Google CA can now be used with Cloudflare Certificate Manager

Posted by epberry on Thursday July 28, 2022 @12:01PM
from the github.com dept.

https://github.com/cloudflare/cloudflare-docs/commit/f4def3fe0bd8fa8605bf47c55a5522da482e9cd7

( 4 comments | 12 points | on HN )

Re:Google CA can now be used with Cloudflare Certificate Man... by xyzzy_plugh on Thursday July 28, 2022 @02:18PM (#32268231)

I'm unfamiliar with this product/feature, but does this mean I can choose which CA mints my cert? Or is this just a pool of CAs Cloudflare can draw certs issuance from?

[ Parent | on HN ]

Re:Google CA can now be used with Cloudflare Certificate Man... by tomklein on Thursday July 28, 2022 @03:26PM (#32269054)

Google now has a publicly available ACME-compatible CA. For CF’s Universal SSL (default/free) Cloudflare may use Google’s CA. But may choose other providers. For Advanced Certificate Manager (paid addon), you can choose Google or other CAs for Cloudflare.

But basically Google would be the one that is issuing an SSL cert for a website. Same as LetsEncrypt.

Disclaimer: CF employee

[ Parent | on HN ]

Re:Google CA can now be used with Cloudflare Certificate Man... by kc10 on Thursday July 28, 2022 @03:33PM (#32269132)

If your site uses Universal SSL ($0/month), Cloudflare automatically picks a CA for you (most likely Let's Encrypt).

The Advanced Certificate Manager ($10/month) SKU allows you to pick a CA. There are few other options available. https://developers.cloudflare.com/ssl/edge-certificates/adva...

[ Parent | on HN ]

Re:Google CA can now be used with Cloudflare Certificate Man... by epberry on Thursday July 28, 2022 @02:44PM (#32268542)

My understanding is that you can now have TLS compatibility with all google products through https://pki.goog/

Tweet where I saw this: https://twitter.com/rmhrisk/status/1552357227301744640

[ Parent | on HN ]