---
title: "ValidateIngestTLS validates the ingest ingress TLS certificate."
method: POST
path: "/v1.1/test/ingest_tls"
tags: ["ControlService"]
---

# ValidateIngestTLS validates the ingest ingress TLS certificate.

`POST /v1.1/test/ingest_tls`

Returns an error if the SAN dns names do not contain all ingest domains configured in the cluster.
 Validation is not extensive. Only checks all ingest domains present in the cert.

## Request body

- ProtobufControlpbV1ValidateIngestTLSRequest

## Response `200`

OK

- ProtobufControlpbV1ValidateIngestTLSResponse
  - `certs` union[], nullable
    - union
      - object, nullable
      - ProtobufControlpbV1IngestTLSCert
        - `dnsNames` string[], nullable — DNS names in the Subject Alternative Name (SAN) extension of the certificate.
        - `notAfter` string, date-time, nullable
        - `notBefore` string, date-time, nullable

## Other responses

- `4XX` — Something is wrong with your request such as missing or invalid data. Correct your request and try again.
- `5XX` — Internal server error. Try again later or reach out to MetaRouter support.

---

[API](https://skmtc.net/metarouter/apis/control-api.md) · [All operations](https://skmtc.net/metarouter/apis/control-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/metarouter/control-api/versions/5afc05bfaaa2/schema)