Change Let's Encrypt SSL to

Website, Application, Performance Security
1

Hi, my domain benefits.by have EDGE SSL (Let’s Encrypt). I need to change it to digicert.
I saw the manual Expired LetsEncrypt Root Certificate - #17 by sdayman, but I can’t change the SSL to digicert via API in my Free account. What shall I do?

2

What API call are you using?

3

That API - Cloudflare API v4 Documentation
I always have response

{
    "success": false,
    "errors": [
        {
            "code": 6003,
            "message": "Invalid request headers",
            "error_chain": [
                {
                    "code": 6103,
                    "message": "Invalid format for X-Auth-Key header"
                }
            ]
        }
    ],
    "messages": [],
    "result": null
}
4

Can you share the actual API call you are making. Just redact your email address and API key.

1 Like
5 
curl -X PATCH "https://api.cloudflare.com/client/v4/zones/8056ee742379d27a6d3ac766d6722b12/ssl/universal/settings" \
     -H "Content-Type: application/json" \
     -H "X-Auth-Email: [email protected]" \
     -H "X-Auth-Key: lkerjljq2lrwelrh123123lqwehr" \
     --data '{"certificate_authority": "digicert"}'

I use Postman.

6

Hi, maybe someone can help me?

7

Postman is next on my list of things to learn.

Have you tried command line curl?

8

The result is the same :frowning:

9

Hello, tell me please, can I change the certificate on a paid tariff? Very necessary.

10

I was able to set it with:

curl --location --request GET 'https://api.cloudflare.com/client/v4/zones/<Zone ID>/ssl/universal/settings' \
--header 'Authorization: Bearer <API Token with SSL:edit>' \
--header 'Content-Type: application/json' \
--data-raw '{"certificate_authority": "digicert"}'

Is this your Global API key?

11

I doubt it. Keys look to be hex only.

12

Your request is correct. The answer was
{"result":{"enabled":true,"certificate_authority":"lets_encrypt"},"success":true

13

Sorry, it was not global API. I tried to send PATCH request with global API key and answer was:
{"result":{"enabled":true,"certificate_authority":"lets_encrypt"},"success":true,"errors":[],"messages":[]}

14

But I can’t change Universal SSL Let’s Encrypt to Digicert SSL. What shall I do?

15

I found out that this type of certificate does not work with the BY domain zone.

16

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.