Package com.google.cloud.networksecurity.v1

Class TlsInspectionPolicy.Builder

java.lang.Object
com.google.protobuf.AbstractMessageLite.Builder
com.google.protobuf.AbstractMessage.Builder<BuilderT>
com.google.protobuf.GeneratedMessage.Builder<TlsInspectionPolicy.Builder>
com.google.cloud.networksecurity.v1.TlsInspectionPolicy.Builder
All Implemented Interfaces:
TlsInspectionPolicyOrBuilder, com.google.protobuf.Message.Builder, com.google.protobuf.MessageLite.Builder, com.google.protobuf.MessageLiteOrBuilder, com.google.protobuf.MessageOrBuilder, Cloneable
Enclosing class:
TlsInspectionPolicy
public static final class TlsInspectionPolicy.Builder extends com.google.protobuf.GeneratedMessage.Builder<TlsInspectionPolicy.Builder> implements TlsInspectionPolicyOrBuilder
 The TlsInspectionPolicy resource contains references to CA pools in
 Certificate Authority Service and associated metadata.
Protobuf type google.cloud.networksecurity.v1.TlsInspectionPolicy

  • Method Details

    • getDescriptor

      public static final com.google.protobuf.Descriptors.Descriptor getDescriptor()

    • internalGetFieldAccessorTable

      protected com.google.protobuf.GeneratedMessage.FieldAccessorTable internalGetFieldAccessorTable()
      Specified by:
      internalGetFieldAccessorTable in class com.google.protobuf.GeneratedMessage.Builder<TlsInspectionPolicy.Builder>

    • clear

      public TlsInspectionPolicy.Builder clear()
      Specified by:
      clear in interface com.google.protobuf.Message.Builder
      Specified by:
      clear in interface com.google.protobuf.MessageLite.Builder
      Overrides:
      clear in class com.google.protobuf.GeneratedMessage.Builder<TlsInspectionPolicy.Builder>

    • getDescriptorForType

      public com.google.protobuf.Descriptors.Descriptor getDescriptorForType()
      Specified by:
      getDescriptorForType in interface com.google.protobuf.Message.Builder
      Specified by:
      getDescriptorForType in interface com.google.protobuf.MessageOrBuilder
      Overrides:
      getDescriptorForType in class com.google.protobuf.GeneratedMessage.Builder<TlsInspectionPolicy.Builder>

    • getDefaultInstanceForType

      public TlsInspectionPolicy getDefaultInstanceForType()
      Specified by:
      getDefaultInstanceForType in interface com.google.protobuf.MessageLiteOrBuilder
      Specified by:
      getDefaultInstanceForType in interface com.google.protobuf.MessageOrBuilder

    • build

      public TlsInspectionPolicy build()
      Specified by:
      build in interface com.google.protobuf.Message.Builder
      Specified by:
      build in interface com.google.protobuf.MessageLite.Builder

    • buildPartial

      public TlsInspectionPolicy buildPartial()
      Specified by:
      buildPartial in interface com.google.protobuf.Message.Builder
      Specified by:
      buildPartial in interface com.google.protobuf.MessageLite.Builder

    • mergeFrom

      public TlsInspectionPolicy.Builder mergeFrom(com.google.protobuf.Message other)
      Specified by:
      mergeFrom in interface com.google.protobuf.Message.Builder
      Overrides:
      mergeFrom in class com.google.protobuf.AbstractMessage.Builder<TlsInspectionPolicy.Builder>

    • mergeFrom

      public TlsInspectionPolicy.Builder mergeFrom(TlsInspectionPolicy other)

    • isInitialized

      public final boolean isInitialized()
      Specified by:
      isInitialized in interface com.google.protobuf.MessageLiteOrBuilder
      Overrides:
      isInitialized in class com.google.protobuf.GeneratedMessage.Builder<TlsInspectionPolicy.Builder>

    • mergeFrom

      public TlsInspectionPolicy.Builder mergeFrom(com.google.protobuf.CodedInputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws IOException
      Specified by:
      mergeFrom in interface com.google.protobuf.Message.Builder
      Specified by:
      mergeFrom in interface com.google.protobuf.MessageLite.Builder
      Overrides:
      mergeFrom in class com.google.protobuf.AbstractMessage.Builder<TlsInspectionPolicy.Builder>
      Throws:
      IOException

    • getName

      public String getName()
       Required. Name of the resource. Name is of the form
 projects/{project}/locations/{location}/tlsInspectionPolicies/{tls_inspection_policy}
 tls_inspection_policy should match the
 pattern:(^[a-z]([a-z0-9-]{0,61}[a-z0-9])?$).
      string name = 1 [(.google.api.field_behavior) = REQUIRED];
      Specified by:
      getName in interface TlsInspectionPolicyOrBuilder
      Returns:
      The name.

    • getNameBytes

      public com.google.protobuf.ByteString getNameBytes()
       Required. Name of the resource. Name is of the form
 projects/{project}/locations/{location}/tlsInspectionPolicies/{tls_inspection_policy}
 tls_inspection_policy should match the
 pattern:(^[a-z]([a-z0-9-]{0,61}[a-z0-9])?$).
      string name = 1 [(.google.api.field_behavior) = REQUIRED];
      Specified by:
      getNameBytes in interface TlsInspectionPolicyOrBuilder
      Returns:
      The bytes for name.

    • setName

      public TlsInspectionPolicy.Builder setName(String value)
       Required. Name of the resource. Name is of the form
 projects/{project}/locations/{location}/tlsInspectionPolicies/{tls_inspection_policy}
 tls_inspection_policy should match the
 pattern:(^[a-z]([a-z0-9-]{0,61}[a-z0-9])?$).
      string name = 1 [(.google.api.field_behavior) = REQUIRED];
      Parameters:
      value - The name to set.
      Returns:
      This builder for chaining.

    • clearName

      public TlsInspectionPolicy.Builder clearName()
       Required. Name of the resource. Name is of the form
 projects/{project}/locations/{location}/tlsInspectionPolicies/{tls_inspection_policy}
 tls_inspection_policy should match the
 pattern:(^[a-z]([a-z0-9-]{0,61}[a-z0-9])?$).
      string name = 1 [(.google.api.field_behavior) = REQUIRED];
      Returns:
      This builder for chaining.

    • setNameBytes

      public TlsInspectionPolicy.Builder setNameBytes(com.google.protobuf.ByteString value)
       Required. Name of the resource. Name is of the form
 projects/{project}/locations/{location}/tlsInspectionPolicies/{tls_inspection_policy}
 tls_inspection_policy should match the
 pattern:(^[a-z]([a-z0-9-]{0,61}[a-z0-9])?$).
      string name = 1 [(.google.api.field_behavior) = REQUIRED];
      Parameters:
      value - The bytes for name to set.
      Returns:
      This builder for chaining.

    • getDescription

      public String getDescription()
       Optional. Free-text description of the resource.
      string description = 2 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getDescription in interface TlsInspectionPolicyOrBuilder
      Returns:
      The description.

    • getDescriptionBytes

      public com.google.protobuf.ByteString getDescriptionBytes()
       Optional. Free-text description of the resource.
      string description = 2 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getDescriptionBytes in interface TlsInspectionPolicyOrBuilder
      Returns:
      The bytes for description.

    • setDescription

      public TlsInspectionPolicy.Builder setDescription(String value)
       Optional. Free-text description of the resource.
      string description = 2 [(.google.api.field_behavior) = OPTIONAL];
      Parameters:
      value - The description to set.
      Returns:
      This builder for chaining.

    • clearDescription

      public TlsInspectionPolicy.Builder clearDescription()
       Optional. Free-text description of the resource.
      string description = 2 [(.google.api.field_behavior) = OPTIONAL];
      Returns:
      This builder for chaining.

    • setDescriptionBytes

      public TlsInspectionPolicy.Builder setDescriptionBytes(com.google.protobuf.ByteString value)
       Optional. Free-text description of the resource.
      string description = 2 [(.google.api.field_behavior) = OPTIONAL];
      Parameters:
      value - The bytes for description to set.
      Returns:
      This builder for chaining.

    • hasCreateTime

      public boolean hasCreateTime()
       Output only. The timestamp when the resource was created.
      .google.protobuf.Timestamp create_time = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];
      Specified by:
      hasCreateTime in interface TlsInspectionPolicyOrBuilder
      Returns:
      Whether the createTime field is set.

    • getCreateTime

      public com.google.protobuf.Timestamp getCreateTime()
       Output only. The timestamp when the resource was created.
      .google.protobuf.Timestamp create_time = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];
      Specified by:
      getCreateTime in interface TlsInspectionPolicyOrBuilder
      Returns:
      The createTime.

    • setCreateTime

      public TlsInspectionPolicy.Builder setCreateTime(com.google.protobuf.Timestamp value)
       Output only. The timestamp when the resource was created.
      .google.protobuf.Timestamp create_time = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];

    • setCreateTime

      public TlsInspectionPolicy.Builder setCreateTime(com.google.protobuf.Timestamp.Builder builderForValue)
       Output only. The timestamp when the resource was created.
      .google.protobuf.Timestamp create_time = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];

    • mergeCreateTime

      public TlsInspectionPolicy.Builder mergeCreateTime(com.google.protobuf.Timestamp value)
       Output only. The timestamp when the resource was created.
      .google.protobuf.Timestamp create_time = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];

    • clearCreateTime

      public TlsInspectionPolicy.Builder clearCreateTime()
       Output only. The timestamp when the resource was created.
      .google.protobuf.Timestamp create_time = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];

    • getCreateTimeBuilder

      public com.google.protobuf.Timestamp.Builder getCreateTimeBuilder()
       Output only. The timestamp when the resource was created.
      .google.protobuf.Timestamp create_time = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];

    • getCreateTimeOrBuilder

      public com.google.protobuf.TimestampOrBuilder getCreateTimeOrBuilder()
       Output only. The timestamp when the resource was created.
      .google.protobuf.Timestamp create_time = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];
      Specified by:
      getCreateTimeOrBuilder in interface TlsInspectionPolicyOrBuilder

    • hasUpdateTime

      public boolean hasUpdateTime()
       Output only. The timestamp when the resource was updated.
      .google.protobuf.Timestamp update_time = 4 [(.google.api.field_behavior) = OUTPUT_ONLY];
      Specified by:
      hasUpdateTime in interface TlsInspectionPolicyOrBuilder
      Returns:
      Whether the updateTime field is set.

    • getUpdateTime

      public com.google.protobuf.Timestamp getUpdateTime()
       Output only. The timestamp when the resource was updated.
      .google.protobuf.Timestamp update_time = 4 [(.google.api.field_behavior) = OUTPUT_ONLY];
      Specified by:
      getUpdateTime in interface TlsInspectionPolicyOrBuilder
      Returns:
      The updateTime.

    • setUpdateTime

      public TlsInspectionPolicy.Builder setUpdateTime(com.google.protobuf.Timestamp value)
       Output only. The timestamp when the resource was updated.
      .google.protobuf.Timestamp update_time = 4 [(.google.api.field_behavior) = OUTPUT_ONLY];

    • setUpdateTime

      public TlsInspectionPolicy.Builder setUpdateTime(com.google.protobuf.Timestamp.Builder builderForValue)
       Output only. The timestamp when the resource was updated.
      .google.protobuf.Timestamp update_time = 4 [(.google.api.field_behavior) = OUTPUT_ONLY];

    • mergeUpdateTime

      public TlsInspectionPolicy.Builder mergeUpdateTime(com.google.protobuf.Timestamp value)
       Output only. The timestamp when the resource was updated.
      .google.protobuf.Timestamp update_time = 4 [(.google.api.field_behavior) = OUTPUT_ONLY];

    • clearUpdateTime

      public TlsInspectionPolicy.Builder clearUpdateTime()
       Output only. The timestamp when the resource was updated.
      .google.protobuf.Timestamp update_time = 4 [(.google.api.field_behavior) = OUTPUT_ONLY];

    • getUpdateTimeBuilder

      public com.google.protobuf.Timestamp.Builder getUpdateTimeBuilder()
       Output only. The timestamp when the resource was updated.
      .google.protobuf.Timestamp update_time = 4 [(.google.api.field_behavior) = OUTPUT_ONLY];

    • getUpdateTimeOrBuilder

      public com.google.protobuf.TimestampOrBuilder getUpdateTimeOrBuilder()
       Output only. The timestamp when the resource was updated.
      .google.protobuf.Timestamp update_time = 4 [(.google.api.field_behavior) = OUTPUT_ONLY];
      Specified by:
      getUpdateTimeOrBuilder in interface TlsInspectionPolicyOrBuilder

    • getCaPool

      public String getCaPool()
       Required. A CA pool resource used to issue interception certificates.
 The CA pool string has a relative resource path following the form
 "projects/{project}/locations/{location}/caPools/{ca_pool}".
      string ca_pool = 5 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
      Specified by:
      getCaPool in interface TlsInspectionPolicyOrBuilder
      Returns:
      The caPool.

    • getCaPoolBytes

      public com.google.protobuf.ByteString getCaPoolBytes()
       Required. A CA pool resource used to issue interception certificates.
 The CA pool string has a relative resource path following the form
 "projects/{project}/locations/{location}/caPools/{ca_pool}".
      string ca_pool = 5 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
      Specified by:
      getCaPoolBytes in interface TlsInspectionPolicyOrBuilder
      Returns:
      The bytes for caPool.

    • setCaPool

      public TlsInspectionPolicy.Builder setCaPool(String value)
       Required. A CA pool resource used to issue interception certificates.
 The CA pool string has a relative resource path following the form
 "projects/{project}/locations/{location}/caPools/{ca_pool}".
      string ca_pool = 5 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
      Parameters:
      value - The caPool to set.
      Returns:
      This builder for chaining.

    • clearCaPool

      public TlsInspectionPolicy.Builder clearCaPool()
       Required. A CA pool resource used to issue interception certificates.
 The CA pool string has a relative resource path following the form
 "projects/{project}/locations/{location}/caPools/{ca_pool}".
      string ca_pool = 5 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
      Returns:
      This builder for chaining.

    • setCaPoolBytes

      public TlsInspectionPolicy.Builder setCaPoolBytes(com.google.protobuf.ByteString value)
       Required. A CA pool resource used to issue interception certificates.
 The CA pool string has a relative resource path following the form
 "projects/{project}/locations/{location}/caPools/{ca_pool}".
      string ca_pool = 5 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
      Parameters:
      value - The bytes for caPool to set.
      Returns:
      This builder for chaining.

    • getTrustConfig

      public String getTrustConfig()
       Optional. A TrustConfig resource used when making a connection to the TLS
 server. This is a relative resource path following the form
 "projects/{project}/locations/{location}/trustConfigs/{trust_config}". This
 is necessary to intercept TLS connections to servers with certificates
 signed by a private CA or self-signed certificates.
 Note that Secure Web Proxy does not yet honor this field.
      string trust_config = 6 [(.google.api.field_behavior) = OPTIONAL, (.google.api.resource_reference) = { ... }
      Specified by:
      getTrustConfig in interface TlsInspectionPolicyOrBuilder
      Returns:
      The trustConfig.

    • getTrustConfigBytes

      public com.google.protobuf.ByteString getTrustConfigBytes()
       Optional. A TrustConfig resource used when making a connection to the TLS
 server. This is a relative resource path following the form
 "projects/{project}/locations/{location}/trustConfigs/{trust_config}". This
 is necessary to intercept TLS connections to servers with certificates
 signed by a private CA or self-signed certificates.
 Note that Secure Web Proxy does not yet honor this field.
      string trust_config = 6 [(.google.api.field_behavior) = OPTIONAL, (.google.api.resource_reference) = { ... }
      Specified by:
      getTrustConfigBytes in interface TlsInspectionPolicyOrBuilder
      Returns:
      The bytes for trustConfig.

    • setTrustConfig

      public TlsInspectionPolicy.Builder setTrustConfig(String value)
       Optional. A TrustConfig resource used when making a connection to the TLS
 server. This is a relative resource path following the form
 "projects/{project}/locations/{location}/trustConfigs/{trust_config}". This
 is necessary to intercept TLS connections to servers with certificates
 signed by a private CA or self-signed certificates.
 Note that Secure Web Proxy does not yet honor this field.
      string trust_config = 6 [(.google.api.field_behavior) = OPTIONAL, (.google.api.resource_reference) = { ... }
      Parameters:
      value - The trustConfig to set.
      Returns:
      This builder for chaining.

    • clearTrustConfig

      public TlsInspectionPolicy.Builder clearTrustConfig()
       Optional. A TrustConfig resource used when making a connection to the TLS
 server. This is a relative resource path following the form
 "projects/{project}/locations/{location}/trustConfigs/{trust_config}". This
 is necessary to intercept TLS connections to servers with certificates
 signed by a private CA or self-signed certificates.
 Note that Secure Web Proxy does not yet honor this field.
      string trust_config = 6 [(.google.api.field_behavior) = OPTIONAL, (.google.api.resource_reference) = { ... }
      Returns:
      This builder for chaining.

    • setTrustConfigBytes

      public TlsInspectionPolicy.Builder setTrustConfigBytes(com.google.protobuf.ByteString value)
       Optional. A TrustConfig resource used when making a connection to the TLS
 server. This is a relative resource path following the form
 "projects/{project}/locations/{location}/trustConfigs/{trust_config}". This
 is necessary to intercept TLS connections to servers with certificates
 signed by a private CA or self-signed certificates.
 Note that Secure Web Proxy does not yet honor this field.
      string trust_config = 6 [(.google.api.field_behavior) = OPTIONAL, (.google.api.resource_reference) = { ... }
      Parameters:
      value - The bytes for trustConfig to set.
      Returns:
      This builder for chaining.

    • hasExcludePublicCaSet

      public boolean hasExcludePublicCaSet()
       Optional. If  FALSE (the default), use our default set of public CAs in
 addition to any CAs specified in trust_config. These public CAs are
 currently based on the Mozilla Root Program and are subject to change over
 time. If TRUE, do not accept our default set of public CAs. Only CAs
 specified in trust_config will be accepted. This defaults to FALSE (use
 public CAs in addition to trust_config) for backwards compatibility, but
 trusting public root CAs is *not recommended* unless the traffic in
 question is outbound to public web servers. When possible, prefer setting
 this to "false" and explicitly specifying trusted CAs and certificates in a
 TrustConfig. Note that Secure Web Proxy does not yet honor this field.
      optional bool exclude_public_ca_set = 7 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      hasExcludePublicCaSet in interface TlsInspectionPolicyOrBuilder
      Returns:
      Whether the excludePublicCaSet field is set.

    • getExcludePublicCaSet

      public boolean getExcludePublicCaSet()
       Optional. If  FALSE (the default), use our default set of public CAs in
 addition to any CAs specified in trust_config. These public CAs are
 currently based on the Mozilla Root Program and are subject to change over
 time. If TRUE, do not accept our default set of public CAs. Only CAs
 specified in trust_config will be accepted. This defaults to FALSE (use
 public CAs in addition to trust_config) for backwards compatibility, but
 trusting public root CAs is *not recommended* unless the traffic in
 question is outbound to public web servers. When possible, prefer setting
 this to "false" and explicitly specifying trusted CAs and certificates in a
 TrustConfig. Note that Secure Web Proxy does not yet honor this field.
      optional bool exclude_public_ca_set = 7 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getExcludePublicCaSet in interface TlsInspectionPolicyOrBuilder
      Returns:
      The excludePublicCaSet.

    • setExcludePublicCaSet

      public TlsInspectionPolicy.Builder setExcludePublicCaSet(boolean value)
       Optional. If  FALSE (the default), use our default set of public CAs in
 addition to any CAs specified in trust_config. These public CAs are
 currently based on the Mozilla Root Program and are subject to change over
 time. If TRUE, do not accept our default set of public CAs. Only CAs
 specified in trust_config will be accepted. This defaults to FALSE (use
 public CAs in addition to trust_config) for backwards compatibility, but
 trusting public root CAs is *not recommended* unless the traffic in
 question is outbound to public web servers. When possible, prefer setting
 this to "false" and explicitly specifying trusted CAs and certificates in a
 TrustConfig. Note that Secure Web Proxy does not yet honor this field.
      optional bool exclude_public_ca_set = 7 [(.google.api.field_behavior) = OPTIONAL];
      Parameters:
      value - The excludePublicCaSet to set.
      Returns:
      This builder for chaining.

    • clearExcludePublicCaSet

      public TlsInspectionPolicy.Builder clearExcludePublicCaSet()
       Optional. If  FALSE (the default), use our default set of public CAs in
 addition to any CAs specified in trust_config. These public CAs are
 currently based on the Mozilla Root Program and are subject to change over
 time. If TRUE, do not accept our default set of public CAs. Only CAs
 specified in trust_config will be accepted. This defaults to FALSE (use
 public CAs in addition to trust_config) for backwards compatibility, but
 trusting public root CAs is *not recommended* unless the traffic in
 question is outbound to public web servers. When possible, prefer setting
 this to "false" and explicitly specifying trusted CAs and certificates in a
 TrustConfig. Note that Secure Web Proxy does not yet honor this field.
      optional bool exclude_public_ca_set = 7 [(.google.api.field_behavior) = OPTIONAL];
      Returns:
      This builder for chaining.

    • getMinTlsVersionValue

      public int getMinTlsVersionValue()
       Optional. Minimum TLS version that the firewall should use when negotiating
 connections with both clients and servers. If this is not set, then the
 default value is to allow the broadest set of clients and servers (TLS 1.0
 or higher). Setting this to more restrictive values may improve security,
 but may also prevent the firewall from connecting to some clients or
 servers.
 Note that Secure Web Proxy does not yet honor this field.
      .google.cloud.networksecurity.v1.TlsInspectionPolicy.TlsVersion min_tls_version = 8 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getMinTlsVersionValue in interface TlsInspectionPolicyOrBuilder
      Returns:
      The enum numeric value on the wire for minTlsVersion.

    • setMinTlsVersionValue

      public TlsInspectionPolicy.Builder setMinTlsVersionValue(int value)
       Optional. Minimum TLS version that the firewall should use when negotiating
 connections with both clients and servers. If this is not set, then the
 default value is to allow the broadest set of clients and servers (TLS 1.0
 or higher). Setting this to more restrictive values may improve security,
 but may also prevent the firewall from connecting to some clients or
 servers.
 Note that Secure Web Proxy does not yet honor this field.
      .google.cloud.networksecurity.v1.TlsInspectionPolicy.TlsVersion min_tls_version = 8 [(.google.api.field_behavior) = OPTIONAL];
      Parameters:
      value - The enum numeric value on the wire for minTlsVersion to set.
      Returns:
      This builder for chaining.

    • getMinTlsVersion

      public TlsInspectionPolicy.TlsVersion getMinTlsVersion()
       Optional. Minimum TLS version that the firewall should use when negotiating
 connections with both clients and servers. If this is not set, then the
 default value is to allow the broadest set of clients and servers (TLS 1.0
 or higher). Setting this to more restrictive values may improve security,
 but may also prevent the firewall from connecting to some clients or
 servers.
 Note that Secure Web Proxy does not yet honor this field.
      .google.cloud.networksecurity.v1.TlsInspectionPolicy.TlsVersion min_tls_version = 8 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getMinTlsVersion in interface TlsInspectionPolicyOrBuilder
      Returns:
      The minTlsVersion.

    • setMinTlsVersion

      public TlsInspectionPolicy.Builder setMinTlsVersion(TlsInspectionPolicy.TlsVersion value)
       Optional. Minimum TLS version that the firewall should use when negotiating
 connections with both clients and servers. If this is not set, then the
 default value is to allow the broadest set of clients and servers (TLS 1.0
 or higher). Setting this to more restrictive values may improve security,
 but may also prevent the firewall from connecting to some clients or
 servers.
 Note that Secure Web Proxy does not yet honor this field.
      .google.cloud.networksecurity.v1.TlsInspectionPolicy.TlsVersion min_tls_version = 8 [(.google.api.field_behavior) = OPTIONAL];
      Parameters:
      value - The minTlsVersion to set.
      Returns:
      This builder for chaining.

    • clearMinTlsVersion

      public TlsInspectionPolicy.Builder clearMinTlsVersion()
       Optional. Minimum TLS version that the firewall should use when negotiating
 connections with both clients and servers. If this is not set, then the
 default value is to allow the broadest set of clients and servers (TLS 1.0
 or higher). Setting this to more restrictive values may improve security,
 but may also prevent the firewall from connecting to some clients or
 servers.
 Note that Secure Web Proxy does not yet honor this field.
      .google.cloud.networksecurity.v1.TlsInspectionPolicy.TlsVersion min_tls_version = 8 [(.google.api.field_behavior) = OPTIONAL];
      Returns:
      This builder for chaining.

    • getTlsFeatureProfileValue

      public int getTlsFeatureProfileValue()
       Optional. The selected Profile. If this is not set, then the default value
 is to allow the broadest set of clients and servers ("PROFILE_COMPATIBLE").
 Setting this to more restrictive values may improve security, but may also
 prevent the TLS inspection proxy from connecting to some clients or
 servers. Note that Secure Web Proxy does not yet honor this field.
      .google.cloud.networksecurity.v1.TlsInspectionPolicy.Profile tls_feature_profile = 9 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getTlsFeatureProfileValue in interface TlsInspectionPolicyOrBuilder
      Returns:
      The enum numeric value on the wire for tlsFeatureProfile.

    • setTlsFeatureProfileValue

      public TlsInspectionPolicy.Builder setTlsFeatureProfileValue(int value)
       Optional. The selected Profile. If this is not set, then the default value
 is to allow the broadest set of clients and servers ("PROFILE_COMPATIBLE").
 Setting this to more restrictive values may improve security, but may also
 prevent the TLS inspection proxy from connecting to some clients or
 servers. Note that Secure Web Proxy does not yet honor this field.
      .google.cloud.networksecurity.v1.TlsInspectionPolicy.Profile tls_feature_profile = 9 [(.google.api.field_behavior) = OPTIONAL];
      Parameters:
      value - The enum numeric value on the wire for tlsFeatureProfile to set.
      Returns:
      This builder for chaining.

    • getTlsFeatureProfile

      public TlsInspectionPolicy.Profile getTlsFeatureProfile()
       Optional. The selected Profile. If this is not set, then the default value
 is to allow the broadest set of clients and servers ("PROFILE_COMPATIBLE").
 Setting this to more restrictive values may improve security, but may also
 prevent the TLS inspection proxy from connecting to some clients or
 servers. Note that Secure Web Proxy does not yet honor this field.
      .google.cloud.networksecurity.v1.TlsInspectionPolicy.Profile tls_feature_profile = 9 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getTlsFeatureProfile in interface TlsInspectionPolicyOrBuilder
      Returns:
      The tlsFeatureProfile.

    • setTlsFeatureProfile

      public TlsInspectionPolicy.Builder setTlsFeatureProfile(TlsInspectionPolicy.Profile value)
       Optional. The selected Profile. If this is not set, then the default value
 is to allow the broadest set of clients and servers ("PROFILE_COMPATIBLE").
 Setting this to more restrictive values may improve security, but may also
 prevent the TLS inspection proxy from connecting to some clients or
 servers. Note that Secure Web Proxy does not yet honor this field.
      .google.cloud.networksecurity.v1.TlsInspectionPolicy.Profile tls_feature_profile = 9 [(.google.api.field_behavior) = OPTIONAL];
      Parameters:
      value - The tlsFeatureProfile to set.
      Returns:
      This builder for chaining.

    • clearTlsFeatureProfile

      public TlsInspectionPolicy.Builder clearTlsFeatureProfile()
       Optional. The selected Profile. If this is not set, then the default value
 is to allow the broadest set of clients and servers ("PROFILE_COMPATIBLE").
 Setting this to more restrictive values may improve security, but may also
 prevent the TLS inspection proxy from connecting to some clients or
 servers. Note that Secure Web Proxy does not yet honor this field.
      .google.cloud.networksecurity.v1.TlsInspectionPolicy.Profile tls_feature_profile = 9 [(.google.api.field_behavior) = OPTIONAL];
      Returns:
      This builder for chaining.

    • getCustomTlsFeaturesList

      public com.google.protobuf.ProtocolStringList getCustomTlsFeaturesList()
       Optional. List of custom TLS cipher suites selected.
 This field is valid only if the selected tls_feature_profile is CUSTOM.
 The [compute.SslPoliciesService.ListAvailableFeatures][] method returns the
 set of features that can be specified in this list.
 Note that Secure Web Proxy does not yet honor this field.
      repeated string custom_tls_features = 10 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getCustomTlsFeaturesList in interface TlsInspectionPolicyOrBuilder
      Returns:
      A list containing the customTlsFeatures.

    • getCustomTlsFeaturesCount

      public int getCustomTlsFeaturesCount()
       Optional. List of custom TLS cipher suites selected.
 This field is valid only if the selected tls_feature_profile is CUSTOM.
 The [compute.SslPoliciesService.ListAvailableFeatures][] method returns the
 set of features that can be specified in this list.
 Note that Secure Web Proxy does not yet honor this field.
      repeated string custom_tls_features = 10 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getCustomTlsFeaturesCount in interface TlsInspectionPolicyOrBuilder
      Returns:
      The count of customTlsFeatures.

    • getCustomTlsFeatures

      public String getCustomTlsFeatures(int index)
       Optional. List of custom TLS cipher suites selected.
 This field is valid only if the selected tls_feature_profile is CUSTOM.
 The [compute.SslPoliciesService.ListAvailableFeatures][] method returns the
 set of features that can be specified in this list.
 Note that Secure Web Proxy does not yet honor this field.
      repeated string custom_tls_features = 10 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getCustomTlsFeatures in interface TlsInspectionPolicyOrBuilder
      Parameters:
      index - The index of the element to return.
      Returns:
      The customTlsFeatures at the given index.

    • getCustomTlsFeaturesBytes

      public com.google.protobuf.ByteString getCustomTlsFeaturesBytes(int index)
       Optional. List of custom TLS cipher suites selected.
 This field is valid only if the selected tls_feature_profile is CUSTOM.
 The [compute.SslPoliciesService.ListAvailableFeatures][] method returns the
 set of features that can be specified in this list.
 Note that Secure Web Proxy does not yet honor this field.
      repeated string custom_tls_features = 10 [(.google.api.field_behavior) = OPTIONAL];
      Specified by:
      getCustomTlsFeaturesBytes in interface TlsInspectionPolicyOrBuilder
      Parameters:
      index - The index of the value to return.
      Returns:
      The bytes of the customTlsFeatures at the given index.

    • setCustomTlsFeatures

      public TlsInspectionPolicy.Builder setCustomTlsFeatures(int index, String value)
       Optional. List of custom TLS cipher suites selected.
 This field is valid only if the selected tls_feature_profile is CUSTOM.
 The [compute.SslPoliciesService.ListAvailableFeatures][] method returns the
 set of features that can be specified in this list.
 Note that Secure Web Proxy does not yet honor this field.
      repeated string custom_tls_features = 10 [(.google.api.field_behavior) = OPTIONAL];
      Parameters:
      index - The index to set the value at.
      value - The customTlsFeatures to set.
      Returns:
      This builder for chaining.

    • addCustomTlsFeatures

      public TlsInspectionPolicy.Builder addCustomTlsFeatures(String value)
       Optional. List of custom TLS cipher suites selected.
 This field is valid only if the selected tls_feature_profile is CUSTOM.
 The [compute.SslPoliciesService.ListAvailableFeatures][] method returns the
 set of features that can be specified in this list.
 Note that Secure Web Proxy does not yet honor this field.
      repeated string custom_tls_features = 10 [(.google.api.field_behavior) = OPTIONAL];
      Parameters:
      value - The customTlsFeatures to add.
      Returns:
      This builder for chaining.

    • addAllCustomTlsFeatures

      public TlsInspectionPolicy.Builder addAllCustomTlsFeatures(Iterable<String> values)
       Optional. List of custom TLS cipher suites selected.
 This field is valid only if the selected tls_feature_profile is CUSTOM.
 The [compute.SslPoliciesService.ListAvailableFeatures][] method returns the
 set of features that can be specified in this list.
 Note that Secure Web Proxy does not yet honor this field.
      repeated string custom_tls_features = 10 [(.google.api.field_behavior) = OPTIONAL];
      Parameters:
      values - The customTlsFeatures to add.
      Returns:
      This builder for chaining.

    • clearCustomTlsFeatures

      public TlsInspectionPolicy.Builder clearCustomTlsFeatures()
       Optional. List of custom TLS cipher suites selected.
 This field is valid only if the selected tls_feature_profile is CUSTOM.
 The [compute.SslPoliciesService.ListAvailableFeatures][] method returns the
 set of features that can be specified in this list.
 Note that Secure Web Proxy does not yet honor this field.
      repeated string custom_tls_features = 10 [(.google.api.field_behavior) = OPTIONAL];
      Returns:
      This builder for chaining.

    • addCustomTlsFeaturesBytes

      public TlsInspectionPolicy.Builder addCustomTlsFeaturesBytes(com.google.protobuf.ByteString value)
       Optional. List of custom TLS cipher suites selected.
 This field is valid only if the selected tls_feature_profile is CUSTOM.
 The [compute.SslPoliciesService.ListAvailableFeatures][] method returns the
 set of features that can be specified in this list.
 Note that Secure Web Proxy does not yet honor this field.
      repeated string custom_tls_features = 10 [(.google.api.field_behavior) = OPTIONAL];
      Parameters:
      value - The bytes of the customTlsFeatures to add.
      Returns:
      This builder for chaining.