Cloudflare v6.1.2 published on Monday, Apr 28, 2025 by Pulumi
cloudflare.getCustomSsls
Explore with Pulumi AI
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as cloudflare from "@pulumi/cloudflare";
const exampleCustomSsls = cloudflare.getCustomSsls({
zoneId: "023e105f4ecef8ad9ca31a8372d0c353",
status: "active",
});
import pulumi
import pulumi_cloudflare as cloudflare
example_custom_ssls = cloudflare.get_custom_ssls(zone_id="023e105f4ecef8ad9ca31a8372d0c353",
status="active")
package main
import (
"github.com/pulumi/pulumi-cloudflare/sdk/v6/go/cloudflare"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := cloudflare.LookupCustomSsls(ctx, &cloudflare.LookupCustomSslsArgs{
ZoneId: "023e105f4ecef8ad9ca31a8372d0c353",
Status: pulumi.StringRef("active"),
}, nil)
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Cloudflare = Pulumi.Cloudflare;
return await Deployment.RunAsync(() =>
{
var exampleCustomSsls = Cloudflare.GetCustomSsls.Invoke(new()
{
ZoneId = "023e105f4ecef8ad9ca31a8372d0c353",
Status = "active",
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.cloudflare.CloudflareFunctions;
import com.pulumi.cloudflare.inputs.GetCustomSslsArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
final var exampleCustomSsls = CloudflareFunctions.getCustomSsls(GetCustomSslsArgs.builder()
.zoneId("023e105f4ecef8ad9ca31a8372d0c353")
.status("active")
.build());
}
}
variables:
exampleCustomSsls:
fn::invoke:
function: cloudflare:getCustomSsls
arguments:
zoneId: 023e105f4ecef8ad9ca31a8372d0c353
status: active
Using getCustomSsls
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getCustomSsls(args: GetCustomSslsArgs, opts?: InvokeOptions): Promise<GetCustomSslsResult>
function getCustomSslsOutput(args: GetCustomSslsOutputArgs, opts?: InvokeOptions): Output<GetCustomSslsResult>
def get_custom_ssls(match: Optional[str] = None,
max_items: Optional[int] = None,
status: Optional[str] = None,
zone_id: Optional[str] = None,
opts: Optional[InvokeOptions] = None) -> GetCustomSslsResult
def get_custom_ssls_output(match: Optional[pulumi.Input[str]] = None,
max_items: Optional[pulumi.Input[int]] = None,
status: Optional[pulumi.Input[str]] = None,
zone_id: Optional[pulumi.Input[str]] = None,
opts: Optional[InvokeOptions] = None) -> Output[GetCustomSslsResult]
func LookupCustomSsls(ctx *Context, args *LookupCustomSslsArgs, opts ...InvokeOption) (*LookupCustomSslsResult, error)
func LookupCustomSslsOutput(ctx *Context, args *LookupCustomSslsOutputArgs, opts ...InvokeOption) LookupCustomSslsResultOutput
> Note: This function is named LookupCustomSsls
in the Go SDK.
public static class GetCustomSsls
{
public static Task<GetCustomSslsResult> InvokeAsync(GetCustomSslsArgs args, InvokeOptions? opts = null)
public static Output<GetCustomSslsResult> Invoke(GetCustomSslsInvokeArgs args, InvokeOptions? opts = null)
}
public static CompletableFuture<GetCustomSslsResult> getCustomSsls(GetCustomSslsArgs args, InvokeOptions options)
public static Output<GetCustomSslsResult> getCustomSsls(GetCustomSslsArgs args, InvokeOptions options)
fn::invoke:
function: cloudflare:index/getCustomSsls:getCustomSsls
arguments:
# arguments dictionary
The following arguments are supported:
- zone
Id String - Identifier
- match String
- Whether to match all search requirements or at least one (any). Available values: "any", "all".
- max
Items Integer - Max items to fetch, default: 1000
- status String
- Status of the zone's custom SSL. Available values: "active", "expired", "deleted", "pending", "initializing".
- zone
Id string - Identifier
- match string
- Whether to match all search requirements or at least one (any). Available values: "any", "all".
- max
Items number - Max items to fetch, default: 1000
- status string
- Status of the zone's custom SSL. Available values: "active", "expired", "deleted", "pending", "initializing".
- zone
Id String - Identifier
- match String
- Whether to match all search requirements or at least one (any). Available values: "any", "all".
- max
Items Number - Max items to fetch, default: 1000
- status String
- Status of the zone's custom SSL. Available values: "active", "expired", "deleted", "pending", "initializing".
getCustomSsls Result
The following output properties are available:
- Id string
- The provider-assigned unique ID for this managed resource.
- Match string
- Whether to match all search requirements or at least one (any). Available values: "any", "all".
- Results
List<Get
Custom Ssls Result> - The items returned by the data source
- Zone
Id string - Identifier
- Max
Items int - Max items to fetch, default: 1000
- Status string
- Status of the zone's custom SSL. Available values: "active", "expired", "deleted", "pending", "initializing".
- Id string
- The provider-assigned unique ID for this managed resource.
- Match string
- Whether to match all search requirements or at least one (any). Available values: "any", "all".
- Results
[]Get
Custom Ssls Result - The items returned by the data source
- Zone
Id string - Identifier
- Max
Items int - Max items to fetch, default: 1000
- Status string
- Status of the zone's custom SSL. Available values: "active", "expired", "deleted", "pending", "initializing".
- id String
- The provider-assigned unique ID for this managed resource.
- match String
- Whether to match all search requirements or at least one (any). Available values: "any", "all".
- results
List<Get
Custom Ssls Result> - The items returned by the data source
- zone
Id String - Identifier
- max
Items Integer - Max items to fetch, default: 1000
- status String
- Status of the zone's custom SSL. Available values: "active", "expired", "deleted", "pending", "initializing".
- id string
- The provider-assigned unique ID for this managed resource.
- match string
- Whether to match all search requirements or at least one (any). Available values: "any", "all".
- results
Get
Custom Ssls Result[] - The items returned by the data source
- zone
Id string - Identifier
- max
Items number - Max items to fetch, default: 1000
- status string
- Status of the zone's custom SSL. Available values: "active", "expired", "deleted", "pending", "initializing".
- id str
- The provider-assigned unique ID for this managed resource.
- match str
- Whether to match all search requirements or at least one (any). Available values: "any", "all".
- results
Sequence[Get
Custom Ssls Result] - The items returned by the data source
- zone_
id str - Identifier
- max_
items int - Max items to fetch, default: 1000
- status str
- Status of the zone's custom SSL. Available values: "active", "expired", "deleted", "pending", "initializing".
- id String
- The provider-assigned unique ID for this managed resource.
- match String
- Whether to match all search requirements or at least one (any). Available values: "any", "all".
- results List<Property Map>
- The items returned by the data source
- zone
Id String - Identifier
- max
Items Number - Max items to fetch, default: 1000
- status String
- Status of the zone's custom SSL. Available values: "active", "expired", "deleted", "pending", "initializing".
Supporting Types
GetCustomSslsResult
- Bundle
Method string - A ubiquitous bundle has the highest probability of being verified everywhere, even by clients using outdated or unusual trust stores. An optimal bundle uses the shortest chain and newest intermediates. And the force bundle verifies the chain, but does not otherwise modify it. Available values: "ubiquitous", "optimal", "force".
- Expires
On string - When the certificate from the authority expires.
- Geo
Restrictions GetCustom Ssls Result Geo Restrictions - Specify the region where your private key can be held locally for optimal TLS performance. HTTPS connections to any excluded data center will still be fully encrypted, but will incur some latency while Keyless SSL is used to complete the handshake with the nearest allowed data center. Options allow distribution to only to U.S. data centers, only to E.U. data centers, or only to highest security data centers. Default distribution is to all Cloudflare datacenters, for optimal performance.
- Hosts List<string>
- Id string
- Identifier
- Issuer string
- The certificate authority that issued the certificate.
- Keyless
Server GetCustom Ssls Result Keyless Server - Modified
On string - When the certificate was last modified.
- Policy string
- Specify the policy that determines the region where your private key will be held locally. HTTPS connections to any excluded data center will still be fully encrypted, but will incur some latency while Keyless SSL is used to complete the handshake with the nearest allowed data center. Any combination of countries, specified by their two letter country code (https://en.wikipedia.org/wiki/ISO3166-1alpha-2#Officiallyassignedcode_elements) can be chosen, such as 'country: IN', as well as 'region: EU' which refers to the EU region. If there are too few data centers satisfying the policy, it will be rejected.
- Priority double
- The order/priority in which the certificate will be used in a request. The higher priority will break ties across overlapping 'legacycustom' certificates, but 'legacycustom' certificates will always supercede 'sni_custom' certificates.
- Signature string
- The type of hash used for the certificate.
- Status string
- Status of the zone's custom SSL. Available values: "active", "expired", "deleted", "pending", "initializing".
- Uploaded
On string - When the certificate was uploaded to Cloudflare.
- Zone
Id string - Identifier
- Bundle
Method string - A ubiquitous bundle has the highest probability of being verified everywhere, even by clients using outdated or unusual trust stores. An optimal bundle uses the shortest chain and newest intermediates. And the force bundle verifies the chain, but does not otherwise modify it. Available values: "ubiquitous", "optimal", "force".
- Expires
On string - When the certificate from the authority expires.
- Geo
Restrictions GetCustom Ssls Result Geo Restrictions - Specify the region where your private key can be held locally for optimal TLS performance. HTTPS connections to any excluded data center will still be fully encrypted, but will incur some latency while Keyless SSL is used to complete the handshake with the nearest allowed data center. Options allow distribution to only to U.S. data centers, only to E.U. data centers, or only to highest security data centers. Default distribution is to all Cloudflare datacenters, for optimal performance.
- Hosts []string
- Id string
- Identifier
- Issuer string
- The certificate authority that issued the certificate.
- Keyless
Server GetCustom Ssls Result Keyless Server - Modified
On string - When the certificate was last modified.
- Policy string
- Specify the policy that determines the region where your private key will be held locally. HTTPS connections to any excluded data center will still be fully encrypted, but will incur some latency while Keyless SSL is used to complete the handshake with the nearest allowed data center. Any combination of countries, specified by their two letter country code (https://en.wikipedia.org/wiki/ISO3166-1alpha-2#Officiallyassignedcode_elements) can be chosen, such as 'country: IN', as well as 'region: EU' which refers to the EU region. If there are too few data centers satisfying the policy, it will be rejected.
- Priority float64
- The order/priority in which the certificate will be used in a request. The higher priority will break ties across overlapping 'legacycustom' certificates, but 'legacycustom' certificates will always supercede 'sni_custom' certificates.
- Signature string
- The type of hash used for the certificate.
- Status string
- Status of the zone's custom SSL. Available values: "active", "expired", "deleted", "pending", "initializing".
- Uploaded
On string - When the certificate was uploaded to Cloudflare.
- Zone
Id string - Identifier
- bundle
Method String - A ubiquitous bundle has the highest probability of being verified everywhere, even by clients using outdated or unusual trust stores. An optimal bundle uses the shortest chain and newest intermediates. And the force bundle verifies the chain, but does not otherwise modify it. Available values: "ubiquitous", "optimal", "force".
- expires
On String - When the certificate from the authority expires.
- geo
Restrictions GetCustom Ssls Result Geo Restrictions - Specify the region where your private key can be held locally for optimal TLS performance. HTTPS connections to any excluded data center will still be fully encrypted, but will incur some latency while Keyless SSL is used to complete the handshake with the nearest allowed data center. Options allow distribution to only to U.S. data centers, only to E.U. data centers, or only to highest security data centers. Default distribution is to all Cloudflare datacenters, for optimal performance.
- hosts List<String>
- id String
- Identifier
- issuer String
- The certificate authority that issued the certificate.
- keyless
Server GetCustom Ssls Result Keyless Server - modified
On String - When the certificate was last modified.
- policy String
- Specify the policy that determines the region where your private key will be held locally. HTTPS connections to any excluded data center will still be fully encrypted, but will incur some latency while Keyless SSL is used to complete the handshake with the nearest allowed data center. Any combination of countries, specified by their two letter country code (https://en.wikipedia.org/wiki/ISO3166-1alpha-2#Officiallyassignedcode_elements) can be chosen, such as 'country: IN', as well as 'region: EU' which refers to the EU region. If there are too few data centers satisfying the policy, it will be rejected.
- priority Double
- The order/priority in which the certificate will be used in a request. The higher priority will break ties across overlapping 'legacycustom' certificates, but 'legacycustom' certificates will always supercede 'sni_custom' certificates.
- signature String
- The type of hash used for the certificate.
- status String
- Status of the zone's custom SSL. Available values: "active", "expired", "deleted", "pending", "initializing".
- uploaded
On String - When the certificate was uploaded to Cloudflare.
- zone
Id String - Identifier
- bundle
Method string - A ubiquitous bundle has the highest probability of being verified everywhere, even by clients using outdated or unusual trust stores. An optimal bundle uses the shortest chain and newest intermediates. And the force bundle verifies the chain, but does not otherwise modify it. Available values: "ubiquitous", "optimal", "force".
- expires
On string - When the certificate from the authority expires.
- geo
Restrictions GetCustom Ssls Result Geo Restrictions - Specify the region where your private key can be held locally for optimal TLS performance. HTTPS connections to any excluded data center will still be fully encrypted, but will incur some latency while Keyless SSL is used to complete the handshake with the nearest allowed data center. Options allow distribution to only to U.S. data centers, only to E.U. data centers, or only to highest security data centers. Default distribution is to all Cloudflare datacenters, for optimal performance.
- hosts string[]
- id string
- Identifier
- issuer string
- The certificate authority that issued the certificate.
- keyless
Server GetCustom Ssls Result Keyless Server - modified
On string - When the certificate was last modified.
- policy string
- Specify the policy that determines the region where your private key will be held locally. HTTPS connections to any excluded data center will still be fully encrypted, but will incur some latency while Keyless SSL is used to complete the handshake with the nearest allowed data center. Any combination of countries, specified by their two letter country code (https://en.wikipedia.org/wiki/ISO3166-1alpha-2#Officiallyassignedcode_elements) can be chosen, such as 'country: IN', as well as 'region: EU' which refers to the EU region. If there are too few data centers satisfying the policy, it will be rejected.
- priority number
- The order/priority in which the certificate will be used in a request. The higher priority will break ties across overlapping 'legacycustom' certificates, but 'legacycustom' certificates will always supercede 'sni_custom' certificates.
- signature string
- The type of hash used for the certificate.
- status string
- Status of the zone's custom SSL. Available values: "active", "expired", "deleted", "pending", "initializing".
- uploaded
On string - When the certificate was uploaded to Cloudflare.
- zone
Id string - Identifier
- bundle_
method str - A ubiquitous bundle has the highest probability of being verified everywhere, even by clients using outdated or unusual trust stores. An optimal bundle uses the shortest chain and newest intermediates. And the force bundle verifies the chain, but does not otherwise modify it. Available values: "ubiquitous", "optimal", "force".
- expires_
on str - When the certificate from the authority expires.
- geo_
restrictions GetCustom Ssls Result Geo Restrictions - Specify the region where your private key can be held locally for optimal TLS performance. HTTPS connections to any excluded data center will still be fully encrypted, but will incur some latency while Keyless SSL is used to complete the handshake with the nearest allowed data center. Options allow distribution to only to U.S. data centers, only to E.U. data centers, or only to highest security data centers. Default distribution is to all Cloudflare datacenters, for optimal performance.
- hosts Sequence[str]
- id str
- Identifier
- issuer str
- The certificate authority that issued the certificate.
- keyless_
server GetCustom Ssls Result Keyless Server - modified_
on str - When the certificate was last modified.
- policy str
- Specify the policy that determines the region where your private key will be held locally. HTTPS connections to any excluded data center will still be fully encrypted, but will incur some latency while Keyless SSL is used to complete the handshake with the nearest allowed data center. Any combination of countries, specified by their two letter country code (https://en.wikipedia.org/wiki/ISO3166-1alpha-2#Officiallyassignedcode_elements) can be chosen, such as 'country: IN', as well as 'region: EU' which refers to the EU region. If there are too few data centers satisfying the policy, it will be rejected.
- priority float
- The order/priority in which the certificate will be used in a request. The higher priority will break ties across overlapping 'legacycustom' certificates, but 'legacycustom' certificates will always supercede 'sni_custom' certificates.
- signature str
- The type of hash used for the certificate.
- status str
- Status of the zone's custom SSL. Available values: "active", "expired", "deleted", "pending", "initializing".
- uploaded_
on str - When the certificate was uploaded to Cloudflare.
- zone_
id str - Identifier
- bundle
Method String - A ubiquitous bundle has the highest probability of being verified everywhere, even by clients using outdated or unusual trust stores. An optimal bundle uses the shortest chain and newest intermediates. And the force bundle verifies the chain, but does not otherwise modify it. Available values: "ubiquitous", "optimal", "force".
- expires
On String - When the certificate from the authority expires.
- geo
Restrictions Property Map - Specify the region where your private key can be held locally for optimal TLS performance. HTTPS connections to any excluded data center will still be fully encrypted, but will incur some latency while Keyless SSL is used to complete the handshake with the nearest allowed data center. Options allow distribution to only to U.S. data centers, only to E.U. data centers, or only to highest security data centers. Default distribution is to all Cloudflare datacenters, for optimal performance.
- hosts List<String>
- id String
- Identifier
- issuer String
- The certificate authority that issued the certificate.
- keyless
Server Property Map - modified
On String - When the certificate was last modified.
- policy String
- Specify the policy that determines the region where your private key will be held locally. HTTPS connections to any excluded data center will still be fully encrypted, but will incur some latency while Keyless SSL is used to complete the handshake with the nearest allowed data center. Any combination of countries, specified by their two letter country code (https://en.wikipedia.org/wiki/ISO3166-1alpha-2#Officiallyassignedcode_elements) can be chosen, such as 'country: IN', as well as 'region: EU' which refers to the EU region. If there are too few data centers satisfying the policy, it will be rejected.
- priority Number
- The order/priority in which the certificate will be used in a request. The higher priority will break ties across overlapping 'legacycustom' certificates, but 'legacycustom' certificates will always supercede 'sni_custom' certificates.
- signature String
- The type of hash used for the certificate.
- status String
- Status of the zone's custom SSL. Available values: "active", "expired", "deleted", "pending", "initializing".
- uploaded
On String - When the certificate was uploaded to Cloudflare.
- zone
Id String - Identifier
GetCustomSslsResultGeoRestrictions
- Label string
- Available values: "us", "eu", "highest_security".
- Label string
- Available values: "us", "eu", "highest_security".
- label String
- Available values: "us", "eu", "highest_security".
- label string
- Available values: "us", "eu", "highest_security".
- label str
- Available values: "us", "eu", "highest_security".
- label String
- Available values: "us", "eu", "highest_security".
GetCustomSslsResultKeylessServer
- Created
On string - When the Keyless SSL was created.
- Enabled bool
- Whether or not the Keyless SSL is on or off.
- Host string
- The keyless SSL name.
- Id string
- Keyless certificate identifier tag.
- Modified
On string - When the Keyless SSL was last modified.
- Name string
- The keyless SSL name.
- Permissions List<string>
- Available permissions for the Keyless SSL for the current user requesting the item.
- Port double
- The keyless SSL port used to communicate between Cloudflare and the client's Keyless SSL server.
- Status string
- Status of the Keyless SSL. Available values: "active", "deleted".
- Tunnel
Get
Custom Ssls Result Keyless Server Tunnel - Configuration for using Keyless SSL through a Cloudflare Tunnel
- Created
On string - When the Keyless SSL was created.
- Enabled bool
- Whether or not the Keyless SSL is on or off.
- Host string
- The keyless SSL name.
- Id string
- Keyless certificate identifier tag.
- Modified
On string - When the Keyless SSL was last modified.
- Name string
- The keyless SSL name.
- Permissions []string
- Available permissions for the Keyless SSL for the current user requesting the item.
- Port float64
- The keyless SSL port used to communicate between Cloudflare and the client's Keyless SSL server.
- Status string
- Status of the Keyless SSL. Available values: "active", "deleted".
- Tunnel
Get
Custom Ssls Result Keyless Server Tunnel - Configuration for using Keyless SSL through a Cloudflare Tunnel
- created
On String - When the Keyless SSL was created.
- enabled Boolean
- Whether or not the Keyless SSL is on or off.
- host String
- The keyless SSL name.
- id String
- Keyless certificate identifier tag.
- modified
On String - When the Keyless SSL was last modified.
- name String
- The keyless SSL name.
- permissions List<String>
- Available permissions for the Keyless SSL for the current user requesting the item.
- port Double
- The keyless SSL port used to communicate between Cloudflare and the client's Keyless SSL server.
- status String
- Status of the Keyless SSL. Available values: "active", "deleted".
- tunnel
Get
Custom Ssls Result Keyless Server Tunnel - Configuration for using Keyless SSL through a Cloudflare Tunnel
- created
On string - When the Keyless SSL was created.
- enabled boolean
- Whether or not the Keyless SSL is on or off.
- host string
- The keyless SSL name.
- id string
- Keyless certificate identifier tag.
- modified
On string - When the Keyless SSL was last modified.
- name string
- The keyless SSL name.
- permissions string[]
- Available permissions for the Keyless SSL for the current user requesting the item.
- port number
- The keyless SSL port used to communicate between Cloudflare and the client's Keyless SSL server.
- status string
- Status of the Keyless SSL. Available values: "active", "deleted".
- tunnel
Get
Custom Ssls Result Keyless Server Tunnel - Configuration for using Keyless SSL through a Cloudflare Tunnel
- created_
on str - When the Keyless SSL was created.
- enabled bool
- Whether or not the Keyless SSL is on or off.
- host str
- The keyless SSL name.
- id str
- Keyless certificate identifier tag.
- modified_
on str - When the Keyless SSL was last modified.
- name str
- The keyless SSL name.
- permissions Sequence[str]
- Available permissions for the Keyless SSL for the current user requesting the item.
- port float
- The keyless SSL port used to communicate between Cloudflare and the client's Keyless SSL server.
- status str
- Status of the Keyless SSL. Available values: "active", "deleted".
- tunnel
Get
Custom Ssls Result Keyless Server Tunnel - Configuration for using Keyless SSL through a Cloudflare Tunnel
- created
On String - When the Keyless SSL was created.
- enabled Boolean
- Whether or not the Keyless SSL is on or off.
- host String
- The keyless SSL name.
- id String
- Keyless certificate identifier tag.
- modified
On String - When the Keyless SSL was last modified.
- name String
- The keyless SSL name.
- permissions List<String>
- Available permissions for the Keyless SSL for the current user requesting the item.
- port Number
- The keyless SSL port used to communicate between Cloudflare and the client's Keyless SSL server.
- status String
- Status of the Keyless SSL. Available values: "active", "deleted".
- tunnel Property Map
- Configuration for using Keyless SSL through a Cloudflare Tunnel
GetCustomSslsResultKeylessServerTunnel
- private_
ip str - Private IP of the Key Server Host
- vnet_
id str - Cloudflare Tunnel Virtual Network ID
Package Details
- Repository
- Cloudflare pulumi/pulumi-cloudflare
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
cloudflare
Terraform Provider.