---
title: "Returns TLS configuration and its status"
method: GET
path: "/tls/status"
tags: ["tls"]
---

# Returns TLS configuration and its status

`GET /tls/status`

## Request

- Base URL: `/control` (relative, and the document was published on a file host, not at the API’s origin)
- URL: `/control/tls/status`
- Auth: HTTP basic

## Response `200`

OK.

- TlsConfig: TLS configuration settings and status
  - `enabled` boolean: enabled is the encryption (DoT/DoH/HTTPS) status
  - `server_name` string: server_name is the hostname of your HTTPS/TLS server
  - `force_https` boolean: if true, forces HTTP->HTTPS redirect
  - `port_https` integer: HTTPS port. If 0, HTTPS will be disabled.
  - `port_dns_over_tls` integer: DNS-over-TLS port. If 0, DoT will be disabled.
  - `port_dns_over_quic` integer: DNS-over-QUIC port. If 0, DoQ will be disabled.
  - `certificate_chain` string: Base64 string with PEM-encoded certificates chain
  - `private_key` string: Base64 string with PEM-encoded private key
  - `private_key_saved` boolean: Set to true if the user has previously saved a private key as a string. This is used so that the server and the client don't have to send the private key between each other every time, which might lead to security issues.
  - `certificate_path` string: Path to certificate file
  - `private_key_path` string: Path to private key file
  - `valid_cert` boolean: Set to true if the specified certificates chain is a valid chain of X509 certificates.
  - `valid_chain` boolean: Set to true if the specified certificates chain is verified and issued by a known CA.
  - `subject` string: The subject of the first certificate in the chain.
  - `issuer` string: The issuer of the first certificate in the chain.
  - `not_before` string: The NotBefore field of the first certificate in the chain.
  - `not_after` string: The NotAfter field of the first certificate in the chain.
  - `dns_names` string[]: The value of SubjectAltNames field of the first certificate in the chain.
  - `valid_key` boolean: Set to true if the key is a valid private key.
  - `key_type` 'RSA' | 'ECDSA': Key type.
  - `warning_validation` string: A validation warning message with the issue description.
  - `valid_pair` boolean: Set to true if both certificate and private key are correct.

---

[API](https://skmtc.dev/guardllamanet/apis/adguard-home.md) - [All operations](https://skmtc.dev/guardllamanet/apis/adguard-home/llms.txt) - [OpenAPI document](https://skmtc.dev/guardllamanet/apis/adguard-home/revisions/14ff21aeb363?raw)