If you need to disable or remove your per-hostname Authenticated Origin Pulls configuration, follow these steps.
-
Use a
PUTrequest to disable Authenticated Origin Pulls on the hostname.
At least one of the following token permissions is required:Required API token permissions
SSL and Certificates Write
Enable or Disable a Hostname for Client Authenticationbash curl "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/origin_tls_client_auth/hostnames" \ --request PUT \ --header "Authorization: Bearer $CLOUDFLARE_API_TOKEN" \ --json '{ "config": [ { "enabled": false, "cert_id": "<CERT_ID>", "hostname": "<YOUR_HOSTNAME>" } ] }' -
(Optional) Use a
GETrequest to obtain a list of the client certificate IDs. You will need the ID of the certificate you want to remove for the following step.
At least one of the following token permissions is required:Required API token permissions
SSL and Certificates WriteSSL and Certificates Read
List Certificatesbash curl "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/origin_tls_client_auth/hostnames/certificates" \ --request GET \ --header "Authorization: Bearer $CLOUDFLARE_API_TOKEN" -
Use the Delete hostname client certificate endpoint to remove the certificate you had uploaded.
At least one of the following token permissions is required:Required API token permissions
SSL and Certificates Write
Delete Hostname Client Certificatebash curl "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/origin_tls_client_auth/hostnames/certificates/$CERTIFICATE_ID" \ --request DELETE \ --header "Authorization: Bearer $CLOUDFLARE_API_TOKEN"