenticated Origin Pulls is working.

## 5. Enforce validation check on your origin
## 4. Enforce validation check on your origin

<Render file="aop-enforce-validation" product="ssl" />

## 6. (Optional) Set up alerts for hostname-level Authenticated Origin Pulls certificates
## 5. (Optional) Set up alerts for hostname-level Authenticated Origin Pulls certificates

You can configure alerts to receive notifications before your AOP certificates expire.

Expand Down
10 changes: 2 additions & 8 deletions ...t/docs/ssl/origin-configuration/authenticated-origin-pull/set-up/zone-level.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -54,17 +54,11 @@ Using a custom certificate is required if you need your domain to be [FIPS](http

<Render file="aop-enable-feature" product="ssl" />

## 4. Enable Authenticated Origin Pulls for all hostnames in a zone

Use the Cloudflare API to send a [`PUT`](/api/resources/origin_tls_client_auth/subresources/settings/methods/update/) request to enable zone-level authenticated origin pulls.

If you had set up logging on your origin during [step 2](#2-configure-origin-to-accept-client-certificates), test and confirm that Authenticated Origin Pulls is working.

## 5. Enforce validation check on your origin
## 4. Enforce validation check on your origin

<Render file="aop-enforce-validation" product="ssl" />

## 6. (Optional) Set up alerts for zone-level Authenticated Origin Pulls certificates
## 5. (Optional) Set up alerts for zone-level Authenticated Origin Pulls certificates

You can configure alerts to receive notifications before your AOP certificates expire.

Expand Down
Loading