From 33fb5afbccf8828fb97477009c817eb56e976c10 Mon Sep 17 00:00:00 2001 From: Max Phillips Date: Wed, 8 Oct 2025 16:51:21 -0500 Subject: [PATCH 1/5] Add curl instructions --- .../manual-deployment.mdx | 20 +++++++++++++++++++ 1 file changed, 20 insertions(+) diff --git a/src/content/docs/cloudflare-one/connections/connect-devices/user-side-certificates/manual-deployment.mdx b/src/content/docs/cloudflare-one/connections/connect-devices/user-side-certificates/manual-deployment.mdx index 40af19b24b00564..8cd02321323cb08 100644 --- a/src/content/docs/cloudflare-one/connections/connect-devices/user-side-certificates/manual-deployment.mdx +++ b/src/content/docs/cloudflare-one/connections/connect-devices/user-side-certificates/manual-deployment.mdx @@ -482,6 +482,26 @@ To configure Git to trust a Cloudflare certificate, run the following command: git config --global http.sslcainfo [PATH_TO_CLOUDFLARE_CERT] ``` +### cURL + +In most cases, cURL will use your system's native certificate store. To force cURL to use your default certificate, add the the `--ca-native` flag. For example: + +```curl +curl --ca-native https://example.com +``` + +#### cURL on macOS + +To use a Cloudflare root certificate with cURL on macOS, [install the certificate to the operating system keychain](#macos). + +#### cURL on Windows + +To use a Cloudflare certificate with the version of cURL preinstalled on Windows or another version that uses the Schannel (WinSSL) backend, [install the certificate to the Windows certificate store](#windows). + +#### cURL on Linux + +To use a Cloudflare root certificate with cURL on Linux, [install the certificate to your distro's certificate store](#linux). + ### npm 1. [Download a Cloudflare certificate](#download-the-cloudflare-root-certificate) in `.pem` format. From 5ca7612f6925598f1ce3b9cd1e5fb15fbadd3ec1 Mon Sep 17 00:00:00 2001 From: Max Phillips Date: Thu, 9 Oct 2025 13:18:22 -0500 Subject: [PATCH 2/5] Add OpenSSL note --- .../user-side-certificates/manual-deployment.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/content/docs/cloudflare-one/connections/connect-devices/user-side-certificates/manual-deployment.mdx b/src/content/docs/cloudflare-one/connections/connect-devices/user-side-certificates/manual-deployment.mdx index 8cd02321323cb08..df4b670685ac065 100644 --- a/src/content/docs/cloudflare-one/connections/connect-devices/user-side-certificates/manual-deployment.mdx +++ b/src/content/docs/cloudflare-one/connections/connect-devices/user-side-certificates/manual-deployment.mdx @@ -496,7 +496,7 @@ To use a Cloudflare root certificate with cURL on macOS, [install the certificat #### cURL on Windows -To use a Cloudflare certificate with the version of cURL preinstalled on Windows or another version that uses the Schannel (WinSSL) backend, [install the certificate to the Windows certificate store](#windows). +To use a Cloudflare certificate with the version of cURL preinstalled on Windows or another version that uses the Schannel (WinSSL) backend, [install the certificate to the Windows certificate store](#windows). If you use an older or custom version of cURL built with the OpenSSL backend, you will need to [manually configure cURL to use the certificate](#curl). #### cURL on Linux From b2be3a0179df0953f023ad618cbcac1ccf5b777f Mon Sep 17 00:00:00 2001 From: Max Phillips Date: Thu, 9 Oct 2025 13:34:26 -0500 Subject: [PATCH 3/5] Adjust wording --- .../user-side-certificates/manual-deployment.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/content/docs/cloudflare-one/connections/connect-devices/user-side-certificates/manual-deployment.mdx b/src/content/docs/cloudflare-one/connections/connect-devices/user-side-certificates/manual-deployment.mdx index df4b670685ac065..3db0d050ee80c07 100644 --- a/src/content/docs/cloudflare-one/connections/connect-devices/user-side-certificates/manual-deployment.mdx +++ b/src/content/docs/cloudflare-one/connections/connect-devices/user-side-certificates/manual-deployment.mdx @@ -484,7 +484,7 @@ git config --global http.sslcainfo [PATH_TO_CLOUDFLARE_CERT] ### cURL -In most cases, cURL will use your system's native certificate store. To force cURL to use your default certificate, add the the `--ca-native` flag. For example: +By default, cURL will use your system's native certificate store. To force cURL to use your default certificate, add the the `--ca-native` flag. For example: ```curl curl --ca-native https://example.com From 4d60bbd5f37e6e87c71d00ec2816211d2ceaa600 Mon Sep 17 00:00:00 2001 From: Max Phillips Date: Thu, 9 Oct 2025 13:35:48 -0500 Subject: [PATCH 4/5] Change distro --- .../user-side-certificates/manual-deployment.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/content/docs/cloudflare-one/connections/connect-devices/user-side-certificates/manual-deployment.mdx b/src/content/docs/cloudflare-one/connections/connect-devices/user-side-certificates/manual-deployment.mdx index 3db0d050ee80c07..2db3b6cbe898343 100644 --- a/src/content/docs/cloudflare-one/connections/connect-devices/user-side-certificates/manual-deployment.mdx +++ b/src/content/docs/cloudflare-one/connections/connect-devices/user-side-certificates/manual-deployment.mdx @@ -500,7 +500,7 @@ To use a Cloudflare certificate with the version of cURL preinstalled on Windows #### cURL on Linux -To use a Cloudflare root certificate with cURL on Linux, [install the certificate to your distro's certificate store](#linux). +To use a Cloudflare root certificate with cURL on Linux, [install the certificate to your distribution's certificate store](#linux). ### npm From 05df696870786d3add6af3534de9fc68dfb618c3 Mon Sep 17 00:00:00 2001 From: Max Phillips Date: Thu, 9 Oct 2025 15:18:35 -0500 Subject: [PATCH 5/5] Add more details --- .../user-side-certificates/manual-deployment.mdx | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/src/content/docs/cloudflare-one/connections/connect-devices/user-side-certificates/manual-deployment.mdx b/src/content/docs/cloudflare-one/connections/connect-devices/user-side-certificates/manual-deployment.mdx index 2db3b6cbe898343..31a5abe24bf375e 100644 --- a/src/content/docs/cloudflare-one/connections/connect-devices/user-side-certificates/manual-deployment.mdx +++ b/src/content/docs/cloudflare-one/connections/connect-devices/user-side-certificates/manual-deployment.mdx @@ -484,7 +484,7 @@ git config --global http.sslcainfo [PATH_TO_CLOUDFLARE_CERT] ### cURL -By default, cURL will use your system's native certificate store. To force cURL to use your default certificate, add the the `--ca-native` flag. For example: +By default, cURL will use your operating system's native certificate store. To force cURL to use your default certificate, add the `--ca-native` flag to the command. For example: ```curl curl --ca-native https://example.com @@ -492,7 +492,7 @@ curl --ca-native https://example.com #### cURL on macOS -To use a Cloudflare root certificate with cURL on macOS, [install the certificate to the operating system keychain](#macos). +To use a Cloudflare root certificate with cURL on macOS, [install the certificate to the operating system keychain](#macos). cURL will use the macOS root certificate by default. #### cURL on Windows @@ -500,7 +500,7 @@ To use a Cloudflare certificate with the version of cURL preinstalled on Windows #### cURL on Linux -To use a Cloudflare root certificate with cURL on Linux, [install the certificate to your distribution's certificate store](#linux). +To use a Cloudflare root certificate with cURL on Linux, [install the certificate to your distribution's certificate store](#linux). cURL will use the Linux root certificate by default. ### npm