## Patch Auto-Origin TLS KEX enrollment status for the given zone `client.SSL.AutoOriginTLSKex.Edit(ctx, params) (*AutoOriginTLSKexEditResponse, error)` **patch** `/zones/{zone_id}/settings/auto_origin_tls_kex` Enable or disable Auto-Origin TLS KEX selection for the zone by sending `{"enabled": true}` or `{"enabled": false}`. When enabled, Cloudflare runs a periodic scan of the zone's origins to determine the preferred key-exchange algorithm and writes that preference to the edge so it is sent first in the TLS ClientHello to the origin. ### Parameters - `params AutoOriginTLSKexEditParams` - `ZoneID param.Field[string]` Path param - `Enabled param.Field[bool]` Body param: Controls enablement of Auto-Origin TLS KEX selection for the zone. ### Returns - `type AutoOriginTLSKexEditResponse struct{…}` - `ID string` - `Enabled bool` Whether Auto-Origin TLS KEX selection is enabled for the zone. - `ModifiedOn Time` Last time this setting was modified. ### Example ```go package main import ( "context" "fmt" "github.com/cloudflare/cloudflare-go" "github.com/cloudflare/cloudflare-go/option" "github.com/cloudflare/cloudflare-go/ssl" ) func main() { client := cloudflare.NewClient( option.WithAPIToken("Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY"), ) response, err := client.SSL.AutoOriginTLSKex.Edit(context.TODO(), ssl.AutoOriginTLSKexEditParams{ ZoneID: cloudflare.F("023e105f4ecef8ad9ca31a8372d0c353"), Enabled: cloudflare.F(true), }) if err != nil { panic(err.Error()) } fmt.Printf("%+v\n", response.ID) } ``` #### Response ```json { "errors": [], "messages": [], "result": { "enabled": false, "id": "auto_origin_tls_kex", "modified_on": "2014-01-01T05:20:00.12345Z" }, "success": true } ```