public static final class Server.TLSOptions.Builder extends com.google.protobuf.GeneratedMessageV3.Builder<Server.TLSOptions.Builder> implements Server.TLSOptionsOrBuilder
istio.networking.v1alpha3.Server.TLSOptions| 限定符和类型 | 字段和说明 |
|---|---|
private int |
bitField0_ |
private java.lang.Object |
caCertificates_ |
private com.google.protobuf.LazyStringList |
cipherSuites_ |
private java.lang.Object |
credentialName_ |
private boolean |
httpsRedirect_ |
private int |
maxProtocolVersion_ |
private int |
minProtocolVersion_ |
private int |
mode_ |
private java.lang.Object |
privateKey_ |
private java.lang.Object |
serverCertificate_ |
private com.google.protobuf.LazyStringList |
subjectAltNames_ |
private com.google.protobuf.LazyStringList |
verifyCertificateHash_ |
private com.google.protobuf.LazyStringList |
verifyCertificateSpki_ |
| 限定符 | 构造器和说明 |
|---|---|
private |
Builder() |
private |
Builder(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) |
| 限定符和类型 | 方法和说明 |
|---|---|
Server.TLSOptions.Builder |
addAllCipherSuites(java.lang.Iterable<java.lang.String> values)
Optional: If specified, only support the specified cipher list.
|
Server.TLSOptions.Builder |
addAllSubjectAltNames(java.lang.Iterable<java.lang.String> values)
A list of alternate names to verify the subject identity in the
certificate presented by the client.
|
Server.TLSOptions.Builder |
addAllVerifyCertificateHash(java.lang.Iterable<java.lang.String> values)
An optional list of hex-encoded SHA-256 hashes of the
authorized client certificates.
|
Server.TLSOptions.Builder |
addAllVerifyCertificateSpki(java.lang.Iterable<java.lang.String> values)
An optional list of base64-encoded SHA-256 hashes of the SKPIs of
authorized client certificates.
|
Server.TLSOptions.Builder |
addCipherSuites(java.lang.String value)
Optional: If specified, only support the specified cipher list.
|
Server.TLSOptions.Builder |
addCipherSuitesBytes(com.google.protobuf.ByteString value)
Optional: If specified, only support the specified cipher list.
|
Server.TLSOptions.Builder |
addRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field,
java.lang.Object value) |
Server.TLSOptions.Builder |
addSubjectAltNames(java.lang.String value)
A list of alternate names to verify the subject identity in the
certificate presented by the client.
|
Server.TLSOptions.Builder |
addSubjectAltNamesBytes(com.google.protobuf.ByteString value)
A list of alternate names to verify the subject identity in the
certificate presented by the client.
|
Server.TLSOptions.Builder |
addVerifyCertificateHash(java.lang.String value)
An optional list of hex-encoded SHA-256 hashes of the
authorized client certificates.
|
Server.TLSOptions.Builder |
addVerifyCertificateHashBytes(com.google.protobuf.ByteString value)
An optional list of hex-encoded SHA-256 hashes of the
authorized client certificates.
|
Server.TLSOptions.Builder |
addVerifyCertificateSpki(java.lang.String value)
An optional list of base64-encoded SHA-256 hashes of the SKPIs of
authorized client certificates.
|
Server.TLSOptions.Builder |
addVerifyCertificateSpkiBytes(com.google.protobuf.ByteString value)
An optional list of base64-encoded SHA-256 hashes of the SKPIs of
authorized client certificates.
|
Server.TLSOptions |
build() |
Server.TLSOptions |
buildPartial() |
Server.TLSOptions.Builder |
clear() |
Server.TLSOptions.Builder |
clearCaCertificates()
REQUIRED if mode is `MUTUAL`.
|
Server.TLSOptions.Builder |
clearCipherSuites()
Optional: If specified, only support the specified cipher list.
|
Server.TLSOptions.Builder |
clearCredentialName()
The credentialName stands for a unique identifier that can be used
to identify the serverCertificate and the privateKey.
|
Server.TLSOptions.Builder |
clearField(com.google.protobuf.Descriptors.FieldDescriptor field) |
Server.TLSOptions.Builder |
clearHttpsRedirect()
If set to true, the load balancer will send a 301 redirect for all
http connections, asking the clients to use HTTPS.
|
Server.TLSOptions.Builder |
clearMaxProtocolVersion()
Optional: Maximum TLS protocol version.
|
Server.TLSOptions.Builder |
clearMinProtocolVersion()
Optional: Minimum TLS protocol version.
|
Server.TLSOptions.Builder |
clearMode()
Optional: Indicates whether connections to this port should be
secured using TLS.
|
Server.TLSOptions.Builder |
clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) |
Server.TLSOptions.Builder |
clearPrivateKey()
REQUIRED if mode is `SIMPLE` or `MUTUAL`.
|
Server.TLSOptions.Builder |
clearServerCertificate()
REQUIRED if mode is `SIMPLE` or `MUTUAL`.
|
Server.TLSOptions.Builder |
clearSubjectAltNames()
A list of alternate names to verify the subject identity in the
certificate presented by the client.
|
Server.TLSOptions.Builder |
clearVerifyCertificateHash()
An optional list of hex-encoded SHA-256 hashes of the
authorized client certificates.
|
Server.TLSOptions.Builder |
clearVerifyCertificateSpki()
An optional list of base64-encoded SHA-256 hashes of the SKPIs of
authorized client certificates.
|
Server.TLSOptions.Builder |
clone() |
private void |
ensureCipherSuitesIsMutable() |
private void |
ensureSubjectAltNamesIsMutable() |
private void |
ensureVerifyCertificateHashIsMutable() |
private void |
ensureVerifyCertificateSpkiIsMutable() |
java.lang.String |
getCaCertificates()
REQUIRED if mode is `MUTUAL`.
|
com.google.protobuf.ByteString |
getCaCertificatesBytes()
REQUIRED if mode is `MUTUAL`.
|
java.lang.String |
getCipherSuites(int index)
Optional: If specified, only support the specified cipher list.
|
com.google.protobuf.ByteString |
getCipherSuitesBytes(int index)
Optional: If specified, only support the specified cipher list.
|
int |
getCipherSuitesCount()
Optional: If specified, only support the specified cipher list.
|
com.google.protobuf.ProtocolStringList |
getCipherSuitesList()
Optional: If specified, only support the specified cipher list.
|
java.lang.String |
getCredentialName()
The credentialName stands for a unique identifier that can be used
to identify the serverCertificate and the privateKey.
|
com.google.protobuf.ByteString |
getCredentialNameBytes()
The credentialName stands for a unique identifier that can be used
to identify the serverCertificate and the privateKey.
|
Server.TLSOptions |
getDefaultInstanceForType() |
static com.google.protobuf.Descriptors.Descriptor |
getDescriptor() |
com.google.protobuf.Descriptors.Descriptor |
getDescriptorForType() |
boolean |
getHttpsRedirect()
If set to true, the load balancer will send a 301 redirect for all
http connections, asking the clients to use HTTPS.
|
Server.TLSOptions.TLSProtocol |
getMaxProtocolVersion()
Optional: Maximum TLS protocol version.
|
int |
getMaxProtocolVersionValue()
Optional: Maximum TLS protocol version.
|
Server.TLSOptions.TLSProtocol |
getMinProtocolVersion()
Optional: Minimum TLS protocol version.
|
int |
getMinProtocolVersionValue()
Optional: Minimum TLS protocol version.
|
Server.TLSOptions.TLSmode |
getMode()
Optional: Indicates whether connections to this port should be
secured using TLS.
|
int |
getModeValue()
Optional: Indicates whether connections to this port should be
secured using TLS.
|
java.lang.String |
getPrivateKey()
REQUIRED if mode is `SIMPLE` or `MUTUAL`.
|
com.google.protobuf.ByteString |
getPrivateKeyBytes()
REQUIRED if mode is `SIMPLE` or `MUTUAL`.
|
java.lang.String |
getServerCertificate()
REQUIRED if mode is `SIMPLE` or `MUTUAL`.
|
com.google.protobuf.ByteString |
getServerCertificateBytes()
REQUIRED if mode is `SIMPLE` or `MUTUAL`.
|
java.lang.String |
getSubjectAltNames(int index)
A list of alternate names to verify the subject identity in the
certificate presented by the client.
|
com.google.protobuf.ByteString |
getSubjectAltNamesBytes(int index)
A list of alternate names to verify the subject identity in the
certificate presented by the client.
|
int |
getSubjectAltNamesCount()
A list of alternate names to verify the subject identity in the
certificate presented by the client.
|
com.google.protobuf.ProtocolStringList |
getSubjectAltNamesList()
A list of alternate names to verify the subject identity in the
certificate presented by the client.
|
java.lang.String |
getVerifyCertificateHash(int index)
An optional list of hex-encoded SHA-256 hashes of the
authorized client certificates.
|
com.google.protobuf.ByteString |
getVerifyCertificateHashBytes(int index)
An optional list of hex-encoded SHA-256 hashes of the
authorized client certificates.
|
int |
getVerifyCertificateHashCount()
An optional list of hex-encoded SHA-256 hashes of the
authorized client certificates.
|
com.google.protobuf.ProtocolStringList |
getVerifyCertificateHashList()
An optional list of hex-encoded SHA-256 hashes of the
authorized client certificates.
|
java.lang.String |
getVerifyCertificateSpki(int index)
An optional list of base64-encoded SHA-256 hashes of the SKPIs of
authorized client certificates.
|
com.google.protobuf.ByteString |
getVerifyCertificateSpkiBytes(int index)
An optional list of base64-encoded SHA-256 hashes of the SKPIs of
authorized client certificates.
|
int |
getVerifyCertificateSpkiCount()
An optional list of base64-encoded SHA-256 hashes of the SKPIs of
authorized client certificates.
|
com.google.protobuf.ProtocolStringList |
getVerifyCertificateSpkiList()
An optional list of base64-encoded SHA-256 hashes of the SKPIs of
authorized client certificates.
|
protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable |
internalGetFieldAccessorTable() |
boolean |
isInitialized() |
private void |
maybeForceBuilderInitialization() |
Server.TLSOptions.Builder |
mergeFrom(com.google.protobuf.CodedInputStream input,
com.google.protobuf.ExtensionRegistryLite extensionRegistry) |
Server.TLSOptions.Builder |
mergeFrom(com.google.protobuf.Message other) |
Server.TLSOptions.Builder |
mergeFrom(Server.TLSOptions other) |
Server.TLSOptions.Builder |
mergeUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields) |
Server.TLSOptions.Builder |
setCaCertificates(java.lang.String value)
REQUIRED if mode is `MUTUAL`.
|
Server.TLSOptions.Builder |
setCaCertificatesBytes(com.google.protobuf.ByteString value)
REQUIRED if mode is `MUTUAL`.
|
Server.TLSOptions.Builder |
setCipherSuites(int index,
java.lang.String value)
Optional: If specified, only support the specified cipher list.
|
Server.TLSOptions.Builder |
setCredentialName(java.lang.String value)
The credentialName stands for a unique identifier that can be used
to identify the serverCertificate and the privateKey.
|
Server.TLSOptions.Builder |
setCredentialNameBytes(com.google.protobuf.ByteString value)
The credentialName stands for a unique identifier that can be used
to identify the serverCertificate and the privateKey.
|
Server.TLSOptions.Builder |
setField(com.google.protobuf.Descriptors.FieldDescriptor field,
java.lang.Object value) |
Server.TLSOptions.Builder |
setHttpsRedirect(boolean value)
If set to true, the load balancer will send a 301 redirect for all
http connections, asking the clients to use HTTPS.
|
Server.TLSOptions.Builder |
setMaxProtocolVersion(Server.TLSOptions.TLSProtocol value)
Optional: Maximum TLS protocol version.
|
Server.TLSOptions.Builder |
setMaxProtocolVersionValue(int value)
Optional: Maximum TLS protocol version.
|
Server.TLSOptions.Builder |
setMinProtocolVersion(Server.TLSOptions.TLSProtocol value)
Optional: Minimum TLS protocol version.
|
Server.TLSOptions.Builder |
setMinProtocolVersionValue(int value)
Optional: Minimum TLS protocol version.
|
Server.TLSOptions.Builder |
setMode(Server.TLSOptions.TLSmode value)
Optional: Indicates whether connections to this port should be
secured using TLS.
|
Server.TLSOptions.Builder |
setModeValue(int value)
Optional: Indicates whether connections to this port should be
secured using TLS.
|
Server.TLSOptions.Builder |
setPrivateKey(java.lang.String value)
REQUIRED if mode is `SIMPLE` or `MUTUAL`.
|
Server.TLSOptions.Builder |
setPrivateKeyBytes(com.google.protobuf.ByteString value)
REQUIRED if mode is `SIMPLE` or `MUTUAL`.
|
Server.TLSOptions.Builder |
setRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field,
int index,
java.lang.Object value) |
Server.TLSOptions.Builder |
setServerCertificate(java.lang.String value)
REQUIRED if mode is `SIMPLE` or `MUTUAL`.
|
Server.TLSOptions.Builder |
setServerCertificateBytes(com.google.protobuf.ByteString value)
REQUIRED if mode is `SIMPLE` or `MUTUAL`.
|
Server.TLSOptions.Builder |
setSubjectAltNames(int index,
java.lang.String value)
A list of alternate names to verify the subject identity in the
certificate presented by the client.
|
Server.TLSOptions.Builder |
setUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields) |
Server.TLSOptions.Builder |
setVerifyCertificateHash(int index,
java.lang.String value)
An optional list of hex-encoded SHA-256 hashes of the
authorized client certificates.
|
Server.TLSOptions.Builder |
setVerifyCertificateSpki(int index,
java.lang.String value)
An optional list of base64-encoded SHA-256 hashes of the SKPIs of
authorized client certificates.
|
getAllFields, getField, getFieldBuilder, getOneofFieldDescriptor, getParentForChildren, getRepeatedField, getRepeatedFieldBuilder, getRepeatedFieldCount, getUnknownFields, hasField, hasOneof, internalGetMapField, internalGetMutableMapField, isClean, markClean, newBuilderForField, onBuilt, onChanged, setUnknownFieldsProto3findInitializationErrors, getInitializationErrorString, internalMergeFrom, mergeDelimitedFrom, mergeDelimitedFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, newUninitializedMessageException, toStringaddAll, addAll, mergeFrom, newUninitializedMessageExceptionprivate int bitField0_
private boolean httpsRedirect_
private int mode_
private java.lang.Object serverCertificate_
private java.lang.Object privateKey_
private java.lang.Object caCertificates_
private java.lang.Object credentialName_
private com.google.protobuf.LazyStringList subjectAltNames_
private com.google.protobuf.LazyStringList verifyCertificateSpki_
private com.google.protobuf.LazyStringList verifyCertificateHash_
private int minProtocolVersion_
private int maxProtocolVersion_
private com.google.protobuf.LazyStringList cipherSuites_
private Builder()
private Builder(com.google.protobuf.GeneratedMessageV3.BuilderParent parent)
public static final com.google.protobuf.Descriptors.Descriptor getDescriptor()
protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()
internalGetFieldAccessorTable 在类中 com.google.protobuf.GeneratedMessageV3.Builder<Server.TLSOptions.Builder>private void maybeForceBuilderInitialization()
public Server.TLSOptions.Builder clear()
clear 在接口中 com.google.protobuf.Message.Builderclear 在接口中 com.google.protobuf.MessageLite.Builderclear 在类中 com.google.protobuf.GeneratedMessageV3.Builder<Server.TLSOptions.Builder>public com.google.protobuf.Descriptors.Descriptor getDescriptorForType()
getDescriptorForType 在接口中 com.google.protobuf.Message.BuildergetDescriptorForType 在接口中 com.google.protobuf.MessageOrBuildergetDescriptorForType 在类中 com.google.protobuf.GeneratedMessageV3.Builder<Server.TLSOptions.Builder>public Server.TLSOptions getDefaultInstanceForType()
getDefaultInstanceForType 在接口中 com.google.protobuf.MessageLiteOrBuildergetDefaultInstanceForType 在接口中 com.google.protobuf.MessageOrBuilderpublic Server.TLSOptions build()
build 在接口中 com.google.protobuf.Message.Builderbuild 在接口中 com.google.protobuf.MessageLite.Builderpublic Server.TLSOptions buildPartial()
buildPartial 在接口中 com.google.protobuf.Message.BuilderbuildPartial 在接口中 com.google.protobuf.MessageLite.Builderpublic Server.TLSOptions.Builder clone()
clone 在接口中 com.google.protobuf.Message.Builderclone 在接口中 com.google.protobuf.MessageLite.Builderclone 在类中 com.google.protobuf.GeneratedMessageV3.Builder<Server.TLSOptions.Builder>public Server.TLSOptions.Builder setField(com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value)
setField 在接口中 com.google.protobuf.Message.BuildersetField 在类中 com.google.protobuf.GeneratedMessageV3.Builder<Server.TLSOptions.Builder>public Server.TLSOptions.Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field)
clearField 在接口中 com.google.protobuf.Message.BuilderclearField 在类中 com.google.protobuf.GeneratedMessageV3.Builder<Server.TLSOptions.Builder>public Server.TLSOptions.Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof)
clearOneof 在接口中 com.google.protobuf.Message.BuilderclearOneof 在类中 com.google.protobuf.GeneratedMessageV3.Builder<Server.TLSOptions.Builder>public Server.TLSOptions.Builder setRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field, int index, java.lang.Object value)
setRepeatedField 在接口中 com.google.protobuf.Message.BuildersetRepeatedField 在类中 com.google.protobuf.GeneratedMessageV3.Builder<Server.TLSOptions.Builder>public Server.TLSOptions.Builder addRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field, java.lang.Object value)
addRepeatedField 在接口中 com.google.protobuf.Message.BuilderaddRepeatedField 在类中 com.google.protobuf.GeneratedMessageV3.Builder<Server.TLSOptions.Builder>public Server.TLSOptions.Builder mergeFrom(com.google.protobuf.Message other)
mergeFrom 在接口中 com.google.protobuf.Message.BuildermergeFrom 在类中 com.google.protobuf.AbstractMessage.Builder<Server.TLSOptions.Builder>public Server.TLSOptions.Builder mergeFrom(Server.TLSOptions other)
public final boolean isInitialized()
isInitialized 在接口中 com.google.protobuf.MessageLiteOrBuilderisInitialized 在类中 com.google.protobuf.GeneratedMessageV3.Builder<Server.TLSOptions.Builder>public Server.TLSOptions.Builder mergeFrom(com.google.protobuf.CodedInputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws java.io.IOException
mergeFrom 在接口中 com.google.protobuf.Message.BuildermergeFrom 在接口中 com.google.protobuf.MessageLite.BuildermergeFrom 在类中 com.google.protobuf.AbstractMessage.Builder<Server.TLSOptions.Builder>java.io.IOExceptionpublic boolean getHttpsRedirect()
If set to true, the load balancer will send a 301 redirect for all http connections, asking the clients to use HTTPS.
bool https_redirect = 1;getHttpsRedirect 在接口中 Server.TLSOptionsOrBuilderpublic Server.TLSOptions.Builder setHttpsRedirect(boolean value)
If set to true, the load balancer will send a 301 redirect for all http connections, asking the clients to use HTTPS.
bool https_redirect = 1;value - The httpsRedirect to set.public Server.TLSOptions.Builder clearHttpsRedirect()
If set to true, the load balancer will send a 301 redirect for all http connections, asking the clients to use HTTPS.
bool https_redirect = 1;public int getModeValue()
Optional: Indicates whether connections to this port should be secured using TLS. The value of this field determines how TLS is enforced.
.istio.networking.v1alpha3.Server.TLSOptions.TLSmode mode = 2;getModeValue 在接口中 Server.TLSOptionsOrBuilderpublic Server.TLSOptions.Builder setModeValue(int value)
Optional: Indicates whether connections to this port should be secured using TLS. The value of this field determines how TLS is enforced.
.istio.networking.v1alpha3.Server.TLSOptions.TLSmode mode = 2;value - The enum numeric value on the wire for mode to set.public Server.TLSOptions.TLSmode getMode()
Optional: Indicates whether connections to this port should be secured using TLS. The value of this field determines how TLS is enforced.
.istio.networking.v1alpha3.Server.TLSOptions.TLSmode mode = 2;getMode 在接口中 Server.TLSOptionsOrBuilderpublic Server.TLSOptions.Builder setMode(Server.TLSOptions.TLSmode value)
Optional: Indicates whether connections to this port should be secured using TLS. The value of this field determines how TLS is enforced.
.istio.networking.v1alpha3.Server.TLSOptions.TLSmode mode = 2;value - The mode to set.public Server.TLSOptions.Builder clearMode()
Optional: Indicates whether connections to this port should be secured using TLS. The value of this field determines how TLS is enforced.
.istio.networking.v1alpha3.Server.TLSOptions.TLSmode mode = 2;public java.lang.String getServerCertificate()
REQUIRED if mode is `SIMPLE` or `MUTUAL`. The path to the file holding the server-side TLS certificate to use.
string server_certificate = 3;getServerCertificate 在接口中 Server.TLSOptionsOrBuilderpublic com.google.protobuf.ByteString getServerCertificateBytes()
REQUIRED if mode is `SIMPLE` or `MUTUAL`. The path to the file holding the server-side TLS certificate to use.
string server_certificate = 3;getServerCertificateBytes 在接口中 Server.TLSOptionsOrBuilderpublic Server.TLSOptions.Builder setServerCertificate(java.lang.String value)
REQUIRED if mode is `SIMPLE` or `MUTUAL`. The path to the file holding the server-side TLS certificate to use.
string server_certificate = 3;value - The serverCertificate to set.public Server.TLSOptions.Builder clearServerCertificate()
REQUIRED if mode is `SIMPLE` or `MUTUAL`. The path to the file holding the server-side TLS certificate to use.
string server_certificate = 3;public Server.TLSOptions.Builder setServerCertificateBytes(com.google.protobuf.ByteString value)
REQUIRED if mode is `SIMPLE` or `MUTUAL`. The path to the file holding the server-side TLS certificate to use.
string server_certificate = 3;value - The bytes for serverCertificate to set.public java.lang.String getPrivateKey()
REQUIRED if mode is `SIMPLE` or `MUTUAL`. The path to the file holding the server's private key.
string private_key = 4;getPrivateKey 在接口中 Server.TLSOptionsOrBuilderpublic com.google.protobuf.ByteString getPrivateKeyBytes()
REQUIRED if mode is `SIMPLE` or `MUTUAL`. The path to the file holding the server's private key.
string private_key = 4;getPrivateKeyBytes 在接口中 Server.TLSOptionsOrBuilderpublic Server.TLSOptions.Builder setPrivateKey(java.lang.String value)
REQUIRED if mode is `SIMPLE` or `MUTUAL`. The path to the file holding the server's private key.
string private_key = 4;value - The privateKey to set.public Server.TLSOptions.Builder clearPrivateKey()
REQUIRED if mode is `SIMPLE` or `MUTUAL`. The path to the file holding the server's private key.
string private_key = 4;public Server.TLSOptions.Builder setPrivateKeyBytes(com.google.protobuf.ByteString value)
REQUIRED if mode is `SIMPLE` or `MUTUAL`. The path to the file holding the server's private key.
string private_key = 4;value - The bytes for privateKey to set.public java.lang.String getCaCertificates()
REQUIRED if mode is `MUTUAL`. The path to a file containing certificate authority certificates to use in verifying a presented client side certificate.
string ca_certificates = 5;getCaCertificates 在接口中 Server.TLSOptionsOrBuilderpublic com.google.protobuf.ByteString getCaCertificatesBytes()
REQUIRED if mode is `MUTUAL`. The path to a file containing certificate authority certificates to use in verifying a presented client side certificate.
string ca_certificates = 5;getCaCertificatesBytes 在接口中 Server.TLSOptionsOrBuilderpublic Server.TLSOptions.Builder setCaCertificates(java.lang.String value)
REQUIRED if mode is `MUTUAL`. The path to a file containing certificate authority certificates to use in verifying a presented client side certificate.
string ca_certificates = 5;value - The caCertificates to set.public Server.TLSOptions.Builder clearCaCertificates()
REQUIRED if mode is `MUTUAL`. The path to a file containing certificate authority certificates to use in verifying a presented client side certificate.
string ca_certificates = 5;public Server.TLSOptions.Builder setCaCertificatesBytes(com.google.protobuf.ByteString value)
REQUIRED if mode is `MUTUAL`. The path to a file containing certificate authority certificates to use in verifying a presented client side certificate.
string ca_certificates = 5;value - The bytes for caCertificates to set.public java.lang.String getCredentialName()
The credentialName stands for a unique identifier that can be used to identify the serverCertificate and the privateKey. The credentialName appended with suffix "-cacert" is used to identify the CaCertificates associated with this server. Gateway workloads capable of fetching credentials from a remote credential store such as Kubernetes secrets, will be configured to retrieve the serverCertificate and the privateKey using credentialName, instead of using the file system paths specified above. If using mutual TLS, gateway workload instances will retrieve the CaCertificates using credentialName-cacert. The semantics of the name are platform dependent. In Kubernetes, the default Istio supplied credential server expects the credentialName to match the name of the Kubernetes secret that holds the server certificate, the private key, and the CA certificate (if using mutual TLS). Set the `ISTIO_META_USER_SDS` metadata variable in the gateway's proxy to enable the dynamic credential fetching feature.
string credential_name = 10;getCredentialName 在接口中 Server.TLSOptionsOrBuilderpublic com.google.protobuf.ByteString getCredentialNameBytes()
The credentialName stands for a unique identifier that can be used to identify the serverCertificate and the privateKey. The credentialName appended with suffix "-cacert" is used to identify the CaCertificates associated with this server. Gateway workloads capable of fetching credentials from a remote credential store such as Kubernetes secrets, will be configured to retrieve the serverCertificate and the privateKey using credentialName, instead of using the file system paths specified above. If using mutual TLS, gateway workload instances will retrieve the CaCertificates using credentialName-cacert. The semantics of the name are platform dependent. In Kubernetes, the default Istio supplied credential server expects the credentialName to match the name of the Kubernetes secret that holds the server certificate, the private key, and the CA certificate (if using mutual TLS). Set the `ISTIO_META_USER_SDS` metadata variable in the gateway's proxy to enable the dynamic credential fetching feature.
string credential_name = 10;getCredentialNameBytes 在接口中 Server.TLSOptionsOrBuilderpublic Server.TLSOptions.Builder setCredentialName(java.lang.String value)
The credentialName stands for a unique identifier that can be used to identify the serverCertificate and the privateKey. The credentialName appended with suffix "-cacert" is used to identify the CaCertificates associated with this server. Gateway workloads capable of fetching credentials from a remote credential store such as Kubernetes secrets, will be configured to retrieve the serverCertificate and the privateKey using credentialName, instead of using the file system paths specified above. If using mutual TLS, gateway workload instances will retrieve the CaCertificates using credentialName-cacert. The semantics of the name are platform dependent. In Kubernetes, the default Istio supplied credential server expects the credentialName to match the name of the Kubernetes secret that holds the server certificate, the private key, and the CA certificate (if using mutual TLS). Set the `ISTIO_META_USER_SDS` metadata variable in the gateway's proxy to enable the dynamic credential fetching feature.
string credential_name = 10;value - The credentialName to set.public Server.TLSOptions.Builder clearCredentialName()
The credentialName stands for a unique identifier that can be used to identify the serverCertificate and the privateKey. The credentialName appended with suffix "-cacert" is used to identify the CaCertificates associated with this server. Gateway workloads capable of fetching credentials from a remote credential store such as Kubernetes secrets, will be configured to retrieve the serverCertificate and the privateKey using credentialName, instead of using the file system paths specified above. If using mutual TLS, gateway workload instances will retrieve the CaCertificates using credentialName-cacert. The semantics of the name are platform dependent. In Kubernetes, the default Istio supplied credential server expects the credentialName to match the name of the Kubernetes secret that holds the server certificate, the private key, and the CA certificate (if using mutual TLS). Set the `ISTIO_META_USER_SDS` metadata variable in the gateway's proxy to enable the dynamic credential fetching feature.
string credential_name = 10;public Server.TLSOptions.Builder setCredentialNameBytes(com.google.protobuf.ByteString value)
The credentialName stands for a unique identifier that can be used to identify the serverCertificate and the privateKey. The credentialName appended with suffix "-cacert" is used to identify the CaCertificates associated with this server. Gateway workloads capable of fetching credentials from a remote credential store such as Kubernetes secrets, will be configured to retrieve the serverCertificate and the privateKey using credentialName, instead of using the file system paths specified above. If using mutual TLS, gateway workload instances will retrieve the CaCertificates using credentialName-cacert. The semantics of the name are platform dependent. In Kubernetes, the default Istio supplied credential server expects the credentialName to match the name of the Kubernetes secret that holds the server certificate, the private key, and the CA certificate (if using mutual TLS). Set the `ISTIO_META_USER_SDS` metadata variable in the gateway's proxy to enable the dynamic credential fetching feature.
string credential_name = 10;value - The bytes for credentialName to set.private void ensureSubjectAltNamesIsMutable()
public com.google.protobuf.ProtocolStringList getSubjectAltNamesList()
A list of alternate names to verify the subject identity in the certificate presented by the client.
repeated string subject_alt_names = 6;getSubjectAltNamesList 在接口中 Server.TLSOptionsOrBuilderpublic int getSubjectAltNamesCount()
A list of alternate names to verify the subject identity in the certificate presented by the client.
repeated string subject_alt_names = 6;getSubjectAltNamesCount 在接口中 Server.TLSOptionsOrBuilderpublic java.lang.String getSubjectAltNames(int index)
A list of alternate names to verify the subject identity in the certificate presented by the client.
repeated string subject_alt_names = 6;getSubjectAltNames 在接口中 Server.TLSOptionsOrBuilderindex - The index of the element to return.public com.google.protobuf.ByteString getSubjectAltNamesBytes(int index)
A list of alternate names to verify the subject identity in the certificate presented by the client.
repeated string subject_alt_names = 6;getSubjectAltNamesBytes 在接口中 Server.TLSOptionsOrBuilderindex - The index of the value to return.public Server.TLSOptions.Builder setSubjectAltNames(int index, java.lang.String value)
A list of alternate names to verify the subject identity in the certificate presented by the client.
repeated string subject_alt_names = 6;index - The index to set the value at.value - The subjectAltNames to set.public Server.TLSOptions.Builder addSubjectAltNames(java.lang.String value)
A list of alternate names to verify the subject identity in the certificate presented by the client.
repeated string subject_alt_names = 6;value - The subjectAltNames to add.public Server.TLSOptions.Builder addAllSubjectAltNames(java.lang.Iterable<java.lang.String> values)
A list of alternate names to verify the subject identity in the certificate presented by the client.
repeated string subject_alt_names = 6;values - The subjectAltNames to add.public Server.TLSOptions.Builder clearSubjectAltNames()
A list of alternate names to verify the subject identity in the certificate presented by the client.
repeated string subject_alt_names = 6;public Server.TLSOptions.Builder addSubjectAltNamesBytes(com.google.protobuf.ByteString value)
A list of alternate names to verify the subject identity in the certificate presented by the client.
repeated string subject_alt_names = 6;value - The bytes of the subjectAltNames to add.private void ensureVerifyCertificateSpkiIsMutable()
public com.google.protobuf.ProtocolStringList getVerifyCertificateSpkiList()
An optional list of base64-encoded SHA-256 hashes of the SKPIs of authorized client certificates. Note: When both verify_certificate_hash and verify_certificate_spki are specified, a hash matching either value will result in the certificate being accepted.
repeated string verify_certificate_spki = 11;getVerifyCertificateSpkiList 在接口中 Server.TLSOptionsOrBuilderpublic int getVerifyCertificateSpkiCount()
An optional list of base64-encoded SHA-256 hashes of the SKPIs of authorized client certificates. Note: When both verify_certificate_hash and verify_certificate_spki are specified, a hash matching either value will result in the certificate being accepted.
repeated string verify_certificate_spki = 11;getVerifyCertificateSpkiCount 在接口中 Server.TLSOptionsOrBuilderpublic java.lang.String getVerifyCertificateSpki(int index)
An optional list of base64-encoded SHA-256 hashes of the SKPIs of authorized client certificates. Note: When both verify_certificate_hash and verify_certificate_spki are specified, a hash matching either value will result in the certificate being accepted.
repeated string verify_certificate_spki = 11;getVerifyCertificateSpki 在接口中 Server.TLSOptionsOrBuilderindex - The index of the element to return.public com.google.protobuf.ByteString getVerifyCertificateSpkiBytes(int index)
An optional list of base64-encoded SHA-256 hashes of the SKPIs of authorized client certificates. Note: When both verify_certificate_hash and verify_certificate_spki are specified, a hash matching either value will result in the certificate being accepted.
repeated string verify_certificate_spki = 11;getVerifyCertificateSpkiBytes 在接口中 Server.TLSOptionsOrBuilderindex - The index of the value to return.public Server.TLSOptions.Builder setVerifyCertificateSpki(int index, java.lang.String value)
An optional list of base64-encoded SHA-256 hashes of the SKPIs of authorized client certificates. Note: When both verify_certificate_hash and verify_certificate_spki are specified, a hash matching either value will result in the certificate being accepted.
repeated string verify_certificate_spki = 11;index - The index to set the value at.value - The verifyCertificateSpki to set.public Server.TLSOptions.Builder addVerifyCertificateSpki(java.lang.String value)
An optional list of base64-encoded SHA-256 hashes of the SKPIs of authorized client certificates. Note: When both verify_certificate_hash and verify_certificate_spki are specified, a hash matching either value will result in the certificate being accepted.
repeated string verify_certificate_spki = 11;value - The verifyCertificateSpki to add.public Server.TLSOptions.Builder addAllVerifyCertificateSpki(java.lang.Iterable<java.lang.String> values)
An optional list of base64-encoded SHA-256 hashes of the SKPIs of authorized client certificates. Note: When both verify_certificate_hash and verify_certificate_spki are specified, a hash matching either value will result in the certificate being accepted.
repeated string verify_certificate_spki = 11;values - The verifyCertificateSpki to add.public Server.TLSOptions.Builder clearVerifyCertificateSpki()
An optional list of base64-encoded SHA-256 hashes of the SKPIs of authorized client certificates. Note: When both verify_certificate_hash and verify_certificate_spki are specified, a hash matching either value will result in the certificate being accepted.
repeated string verify_certificate_spki = 11;public Server.TLSOptions.Builder addVerifyCertificateSpkiBytes(com.google.protobuf.ByteString value)
An optional list of base64-encoded SHA-256 hashes of the SKPIs of authorized client certificates. Note: When both verify_certificate_hash and verify_certificate_spki are specified, a hash matching either value will result in the certificate being accepted.
repeated string verify_certificate_spki = 11;value - The bytes of the verifyCertificateSpki to add.private void ensureVerifyCertificateHashIsMutable()
public com.google.protobuf.ProtocolStringList getVerifyCertificateHashList()
An optional list of hex-encoded SHA-256 hashes of the authorized client certificates. Both simple and colon separated formats are acceptable. Note: When both verify_certificate_hash and verify_certificate_spki are specified, a hash matching either value will result in the certificate being accepted.
repeated string verify_certificate_hash = 12;getVerifyCertificateHashList 在接口中 Server.TLSOptionsOrBuilderpublic int getVerifyCertificateHashCount()
An optional list of hex-encoded SHA-256 hashes of the authorized client certificates. Both simple and colon separated formats are acceptable. Note: When both verify_certificate_hash and verify_certificate_spki are specified, a hash matching either value will result in the certificate being accepted.
repeated string verify_certificate_hash = 12;getVerifyCertificateHashCount 在接口中 Server.TLSOptionsOrBuilderpublic java.lang.String getVerifyCertificateHash(int index)
An optional list of hex-encoded SHA-256 hashes of the authorized client certificates. Both simple and colon separated formats are acceptable. Note: When both verify_certificate_hash and verify_certificate_spki are specified, a hash matching either value will result in the certificate being accepted.
repeated string verify_certificate_hash = 12;getVerifyCertificateHash 在接口中 Server.TLSOptionsOrBuilderindex - The index of the element to return.public com.google.protobuf.ByteString getVerifyCertificateHashBytes(int index)
An optional list of hex-encoded SHA-256 hashes of the authorized client certificates. Both simple and colon separated formats are acceptable. Note: When both verify_certificate_hash and verify_certificate_spki are specified, a hash matching either value will result in the certificate being accepted.
repeated string verify_certificate_hash = 12;getVerifyCertificateHashBytes 在接口中 Server.TLSOptionsOrBuilderindex - The index of the value to return.public Server.TLSOptions.Builder setVerifyCertificateHash(int index, java.lang.String value)
An optional list of hex-encoded SHA-256 hashes of the authorized client certificates. Both simple and colon separated formats are acceptable. Note: When both verify_certificate_hash and verify_certificate_spki are specified, a hash matching either value will result in the certificate being accepted.
repeated string verify_certificate_hash = 12;index - The index to set the value at.value - The verifyCertificateHash to set.public Server.TLSOptions.Builder addVerifyCertificateHash(java.lang.String value)
An optional list of hex-encoded SHA-256 hashes of the authorized client certificates. Both simple and colon separated formats are acceptable. Note: When both verify_certificate_hash and verify_certificate_spki are specified, a hash matching either value will result in the certificate being accepted.
repeated string verify_certificate_hash = 12;value - The verifyCertificateHash to add.public Server.TLSOptions.Builder addAllVerifyCertificateHash(java.lang.Iterable<java.lang.String> values)
An optional list of hex-encoded SHA-256 hashes of the authorized client certificates. Both simple and colon separated formats are acceptable. Note: When both verify_certificate_hash and verify_certificate_spki are specified, a hash matching either value will result in the certificate being accepted.
repeated string verify_certificate_hash = 12;values - The verifyCertificateHash to add.public Server.TLSOptions.Builder clearVerifyCertificateHash()
An optional list of hex-encoded SHA-256 hashes of the authorized client certificates. Both simple and colon separated formats are acceptable. Note: When both verify_certificate_hash and verify_certificate_spki are specified, a hash matching either value will result in the certificate being accepted.
repeated string verify_certificate_hash = 12;public Server.TLSOptions.Builder addVerifyCertificateHashBytes(com.google.protobuf.ByteString value)
An optional list of hex-encoded SHA-256 hashes of the authorized client certificates. Both simple and colon separated formats are acceptable. Note: When both verify_certificate_hash and verify_certificate_spki are specified, a hash matching either value will result in the certificate being accepted.
repeated string verify_certificate_hash = 12;value - The bytes of the verifyCertificateHash to add.public int getMinProtocolVersionValue()
Optional: Minimum TLS protocol version.
.istio.networking.v1alpha3.Server.TLSOptions.TLSProtocol min_protocol_version = 7;getMinProtocolVersionValue 在接口中 Server.TLSOptionsOrBuilderpublic Server.TLSOptions.Builder setMinProtocolVersionValue(int value)
Optional: Minimum TLS protocol version.
.istio.networking.v1alpha3.Server.TLSOptions.TLSProtocol min_protocol_version = 7;value - The enum numeric value on the wire for minProtocolVersion to set.public Server.TLSOptions.TLSProtocol getMinProtocolVersion()
Optional: Minimum TLS protocol version.
.istio.networking.v1alpha3.Server.TLSOptions.TLSProtocol min_protocol_version = 7;getMinProtocolVersion 在接口中 Server.TLSOptionsOrBuilderpublic Server.TLSOptions.Builder setMinProtocolVersion(Server.TLSOptions.TLSProtocol value)
Optional: Minimum TLS protocol version.
.istio.networking.v1alpha3.Server.TLSOptions.TLSProtocol min_protocol_version = 7;value - The minProtocolVersion to set.public Server.TLSOptions.Builder clearMinProtocolVersion()
Optional: Minimum TLS protocol version.
.istio.networking.v1alpha3.Server.TLSOptions.TLSProtocol min_protocol_version = 7;public int getMaxProtocolVersionValue()
Optional: Maximum TLS protocol version.
.istio.networking.v1alpha3.Server.TLSOptions.TLSProtocol max_protocol_version = 8;getMaxProtocolVersionValue 在接口中 Server.TLSOptionsOrBuilderpublic Server.TLSOptions.Builder setMaxProtocolVersionValue(int value)
Optional: Maximum TLS protocol version.
.istio.networking.v1alpha3.Server.TLSOptions.TLSProtocol max_protocol_version = 8;value - The enum numeric value on the wire for maxProtocolVersion to set.public Server.TLSOptions.TLSProtocol getMaxProtocolVersion()
Optional: Maximum TLS protocol version.
.istio.networking.v1alpha3.Server.TLSOptions.TLSProtocol max_protocol_version = 8;getMaxProtocolVersion 在接口中 Server.TLSOptionsOrBuilderpublic Server.TLSOptions.Builder setMaxProtocolVersion(Server.TLSOptions.TLSProtocol value)
Optional: Maximum TLS protocol version.
.istio.networking.v1alpha3.Server.TLSOptions.TLSProtocol max_protocol_version = 8;value - The maxProtocolVersion to set.public Server.TLSOptions.Builder clearMaxProtocolVersion()
Optional: Maximum TLS protocol version.
.istio.networking.v1alpha3.Server.TLSOptions.TLSProtocol max_protocol_version = 8;private void ensureCipherSuitesIsMutable()
public com.google.protobuf.ProtocolStringList getCipherSuitesList()
Optional: If specified, only support the specified cipher list. Otherwise default to the default cipher list supported by Envoy.
repeated string cipher_suites = 9;getCipherSuitesList 在接口中 Server.TLSOptionsOrBuilderpublic int getCipherSuitesCount()
Optional: If specified, only support the specified cipher list. Otherwise default to the default cipher list supported by Envoy.
repeated string cipher_suites = 9;getCipherSuitesCount 在接口中 Server.TLSOptionsOrBuilderpublic java.lang.String getCipherSuites(int index)
Optional: If specified, only support the specified cipher list. Otherwise default to the default cipher list supported by Envoy.
repeated string cipher_suites = 9;getCipherSuites 在接口中 Server.TLSOptionsOrBuilderindex - The index of the element to return.public com.google.protobuf.ByteString getCipherSuitesBytes(int index)
Optional: If specified, only support the specified cipher list. Otherwise default to the default cipher list supported by Envoy.
repeated string cipher_suites = 9;getCipherSuitesBytes 在接口中 Server.TLSOptionsOrBuilderindex - The index of the value to return.public Server.TLSOptions.Builder setCipherSuites(int index, java.lang.String value)
Optional: If specified, only support the specified cipher list. Otherwise default to the default cipher list supported by Envoy.
repeated string cipher_suites = 9;index - The index to set the value at.value - The cipherSuites to set.public Server.TLSOptions.Builder addCipherSuites(java.lang.String value)
Optional: If specified, only support the specified cipher list. Otherwise default to the default cipher list supported by Envoy.
repeated string cipher_suites = 9;value - The cipherSuites to add.public Server.TLSOptions.Builder addAllCipherSuites(java.lang.Iterable<java.lang.String> values)
Optional: If specified, only support the specified cipher list. Otherwise default to the default cipher list supported by Envoy.
repeated string cipher_suites = 9;values - The cipherSuites to add.public Server.TLSOptions.Builder clearCipherSuites()
Optional: If specified, only support the specified cipher list. Otherwise default to the default cipher list supported by Envoy.
repeated string cipher_suites = 9;public Server.TLSOptions.Builder addCipherSuitesBytes(com.google.protobuf.ByteString value)
Optional: If specified, only support the specified cipher list. Otherwise default to the default cipher list supported by Envoy.
repeated string cipher_suites = 9;value - The bytes of the cipherSuites to add.public final Server.TLSOptions.Builder setUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields)
setUnknownFields 在接口中 com.google.protobuf.Message.BuildersetUnknownFields 在类中 com.google.protobuf.GeneratedMessageV3.Builder<Server.TLSOptions.Builder>public final Server.TLSOptions.Builder mergeUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields)
mergeUnknownFields 在接口中 com.google.protobuf.Message.BuildermergeUnknownFields 在类中 com.google.protobuf.GeneratedMessageV3.Builder<Server.TLSOptions.Builder>Copyright © 2018–2020 Alibaba Group. All rights reserved.