Skip to content
Cloudflare Docs

Changelog

Subscribe to RSS

2025-04-09


Cloudflare Secrets Store now available in Beta

Cloudflare Secrets Store is available today in Beta. You can now store, manage, and deploy account level secrets from a secure, centralized platform to your Workers.

Import repo or choose template

To spin up your Cloudflare Secrets Store, simply click the new Secrets Store tab in the dashboard ↗ or use this Wrangler command:

Terminal window
wrangler secrets-store store create <name> --remote

The following are supported in the Secrets Store beta:

  • Secrets Store UI & API: create your store & create, duplicate, update, scope, and delete a secret
  • Workers UI: bind a new or existing account level secret to a Worker and deploy in code
  • Wrangler: create your store & create, duplicate, update, scope, and delete a secret
  • Account Management UI & API: assign Secrets Store permissions roles & view audit logs for actions taken in Secrets Store core platform

For instructions on how to get started, visit our developer documentation.

2025-02-14


Upload a certificate bundle with an RSA and ECDSA certificate per custom hostname

Cloudflare has supported both RSA and ECDSA certificates across our platform for a number of years. Both certificates offer the same security, but ECDSA is more performant due to a smaller key size. However, RSA is more widely adopted and ensures compatibility with legacy clients. Instead of choosing between them, you may want both – that way, ECDSA is used when clients support it, but RSA is available if not.

Now, you can upload both an RSA and ECDSA certificate on a custom hostname via the API.

curl -X POST https://api.cloudflare.com/client/v4/zones/$ZONE_ID/custom_hostnames \
    -H 'Content-Type: application/json' \
    -H "X-Auth-Email: $CLOUDFLARE_EMAIL" \
    -H "X-Auth-Key: $CLOUDFLARE_API_KEY" \
    -d '{
    "hostname": "hostname",
    "ssl": {
        "custom_cert_bundle": [
            {
                "custom_certificate": "RSA Cert",
                "custom_key": "RSA Key"
            },
            {
                "custom_certificate": "ECDSA Cert",
                "custom_key": "ECDSA Key"
            }
        ],
        "bundle_method": "force",
        "wildcard": false,
        "settings": {
            "min_tls_version": "1.0"
        }
    }
}’

You can also:

  • Upload an RSA or ECDSA certificate to a custom hostname with an existing ECDSA or RSA certificate, respectively.

  • Replace the RSA or ECDSA certificate with a certificate of its same type.

  • Delete the RSA or ECDSA certificate (if the custom hostname has both an RSA and ECDSA uploaded).

This feature is available for Business and Enterprise customers who have purchased custom certificates.

2024-10-18

New cloudflare_branding flag allows hostnames with over 64 characters for all CAs

To order certificates for hostnames longer than 64 characters, customers can now use the cloudflare_branding flag when ordering a certificate via API ↗. Setting cloudflare_branding to true will cause sni.cloudflaressl.com to be used as the common name, while the long hostname is added as part of the subject alternative name (SAN).

2024-09-19

SSL.com available with ACM and SSL for SaaS

SSL.com is one of the certificate authorities that Cloudflare partners with. SSL.com is now available as an option to customers with Advanced Certificate Manager (ACM) or SSL for SaaS. Consider our reference documentation for details.