Hi There,

Ive been asked to have a look into some blocking ability for some internal applications, Ive had a look around and couldnt find any information in regards to what im looking for. I was wondering if anyone knew if it would be possible to create some sort of SSL Certificate within cloudflare, distribute that certificate to certain endpoints, then deny access on specific URLS unless that certificate is present on the client accessing it. ive read some articles on Zero-trust and creating tunnels but i dont believe this is what we are looking for. Any point-tos / advise would be amazing, Thank you
4 Replies
Laudian
Laudian2mo ago
If you want the certificate solution, you can use mTLS (client certificates): https://developers.cloudflare.com/ssl/client-certificates/enable-mtls/ Otherwise, there's Access (Zero Trust), which provides much more sophisticated methods of access control.
Cloudflare Docs
Enable mTLS · Cloudflare SSL/TLS docs
You can enable mutual Transport Layer Security (mTLS) for any hostname.
Sickyness
SickynessOP2mo ago
Completely missed that, are you aware if the URLS can be supplied on a path basis? or just on the host @Laudian
Laudian
Laudian2mo ago
Paths, hosts, whatever you want.
Sickyness
SickynessOP2mo ago
thats awesome, @Laudian thank you very much

Did you find this page helpful?