Skip to content
Start here

Origin TLS Compliance Modes

Get Origin TLS Compliance Modes setting
origin_tls_compliance_modes.get(OriginTLSComplianceModeGetParams**kwargs) -> OriginTLSComplianceModeGetResponse
GET/zones/{zone_id}/settings/origin_tls_compliance_modes
Replace Origin TLS Compliance Modes setting
origin_tls_compliance_modes.update(OriginTLSComplianceModeUpdateParams**kwargs) -> OriginTLSComplianceModeUpdateResponse
PUT/zones/{zone_id}/settings/origin_tls_compliance_modes
Change Origin TLS Compliance Modes setting
origin_tls_compliance_modes.edit(OriginTLSComplianceModeEditParams**kwargs) -> OriginTLSComplianceModeEditResponse
PATCH/zones/{zone_id}/settings/origin_tls_compliance_modes
Delete Origin TLS Compliance Modes setting
origin_tls_compliance_modes.delete(OriginTLSComplianceModeDeleteParams**kwargs) -> OriginTLSComplianceModeDeleteResponse
DELETE/zones/{zone_id}/settings/origin_tls_compliance_modes
ModelsExpand Collapse
class OriginTLSComplianceModeGetResponse:
id: Literal["origin_tls_compliance_modes"]

The identifier of the caching setting.

editable: bool

Whether the setting is editable.

value: List[str]

List of TLS compliance modes that constrain the key-exchange algorithms Cloudflare may use when establishing the TLS connection to the zone’s origin. Currently supported values are fips (FIPS-approved curves) and pqh (post-quantum hybrid). Future modes (e.g. cnsa2) may be added; clients should treat unknown values as opaque strings. Multiple modes are combined as the intersection of their permitted algorithm lists; selections whose intersection is empty are rejected. An empty list clears the constraint.

modified_on: Optional[datetime]

Last time this setting was modified.

formatdate-time
class OriginTLSComplianceModeUpdateResponse:
id: Literal["origin_tls_compliance_modes"]

The identifier of the caching setting.

editable: bool

Whether the setting is editable.

value: List[str]

List of TLS compliance modes that constrain the key-exchange algorithms Cloudflare may use when establishing the TLS connection to the zone’s origin. Currently supported values are fips (FIPS-approved curves) and pqh (post-quantum hybrid). Future modes (e.g. cnsa2) may be added; clients should treat unknown values as opaque strings. Multiple modes are combined as the intersection of their permitted algorithm lists; selections whose intersection is empty are rejected. An empty list clears the constraint.

modified_on: Optional[datetime]

Last time this setting was modified.

formatdate-time
class OriginTLSComplianceModeEditResponse:
id: Literal["origin_tls_compliance_modes"]

The identifier of the caching setting.

editable: bool

Whether the setting is editable.

value: List[str]

List of TLS compliance modes that constrain the key-exchange algorithms Cloudflare may use when establishing the TLS connection to the zone’s origin. Currently supported values are fips (FIPS-approved curves) and pqh (post-quantum hybrid). Future modes (e.g. cnsa2) may be added; clients should treat unknown values as opaque strings. Multiple modes are combined as the intersection of their permitted algorithm lists; selections whose intersection is empty are rejected. An empty list clears the constraint.

modified_on: Optional[datetime]

Last time this setting was modified.

formatdate-time
class OriginTLSComplianceModeDeleteResponse:
id: Literal["origin_tls_compliance_modes"]

The identifier of the caching setting.

editable: bool

Whether the setting is editable.

modified_on: Optional[datetime]

Last time this setting was modified.

formatdate-time