SSL Certificate Installation on Cloudflare

July 27, 2021 in Web Firewall Proxy Server

note: Cloudflare (only) allows their business and enterprise customers to have the option of uploading a custom (dedicated) SSL certificate that will be presented to end users.

You will need:

  • Private key file (private.key)
  • SSL certificate file (yourdomainname.crt)
  • Intermediates / CA bundle file (yourdomainname.ca-bundle)

1. Log in to your Cloudflare dashboard.
2. Click the appropriate Cloudflare account and select the appropriate domain.
3. Click the SSL/TLS app.
4. Click Upload Custom SSL Certificate within the Edge Certificates section.
5. The Upload custom SSL certificate and key window will appear.
6. Open the SSL certificate file (yourdomainname.crt) using a text editor such as Notepad.

  • Alternatively, click the Paste from file link at the top right of the SSL Certificate and Private key text areas to browse to the location of the appropriate SSL certificate file.

7. Copy and paste the SSL certificate file content into the SSL Certificate text area.

  • When copying content of the SSL certificate file (yourdomainname.crt)
  • Include -----BEGIN CERTIFICATE----- and -----END CERTIFICATE-----lines surrounding the SSL certificate as demonstrated in the example content of the SSL Certificate text area.

8. Choose the appropriate Bundle Method (User Defined).

  • “User Defined” bundle method allows customers to provide their own certificate chain.
  • Now copy and paste the SSL certificate bundle file (yourdomainname.ca-bundle) content into the SSL Certificate text area.
  • When copying content of the SSL certificate bundle file (yourdomainname.ca-bundle) include -----BEGIN CERTIFICATE----- and -----END CERTIFICATE-----

9. Open the SSL certificate private key (private.key) file.

  • When copying content of your private key file (yourdomainname.key) include -----BEGIN PRIVATE KEY----- and -----END PRIVATE KEY ----

10. Copy and paste the private key file content into the Private key text area.