Cloudflare API | Keyless Certificates
LogoCloudflare API

Keyless Certificates

keyless_certificates

Methods

List Keyless SSL Configurations -> SinglePage<
KeylessCertificate
>
get/zones/{zone_id}/keyless_certificates

List all Keyless SSL configurations for a given zone.

Get Keyless SSL Configuration -> Envelope<
KeylessCertificate
>
get/zones/{zone_id}/keyless_certificates/{keyless_certificate_id}

Get details for one Keyless SSL configuration.

Create Keyless SSL Configuration -> Envelope<
KeylessCertificate
>
post/zones/{zone_id}/keyless_certificates

Creates a Keyless SSL configuration that allows SSL/TLS termination without exposing private keys to Cloudflare. Keys remain on your infrastructure.

Edit Keyless SSL Configuration -> Envelope<
KeylessCertificate
>
patch/zones/{zone_id}/keyless_certificates/{keyless_certificate_id}

This will update attributes of a Keyless SSL. Consists of one or more of the following: host,name,port.

Delete Keyless SSL Configuration -> Envelope<{ id }>
delete/zones/{zone_id}/keyless_certificates/{keyless_certificate_id}

Removes a Keyless SSL configuration. SSL connections will no longer use the keyless server for cryptographic operations.

Domain types

KeylessCertificate = { id, created_on, enabled, 7 more... }
Tunnel = { private_ip, vnet_id }

Configuration for using Keyless SSL through a Cloudflare Tunnel