Delete Client Cas

Delete Client CA

DELETE /v1/client-cas/{uuid}

Remove a client CA from your library. Subject to a hard "in-use" check: if any endpoint currently has this CA in its mTLS trust list, the request returns 409 Conflict with the count of dependent endpoints. Detach from those endpoints first via PUT /v1/endpoints/{uuid}/mtls, then retry the delete.

Once deleted: clients with leaf certs that chained to this CA are immediately rejected at the TLS handshake on any endpoint that previously trusted it. The CA's PEM bytes are removed from the database.

Deleting a CA managed by ngris also revokes every certificate it issued (reason The certificate authority was deleted.) and deletes its private key, so it can never issue again. This can't be undone.

Path parameters

uuid string (uuid) Req

The CA's uuid from /client-cas.

Deprecated: the legacy integer id is still accepted in the path until the sunset, answered with Deprecation and Sunset headers. Use the uuid.

Response (204 No Content)

Empty body on success.

Errors

400 Bad Request

An integer id after the sunset (integer_id_unsupported). A path segment that is neither a uuid nor an integer matches no route (404).

401 Unauthorized

Missing auth.

403 Forbidden

Caller lacks the cert:delete permission.

404 Not Found

CA doesn't exist or belongs to another account (another account's CA reads exactly like an unknown one; it used to be a 403).

409 Conflict

CA is still referenced by N endpoints. Body: "Cannot delete: still referenced by N endpoint(s). Detach first." Use PUT /v1/endpoints/{uuid}/mtls to detach.

Request
curl -X DELETE "https://api.ngris.com/v1/client-cas/019af8a2-4b16-70ea-8090-9f63343250c8" \
  -H "X-API-KEY: <your_api_key>"

Python
from ngris import Ngris

client = Ngris(api_key="<your_api_key>")
client.client_cas.delete("019af8a2-4b16-70ea-8090-9f63343250c8")

Response — 204 No Content

Error — 409 Conflict
{
  "error": "Cannot delete: still referenced by 2 endpoint(s). Detach first."
}

Was this helpful?

PreviousDownload Client CA Certificate NextList Client Certificates

On this page

Delete Client CA

Was this helpful?