Enum ServerTlsPolicy.MTLSPolicy.ClientValidationMode (0.94.0)

public enum ServerTlsPolicy.MTLSPolicy.ClientValidationMode extends Enum<ServerTlsPolicy.MTLSPolicy.ClientValidationMode> implements ProtocolMessageEnum

Mutual TLS certificate validation mode.

Protobuf enum google.cloud.networksecurity.v1.ServerTlsPolicy.MTLSPolicy.ClientValidationMode

Implements

ProtocolMessageEnum

Static Fields

Name Description
ALLOW_INVALID_OR_MISSING_CLIENT_CERT

Allow connection even if certificate chain validation of the client certificate failed or no client certificate was presented. The proof of possession of the private key is always checked if client certificate was presented. This mode requires the backend to implement processing of data extracted from a client certificate to authenticate the peer, or to reject connections if the client certificate fingerprint is missing.

ALLOW_INVALID_OR_MISSING_CLIENT_CERT = 1;

ALLOW_INVALID_OR_MISSING_CLIENT_CERT_VALUE

Allow connection even if certificate chain validation of the client certificate failed or no client certificate was presented. The proof of possession of the private key is always checked if client certificate was presented. This mode requires the backend to implement processing of data extracted from a client certificate to authenticate the peer, or to reject connections if the client certificate fingerprint is missing.

ALLOW_INVALID_OR_MISSING_CLIENT_CERT = 1;

CLIENT_VALIDATION_MODE_UNSPECIFIED

Not allowed.

CLIENT_VALIDATION_MODE_UNSPECIFIED = 0;

CLIENT_VALIDATION_MODE_UNSPECIFIED_VALUE

Not allowed.

CLIENT_VALIDATION_MODE_UNSPECIFIED = 0;

REJECT_INVALID

Require a client certificate and allow connection to the backend only if validation of the client certificate passed.

If set, requires a reference to non-empty TrustConfig specified in client_validation_trust_config.

REJECT_INVALID = 2;

REJECT_INVALID_VALUE

Require a client certificate and allow connection to the backend only if validation of the client certificate passed.

If set, requires a reference to non-empty TrustConfig specified in client_validation_trust_config.

REJECT_INVALID = 2;

UNRECOGNIZED

Static Methods

Name Description
forNumber(int value)
getDescriptor()
internalGetValueMap()
valueOf(Descriptors.EnumValueDescriptor desc)
valueOf(int value)

Deprecated. Use #forNumber(int) instead.

valueOf(String name)
values()

Methods

Name Description
getDescriptorForType()
getNumber()
getValueDescriptor()