Skip to content

[SSL] Update API links #25455

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: production
Choose a base branch
from
+8 −8
Open

[SSL] Update API links #25455

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 8 additions & 8 deletions src/content/docs/ssl/origin-configuration/custom-origin-trust-store.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,15 +11,15 @@ description: Custom Origin Trust Store allows you to upload certificate

import { Render } from "~/components";

By default, Cloudflare's global network maintains a list of publicly trusted certificate authorities. This means that when using [Full (strict) encryption mode](/ssl/origin-configuration/ssl-modes/full-strict/), Cloudflare will only trust origin server certificates issued by a CA in this trust store.
By default, Cloudflare's global network maintains [a list of publicly trusted certificate authorities](https://github.com/cloudflare/cfssl_trust). This means that when using [Full (strict) encryption mode](/ssl/origin-configuration/ssl-modes/full-strict/), Cloudflare will only trust origin server certificates issued by a CA included in this trust store.

<Render file="custom-origin-trust-store-definition" product="ssl" /> <br />

When a CA has been uploaded to Custom Origin Server Trust Store, Cloudflare will ignore all default publicly trusted CAs and exclusively use the CA or CAs that have been uploaded to authenticate the origin server.

## Availability

To get access to Custom Origin Trust Store, you need to have [Advanced Certificate Manager](/ssl/edge-certificates/advanced-certificate-manager/) enabled on your zone.
To get access to Custom Origin Trust Store, [Advanced Certificate Manager](/ssl/edge-certificates/advanced-certificate-manager/) must be enabled on the zone.

## How to

Expand All @@ -33,9 +33,9 @@ With [Full (strict) encryption mode](/ssl/origin-configuration/ssl-modes/full-st

## API commands

| Command | Method | Endpoint |
| -------------------------------- | -------- | ---------------------------------------------- |
| Create custom origin trust store | `POST` | `/zones/<ZONE_ID>/acm/custom_trust_store` |
| List custom origin trust stores | `GET` | `/zones/<ZONE_ID>/acm/custom_trust_store` |
| Get custom origin trust store | `GET` | `/zones/<ZONE_ID>/acm/custom_trust_store/<ID>` |
| Delete custom origin trust store | `DELETE` | `/zones/<ZONE_ID>/acm/custom_trust_store/<ID>` |
| Command | Method + URL stub | Notes |
| ---------------------------------------------------------------------------------------------------------- | -------------------------------------------------- | ------------------------------------------- |
| [List Custom Origin Trust Store Details](/api/resources/acm/subresources/custom_trust_store/methods/list/) | `GET zones/:zone_id/acm/custom_trust_store` | |
| [Custom Origin Trust Store Details](/api/resources/acm/subresources/custom_trust_store/methods/get/) | `GET zones/:zone_id/acm/custom_trust_store/:id` | The `:id` can be found via the List command |
| [Upload Custom Origin Trust Store](/api/resources/acm/subresources/custom_trust_store/methods/create/) | `POST zones/:zone_id/acm/custom_trust_store` | |
| [Delete Custom Origin Trust Store](/api/resources/acm/subresources/custom_trust_store/methods/delete/) | `DELETE zones/:zone_id/acm/custom_trust_store/:id` | The `:id` can be found via the List command |
Loading