# Cluster Linking - Certificate Update

**URL:** <https://forum.confluent.io/t/cluster-linking-certificate-update/10997>\
**Category:** Confluent Cloud\
**Created:** [3 July 2024 19:49 UTC](https://forum.confluent.io/t/cluster-linking-certificate-update/10997 "2024-07-03T19:49:00Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![trevorwebster](https://avatars.discourse-cdn.com/v4/letter/t/d78d45/32.png) [@trevorwebster](https://forum.confluent.io/u/trevorwebster)\
**Post date:** [3 July 2024 19:49 UTC](https://forum.confluent.io/t/cluster-linking-certificate-update/10997/1 "2024-07-03T19:49:00Z")

</div>

Good day,

Im attempting to update a cluster link as the certificate will expire at some point. The PEM file we add in the updatecert.txt has the old and new cert, effectively allowing a seamless switchover.

Using the CLI. and the below command. We update the link , no errors.  
confluent kafka link configuration update LINK-NAME --config updatecert.txt --cluster lkc-XXXXXXX

The cluster link is updated, then a few minutes after, goes into a UNAVAILABLE State.

The updatecert.txt has two parameters following the documentation from the below link. the certs are formatted onto a single line.  
ssl.truststore.type=PEM  
ssl.truststore.certificates=

 ![image](https://us1.discourse-cdn.com/flex019/uploads/confluentcommunity/original/2X/7/741952a946d53da1bec2d11b66e8c37ef7a3aa5e.png)

[Security Considerations for Cluster Linking on Confluent Cloud | Confluent Documentation](https://docs.confluent.io/cloud/current/multi-cloud/cluster-linking/security-cloud.html#mutual-tls-mtls)

Question: Has anyone uploaded via cli a config file with the PEM formatted to a single line? If so, how did you format the file?

---

<div class="post-metadata">

**Author:** ![mmuehlbeyer](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.confluent.io/mmuehlbeyer/32/1088_2.png) [@mmuehlbeyer](https://forum.confluent.io/u/mmuehlbeyer)\
**Post date:** [4 July 2024 09:35 UTC](https://forum.confluent.io/t/cluster-linking-certificate-update/10997/2 "2024-07-04T09:35:31Z")

</div>

basically it should be something

```auto
ssl.truststore.certificates= -----BEGIN CERTIFICATE-----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= 
-----END CERTIFICATE-----

```

see the blanks before the “beging and end certificate”

---

<div class="post-metadata">

**Author:** ![trevorwebster](https://avatars.discourse-cdn.com/v4/letter/t/d78d45/32.png) [@trevorwebster](https://forum.confluent.io/u/trevorwebster)\
**Post date:** [12 July 2024 11:41 UTC](https://forum.confluent.io/t/cluster-linking-certificate-update/10997/3 "2024-07-12T11:41:39Z")

</div>

Thanks for the feedback, will try with the space before aswell. The documentation looks like so

 ![image](https://us1.discourse-cdn.com/flex019/uploads/confluentcommunity/original/2X/9/90b7a9c4cdc58545348251cdb4ef5880241b5f22.png)

and then we also have two certs in the file. so wondering if just a formatting thing

---

<div class="post-metadata">

**Author:** ![trevorwebster](https://avatars.discourse-cdn.com/v4/letter/t/d78d45/32.png) [@trevorwebster](https://forum.confluent.io/u/trevorwebster)\
**Post date:** [26 August 2024 09:15 UTC](https://forum.confluent.io/t/cluster-linking-certificate-update/10997/4 "2024-08-26T09:15:59Z")

</div>

To close the loop here, after a lot of escalating it was identified as a bug only on the confluent cloud cli.

As discussed, you have updated upgraded the confluent cli to latest version(current latest version is 4.0.0) and use `/n ` for new lines. You can succesfully update the link configs with `ssl.truststore.certificates` containing multi certs

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex019/uploads/confluentcommunity/original/1X/c49438c90c9df282e9996fdf6971be890c71b65a.svg) [@system](https://forum.confluent.io/u/system)\
**Post date:** [2 September 2024 09:16 UTC](https://forum.confluent.io/t/cluster-linking-certificate-update/10997/5 "2024-09-02T09:16:47Z")

</div>

Closed on 2 September 2024 09:16 UTC

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.