Cloudflare
Copy link to the page “Cloudflare”
Discovers zones and uploads or renews the selected custom certificate.
What happens
- The appliance connects to Cloudflare through Cloudflare API on port 443.
- The first time, the certificate is uploaded. On renewal, the existing custom certificate is updated in its slot. When Cloudflare returns a new id, use it for the next renewal. This also applies to rollback. If it fails: Rollback puts the previous certificate back, or deletes a first upload.
- Verification: the package waits until the certificate is active, and checks its fingerprint when the API returns the certificate. Rollback is also read back. This checks API state, not the certificate served at the edge.
Technical details
- Connection
- The package runs on the appliance, which connects over HTTPS to Cloudflare API, port 443. No agent is installed.
- You need
- API token with read and write access to Custom Certificates on the zone. A renewal uses the id of the custom certificate it renews, and the previous certificate and key, which must be provided for renewal and rollback. API HTTPS is verified by default; a saved management certificate fingerprint or CA can be configured.
- Platform
- Business or Enterprise zone
- Actions
- Discovery, Installation, Verification, Rollback, Removal
- Packages
-
cloudflare-api1.1.0