Package com.google.cloud.networksecurity.v1

Interface TlsInspectionPolicyOrBuilder

All Superinterfaces:
com.google.protobuf.MessageLiteOrBuilder, com.google.protobuf.MessageOrBuilder
All Known Implementing Classes:
TlsInspectionPolicy, TlsInspectionPolicy.Builder
@Generated public interface TlsInspectionPolicyOrBuilder extends com.google.protobuf.MessageOrBuilder

  • Method Details

    • getName

      String getName()
       Required. Name of the resource. Name is of the form
 projects/{project}/locations/{location}/tlsInspectionPolicies/{tls_inspection_policy}
 tls_inspection_policy should match the
 pattern:(^[a-z]([a-z0-9-]{0,61}[a-z0-9])?$).
      string name = 1 [(.google.api.field_behavior) = REQUIRED];
      Returns:
      The name.

    • getNameBytes

      com.google.protobuf.ByteString getNameBytes()
       Required. Name of the resource. Name is of the form
 projects/{project}/locations/{location}/tlsInspectionPolicies/{tls_inspection_policy}
 tls_inspection_policy should match the
 pattern:(^[a-z]([a-z0-9-]{0,61}[a-z0-9])?$).
      string name = 1 [(.google.api.field_behavior) = REQUIRED];
      Returns:
      The bytes for name.

    • getDescription

      String getDescription()
       Optional. Free-text description of the resource.
      string description = 2 [(.google.api.field_behavior) = OPTIONAL];
      Returns:
      The description.

    • getDescriptionBytes

      com.google.protobuf.ByteString getDescriptionBytes()
       Optional. Free-text description of the resource.
      string description = 2 [(.google.api.field_behavior) = OPTIONAL];
      Returns:
      The bytes for description.

    • hasCreateTime

      boolean hasCreateTime()
       Output only. The timestamp when the resource was created.
      .google.protobuf.Timestamp create_time = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];
      Returns:
      Whether the createTime field is set.

    • getCreateTime

      com.google.protobuf.Timestamp getCreateTime()
       Output only. The timestamp when the resource was created.
      .google.protobuf.Timestamp create_time = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];
      Returns:
      The createTime.

    • getCreateTimeOrBuilder

      com.google.protobuf.TimestampOrBuilder getCreateTimeOrBuilder()
       Output only. The timestamp when the resource was created.
      .google.protobuf.Timestamp create_time = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];

    • hasUpdateTime

      boolean hasUpdateTime()
       Output only. The timestamp when the resource was updated.
      .google.protobuf.Timestamp update_time = 4 [(.google.api.field_behavior) = OUTPUT_ONLY];
      Returns:
      Whether the updateTime field is set.

    • getUpdateTime

      com.google.protobuf.Timestamp getUpdateTime()
       Output only. The timestamp when the resource was updated.
      .google.protobuf.Timestamp update_time = 4 [(.google.api.field_behavior) = OUTPUT_ONLY];
      Returns:
      The updateTime.

    • getUpdateTimeOrBuilder

      com.google.protobuf.TimestampOrBuilder getUpdateTimeOrBuilder()
       Output only. The timestamp when the resource was updated.
      .google.protobuf.Timestamp update_time = 4 [(.google.api.field_behavior) = OUTPUT_ONLY];

    • getCaPool

      String getCaPool()
       Required. A CA pool resource used to issue interception certificates.
 The CA pool string has a relative resource path following the form
 "projects/{project}/locations/{location}/caPools/{ca_pool}".
      string ca_pool = 5 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
      Returns:
      The caPool.

    • getCaPoolBytes

      com.google.protobuf.ByteString getCaPoolBytes()
       Required. A CA pool resource used to issue interception certificates.
 The CA pool string has a relative resource path following the form
 "projects/{project}/locations/{location}/caPools/{ca_pool}".
      string ca_pool = 5 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
      Returns:
      The bytes for caPool.

    • getTrustConfig

      String getTrustConfig()
       Optional. A TrustConfig resource used when making a connection to the TLS
 server. This is a relative resource path following the form
 "projects/{project}/locations/{location}/trustConfigs/{trust_config}". This
 is necessary to intercept TLS connections to servers with certificates
 signed by a private CA or self-signed certificates.
 Note that Secure Web Proxy does not yet honor this field.
      string trust_config = 6 [(.google.api.field_behavior) = OPTIONAL, (.google.api.resource_reference) = { ... }
      Returns:
      The trustConfig.

    • getTrustConfigBytes

      com.google.protobuf.ByteString getTrustConfigBytes()
       Optional. A TrustConfig resource used when making a connection to the TLS
 server. This is a relative resource path following the form
 "projects/{project}/locations/{location}/trustConfigs/{trust_config}". This
 is necessary to intercept TLS connections to servers with certificates
 signed by a private CA or self-signed certificates.
 Note that Secure Web Proxy does not yet honor this field.
      string trust_config = 6 [(.google.api.field_behavior) = OPTIONAL, (.google.api.resource_reference) = { ... }
      Returns:
      The bytes for trustConfig.

    • hasExcludePublicCaSet

      boolean hasExcludePublicCaSet()
       Optional. If  FALSE (the default), use our default set of public CAs in
 addition to any CAs specified in trust_config. These public CAs are
 currently based on the Mozilla Root Program and are subject to change over
 time. If TRUE, do not accept our default set of public CAs. Only CAs
 specified in trust_config will be accepted. This defaults to FALSE (use
 public CAs in addition to trust_config) for backwards compatibility, but
 trusting public root CAs is *not recommended* unless the traffic in
 question is outbound to public web servers. When possible, prefer setting
 this to "false" and explicitly specifying trusted CAs and certificates in a
 TrustConfig. Note that Secure Web Proxy does not yet honor this field.
      optional bool exclude_public_ca_set = 7 [(.google.api.field_behavior) = OPTIONAL];
      Returns:
      Whether the excludePublicCaSet field is set.

    • getExcludePublicCaSet

      boolean getExcludePublicCaSet()
       Optional. If  FALSE (the default), use our default set of public CAs in
 addition to any CAs specified in trust_config. These public CAs are
 currently based on the Mozilla Root Program and are subject to change over
 time. If TRUE, do not accept our default set of public CAs. Only CAs
 specified in trust_config will be accepted. This defaults to FALSE (use
 public CAs in addition to trust_config) for backwards compatibility, but
 trusting public root CAs is *not recommended* unless the traffic in
 question is outbound to public web servers. When possible, prefer setting
 this to "false" and explicitly specifying trusted CAs and certificates in a
 TrustConfig. Note that Secure Web Proxy does not yet honor this field.
      optional bool exclude_public_ca_set = 7 [(.google.api.field_behavior) = OPTIONAL];
      Returns:
      The excludePublicCaSet.

    • getMinTlsVersionValue

      int getMinTlsVersionValue()
       Optional. Minimum TLS version that the firewall should use when negotiating
 connections with both clients and servers. If this is not set, then the
 default value is to allow the broadest set of clients and servers (TLS 1.0
 or higher). Setting this to more restrictive values may improve security,
 but may also prevent the firewall from connecting to some clients or
 servers.
 Note that Secure Web Proxy does not yet honor this field.
      .google.cloud.networksecurity.v1.TlsInspectionPolicy.TlsVersion min_tls_version = 8 [(.google.api.field_behavior) = OPTIONAL];
      Returns:
      The enum numeric value on the wire for minTlsVersion.

    • getMinTlsVersion

      TlsInspectionPolicy.TlsVersion getMinTlsVersion()
       Optional. Minimum TLS version that the firewall should use when negotiating
 connections with both clients and servers. If this is not set, then the
 default value is to allow the broadest set of clients and servers (TLS 1.0
 or higher). Setting this to more restrictive values may improve security,
 but may also prevent the firewall from connecting to some clients or
 servers.
 Note that Secure Web Proxy does not yet honor this field.
      .google.cloud.networksecurity.v1.TlsInspectionPolicy.TlsVersion min_tls_version = 8 [(.google.api.field_behavior) = OPTIONAL];
      Returns:
      The minTlsVersion.

    • getTlsFeatureProfileValue

      int getTlsFeatureProfileValue()
       Optional. The selected Profile. If this is not set, then the default value
 is to allow the broadest set of clients and servers ("PROFILE_COMPATIBLE").
 Setting this to more restrictive values may improve security, but may also
 prevent the TLS inspection proxy from connecting to some clients or
 servers. Note that Secure Web Proxy does not yet honor this field.
      .google.cloud.networksecurity.v1.TlsInspectionPolicy.Profile tls_feature_profile = 9 [(.google.api.field_behavior) = OPTIONAL];
      Returns:
      The enum numeric value on the wire for tlsFeatureProfile.

    • getTlsFeatureProfile

      TlsInspectionPolicy.Profile getTlsFeatureProfile()
       Optional. The selected Profile. If this is not set, then the default value
 is to allow the broadest set of clients and servers ("PROFILE_COMPATIBLE").
 Setting this to more restrictive values may improve security, but may also
 prevent the TLS inspection proxy from connecting to some clients or
 servers. Note that Secure Web Proxy does not yet honor this field.
      .google.cloud.networksecurity.v1.TlsInspectionPolicy.Profile tls_feature_profile = 9 [(.google.api.field_behavior) = OPTIONAL];
      Returns:
      The tlsFeatureProfile.

    • getCustomTlsFeaturesList

      List<String> getCustomTlsFeaturesList()
       Optional. List of custom TLS cipher suites selected.
 This field is valid only if the selected tls_feature_profile is CUSTOM.
 The [compute.SslPoliciesService.ListAvailableFeatures][] method returns the
 set of features that can be specified in this list.
 Note that Secure Web Proxy does not yet honor this field.
      repeated string custom_tls_features = 10 [(.google.api.field_behavior) = OPTIONAL];
      Returns:
      A list containing the customTlsFeatures.

    • getCustomTlsFeaturesCount

      int getCustomTlsFeaturesCount()
       Optional. List of custom TLS cipher suites selected.
 This field is valid only if the selected tls_feature_profile is CUSTOM.
 The [compute.SslPoliciesService.ListAvailableFeatures][] method returns the
 set of features that can be specified in this list.
 Note that Secure Web Proxy does not yet honor this field.
      repeated string custom_tls_features = 10 [(.google.api.field_behavior) = OPTIONAL];
      Returns:
      The count of customTlsFeatures.

    • getCustomTlsFeatures

      String getCustomTlsFeatures(int index)
       Optional. List of custom TLS cipher suites selected.
 This field is valid only if the selected tls_feature_profile is CUSTOM.
 The [compute.SslPoliciesService.ListAvailableFeatures][] method returns the
 set of features that can be specified in this list.
 Note that Secure Web Proxy does not yet honor this field.
      repeated string custom_tls_features = 10 [(.google.api.field_behavior) = OPTIONAL];
      Parameters:
      index - The index of the element to return.
      Returns:
      The customTlsFeatures at the given index.

    • getCustomTlsFeaturesBytes

      com.google.protobuf.ByteString getCustomTlsFeaturesBytes(int index)
       Optional. List of custom TLS cipher suites selected.
 This field is valid only if the selected tls_feature_profile is CUSTOM.
 The [compute.SslPoliciesService.ListAvailableFeatures][] method returns the
 set of features that can be specified in this list.
 Note that Secure Web Proxy does not yet honor this field.
      repeated string custom_tls_features = 10 [(.google.api.field_behavior) = OPTIONAL];
      Parameters:
      index - The index of the value to return.
      Returns:
      The bytes of the customTlsFeatures at the given index.