---
title: Hyperdrive now supports custom TLS/SSL certificates
description: You can now configure custom certificates for secure database connections with Hyperdrive, including both server certificate verification and client certificates
image: https://developers.cloudflare.com/changelog-preview.png
---

> Documentation Index  
> Fetch the complete documentation index at: https://developers.cloudflare.com/changelog/llms.txt  
> Use this file to discover all available pages before exploring further. 

[Skip to content](#%5Ftop) 

# Changelog

New updates and improvements at Cloudflare.

[ Subscribe to RSS ](https://developers.cloudflare.com/changelog/rss/index.xml) [ View RSS feeds ](https://developers.cloudflare.com/fundamentals/new-features/available-rss-feeds/) 

![hero image](https://developers.cloudflare.com/_astro/hero.CVYJHPAd_26AMqX.svg) 

[ ← Back to all posts ](https://developers.cloudflare.com/changelog/) 

## Hyperdrive now supports custom TLS/SSL certificates

Apr 09, 2025 

[ Hyperdrive ](https://developers.cloudflare.com/hyperdrive/) 

Hyperdrive now supports more SSL/TLS security options for your database connections:

* Configure Hyperdrive to verify server certificates with `verify-ca` or `verify-full` SSL modes and protect against man-in-the-middle attacks
* Configure Hyperdrive to provide client certificates to the database server to authenticate itself (mTLS) for stronger security beyond username and password

Use the new `wrangler cert` commands to create certificate authority (CA) certificate bundles or client certificate pairs:

Terminal window

```
# Create CA certificate bundlenpx wrangler cert upload certificate-authority --ca-cert your-ca-cert.pem --name your-custom-ca-name
# Create client certificate pairnpx wrangler cert upload mtls-certificate --cert client-cert.pem --key client-key.pem --name your-client-cert-name
```

Then create a Hyperdrive configuration with the certificates and desired SSL mode:

Terminal window

```
npx wrangler hyperdrive create your-hyperdrive-config \  --connection-string="postgres://user:password@hostname:port/database" \  --ca-certificate-id <CA_CERT_ID> \  --mtls-certificate-id <CLIENT_CERT_ID>  --sslmode verify-full
```

Learn more about [configuring SSL/TLS certificates for Hyperdrive](https://developers.cloudflare.com/hyperdrive/configuration/tls-ssl-certificates-for-hyperdrive/) to enhance your database security posture.

```json
{"@context":"https://schema.org","@type":"BlogPosting","@id":"https://developers.cloudflare.com/changelog/post/2025-04-09-hyperdrive-custom-certificate-support/#page","headline":"Hyperdrive now supports custom TLS/SSL certificates · Changelog","description":"You can now configure custom certificates for secure database connections with Hyperdrive, including both server certificate verification and client certificates","url":"https://developers.cloudflare.com/changelog/post/2025-04-09-hyperdrive-custom-certificate-support/","inLanguage":"en","image":"https://developers.cloudflare.com/changelog-preview.png","dateModified":"2025-04-09","datePublished":"2025-04-09","publisher":{"@type":"Organization","name":"Cloudflare","url":"https://www.cloudflare.com/"},"isPartOf":{"@type":"WebSite","@id":"https://developers.cloudflare.com/#website","name":"Cloudflare Docs","url":"https://developers.cloudflare.com/"}}
```