Manage mTLS and BYO CA certificates right from the Cloudflare dashboard!
Hey there, it's Shiichan! Today I found a small but handy update around certificates.
Cloudflare Changelog
developers.cloudflare.com
What was announced?
Over on Cloudflare's Changelog, they announced that you can now manage mutual TLS (mTLS) and Bring Your Own Certificate Authority (BYO CA) configurations directly from the Cloudflare dashboard. Advanced workflows that used to need the API are now just a few clicks away.
The story so far
Previously, these advanced workflows required the Cloudflare API. Even a small change meant writing code, which raised the bar.
What changes
From now on you can upload and manage certificates right from the dashboard, so you don't have to touch the API. Less fiddling with tokens and curl, and much smoother SSL/TLS operations.
Dive Deep
Three things are newly available in the dashboard:
- AOP certificate management: upload and manage your own certificate authorities for Authenticated Origin Pulls (AOP).
- BYO Client mTLS certificate management: manage your own CA certificates for client mTLS enforcement without API access.
- CDN hostname to client mTLS certificate mapping: associate client mTLS certificates with specific hostnames.
Wrap-up
- mTLS and BYO CA configs can now be managed from the Cloudflare dashboard
- AOP, client mTLS, and hostname mapping that once needed the API are available in the UI
- You can run certificate operations without writing any code
This one's for anyone who wants to protect their origin and APIs, and for infra folks who want easier certificate management!
