Class TlsInspectionPolicy.Builder (0.94.0) 

public static final class TlsInspectionPolicy.Builder extends GeneratedMessage.Builder<TlsInspectionPolicy.Builder> implements TlsInspectionPolicyOrBuilder

The TlsInspectionPolicy resource contains references to CA pools in Certificate Authority Service and associated metadata.

Protobuf type google.cloud.networksecurity.v1.TlsInspectionPolicy

Inheritance

java.lang.Object > AbstractMessageLite.Builder<MessageType,BuilderType> > AbstractMessage.Builder<BuilderType> > GeneratedMessage.Builder > TlsInspectionPolicy.Builder

Static Methods

getDescriptor()

public static final Descriptors.Descriptor getDescriptor()
Returns
Type Description
Descriptor

Methods

addAllCustomTlsFeatures(Iterable<String> values)

public TlsInspectionPolicy.Builder addAllCustomTlsFeatures(Iterable<String> values)

Optional. List of custom TLS cipher suites selected. This field is valid only if the selected tls_feature_profile is CUSTOM. The [compute.SslPoliciesService.ListAvailableFeatures][] method returns the set of features that can be specified in this list. Note that Secure Web Proxy does not yet honor this field.

repeated string custom_tls_features = 10 [(.google.api.field_behavior) = OPTIONAL];

Parameter
Name Description
values Iterable<String>

The customTlsFeatures to add.
Returns
Type Description
TlsInspectionPolicy.Builder

This builder for chaining.

addCustomTlsFeatures(String value)

public TlsInspectionPolicy.Builder addCustomTlsFeatures(String value)

Optional. List of custom TLS cipher suites selected. This field is valid only if the selected tls_feature_profile is CUSTOM. The [compute.SslPoliciesService.ListAvailableFeatures][] method returns the set of features that can be specified in this list. Note that Secure Web Proxy does not yet honor this field.

repeated string custom_tls_features = 10 [(.google.api.field_behavior) = OPTIONAL];

Parameter
Name Description
value String

The customTlsFeatures to add.
Returns
Type Description
TlsInspectionPolicy.Builder

This builder for chaining.

addCustomTlsFeaturesBytes(ByteString value)

public TlsInspectionPolicy.Builder addCustomTlsFeaturesBytes(ByteString value)

Optional. List of custom TLS cipher suites selected. This field is valid only if the selected tls_feature_profile is CUSTOM. The [compute.SslPoliciesService.ListAvailableFeatures][] method returns the set of features that can be specified in this list. Note that Secure Web Proxy does not yet honor this field.

repeated string custom_tls_features = 10 [(.google.api.field_behavior) = OPTIONAL];

Parameter
Name Description
value ByteString

The bytes of the customTlsFeatures to add.
Returns
Type Description
TlsInspectionPolicy.Builder

This builder for chaining.

build()

public TlsInspectionPolicy build()
Returns
Type Description
TlsInspectionPolicy

buildPartial()

public TlsInspectionPolicy buildPartial()
Returns
Type Description
TlsInspectionPolicy

clear()

public TlsInspectionPolicy.Builder clear()
Returns
Type Description
TlsInspectionPolicy.Builder
Overrides

clearCaPool()

public TlsInspectionPolicy.Builder clearCaPool()

Required. A CA pool resource used to issue interception certificates. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".

string ca_pool = 5 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }

Returns
Type Description
TlsInspectionPolicy.Builder

This builder for chaining.

clearCreateTime()

public TlsInspectionPolicy.Builder clearCreateTime()

Output only. The timestamp when the resource was created.

.google.protobuf.Timestamp create_time = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
TlsInspectionPolicy.Builder

clearCustomTlsFeatures()

public TlsInspectionPolicy.Builder clearCustomTlsFeatures()

Optional. List of custom TLS cipher suites selected. This field is valid only if the selected tls_feature_profile is CUSTOM. The [compute.SslPoliciesService.ListAvailableFeatures][] method returns the set of features that can be specified in this list. Note that Secure Web Proxy does not yet honor this field.

repeated string custom_tls_features = 10 [(.google.api.field_behavior) = OPTIONAL];

Returns
Type Description
TlsInspectionPolicy.Builder

This builder for chaining.

clearDescription()

public TlsInspectionPolicy.Builder clearDescription()

Optional. Free-text description of the resource.

string description = 2 [(.google.api.field_behavior) = OPTIONAL];

Returns
Type Description
TlsInspectionPolicy.Builder

This builder for chaining.

clearExcludePublicCaSet()

public TlsInspectionPolicy.Builder clearExcludePublicCaSet()

Optional. If FALSE (the default), use our default set of public CAs in addition to any CAs specified in trust_config. These public CAs are currently based on the Mozilla Root Program and are subject to change over time. If TRUE, do not accept our default set of public CAs. Only CAs specified in trust_config will be accepted. This defaults to FALSE (use public CAs in addition to trust_config) for backwards compatibility, but trusting public root CAs is not recommended unless the traffic in question is outbound to public web servers. When possible, prefer setting this to "false" and explicitly specifying trusted CAs and certificates in a TrustConfig. Note that Secure Web Proxy does not yet honor this field.

optional bool exclude_public_ca_set = 7 [(.google.api.field_behavior) = OPTIONAL];

Returns
Type Description
TlsInspectionPolicy.Builder

This builder for chaining.

clearMinTlsVersion()

public TlsInspectionPolicy.Builder clearMinTlsVersion()

Optional. Minimum TLS version that the firewall should use when negotiating connections with both clients and servers. If this is not set, then the default value is to allow the broadest set of clients and servers (TLS 1.0 or higher). Setting this to more restrictive values may improve security, but may also prevent the firewall from connecting to some clients or servers. Note that Secure Web Proxy does not yet honor this field.

.google.cloud.networksecurity.v1.TlsInspectionPolicy.TlsVersion min_tls_version = 8 [(.google.api.field_behavior) = OPTIONAL];

Returns
Type Description
TlsInspectionPolicy.Builder

This builder for chaining.

clearName()

public TlsInspectionPolicy.Builder clearName()

Required. Name of the resource. Name is of the form projects/{project}/locations/{location}/tlsInspectionPolicies/{tls_inspection_policy} tls_inspection_policy should match the pattern:(^a-z?$).

string name = 1 [(.google.api.field_behavior) = REQUIRED];

Returns
Type Description
TlsInspectionPolicy.Builder

This builder for chaining.

clearTlsFeatureProfile()

public TlsInspectionPolicy.Builder clearTlsFeatureProfile()

Optional. The selected Profile. If this is not set, then the default value is to allow the broadest set of clients and servers ("PROFILE_COMPATIBLE"). Setting this to more restrictive values may improve security, but may also prevent the TLS inspection proxy from connecting to some clients or servers. Note that Secure Web Proxy does not yet honor this field.

.google.cloud.networksecurity.v1.TlsInspectionPolicy.Profile tls_feature_profile = 9 [(.google.api.field_behavior) = OPTIONAL];

Returns
Type Description
TlsInspectionPolicy.Builder

This builder for chaining.

clearTrustConfig()

public TlsInspectionPolicy.Builder clearTrustConfig()

Optional. A TrustConfig resource used when making a connection to the TLS server. This is a relative resource path following the form "projects/{project}/locations/{location}/trustConfigs/{trust_config}". This is necessary to intercept TLS connections to servers with certificates signed by a private CA or self-signed certificates. Note that Secure Web Proxy does not yet honor this field.

string trust_config = 6 [(.google.api.field_behavior) = OPTIONAL, (.google.api.resource_reference) = { ... }

Returns
Type Description
TlsInspectionPolicy.Builder

This builder for chaining.

clearUpdateTime()

public TlsInspectionPolicy.Builder clearUpdateTime()

Output only. The timestamp when the resource was updated.

.google.protobuf.Timestamp update_time = 4 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
TlsInspectionPolicy.Builder

getCaPool()

public String getCaPool()

Required. A CA pool resource used to issue interception certificates. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".

string ca_pool = 5 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }

Returns
Type Description
String

The caPool.

getCaPoolBytes()

public ByteString getCaPoolBytes()

Required. A CA pool resource used to issue interception certificates. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".

string ca_pool = 5 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }

Returns
Type Description
ByteString

The bytes for caPool.

getCreateTime()

public Timestamp getCreateTime()

Output only. The timestamp when the resource was created.

.google.protobuf.Timestamp create_time = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
Timestamp

The createTime.

getCreateTimeBuilder()

public Timestamp.Builder getCreateTimeBuilder()

Output only. The timestamp when the resource was created.

.google.protobuf.Timestamp create_time = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
Builder

getCreateTimeOrBuilder()

public TimestampOrBuilder getCreateTimeOrBuilder()

Output only. The timestamp when the resource was created.

.google.protobuf.Timestamp create_time = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
TimestampOrBuilder

getCustomTlsFeatures(int index)

public String getCustomTlsFeatures(int index)

Optional. List of custom TLS cipher suites selected. This field is valid only if the selected tls_feature_profile is CUSTOM. The [compute.SslPoliciesService.ListAvailableFeatures][] method returns the set of features that can be specified in this list. Note that Secure Web Proxy does not yet honor this field.

repeated string custom_tls_features = 10 [(.google.api.field_behavior) = OPTIONAL];

Parameter
Name Description
index int

The index of the element to return.
Returns
Type Description
String

The customTlsFeatures at the given index.

getCustomTlsFeaturesBytes(int index)

public ByteString getCustomTlsFeaturesBytes(int index)

Optional. List of custom TLS cipher suites selected. This field is valid only if the selected tls_feature_profile is CUSTOM. The [compute.SslPoliciesService.ListAvailableFeatures][] method returns the set of features that can be specified in this list. Note that Secure Web Proxy does not yet honor this field.

repeated string custom_tls_features = 10 [(.google.api.field_behavior) = OPTIONAL];

Parameter
Name Description
index int

The index of the value to return.
Returns
Type Description
ByteString

The bytes of the customTlsFeatures at the given index.

getCustomTlsFeaturesCount()

public int getCustomTlsFeaturesCount()

Optional. List of custom TLS cipher suites selected. This field is valid only if the selected tls_feature_profile is CUSTOM. The [compute.SslPoliciesService.ListAvailableFeatures][] method returns the set of features that can be specified in this list. Note that Secure Web Proxy does not yet honor this field.

repeated string custom_tls_features = 10 [(.google.api.field_behavior) = OPTIONAL];

Returns
Type Description
int

The count of customTlsFeatures.

getCustomTlsFeaturesList()

public ProtocolStringList getCustomTlsFeaturesList()

Optional. List of custom TLS cipher suites selected. This field is valid only if the selected tls_feature_profile is CUSTOM. The [compute.SslPoliciesService.ListAvailableFeatures][] method returns the set of features that can be specified in this list. Note that Secure Web Proxy does not yet honor this field.

repeated string custom_tls_features = 10 [(.google.api.field_behavior) = OPTIONAL];

Returns
Type Description
ProtocolStringList

A list containing the customTlsFeatures.

getDefaultInstanceForType()

public TlsInspectionPolicy getDefaultInstanceForType()
Returns
Type Description
TlsInspectionPolicy

getDescription()

public String getDescription()

Optional. Free-text description of the resource.

string description = 2 [(.google.api.field_behavior) = OPTIONAL];

Returns
Type Description
String

The description.

getDescriptionBytes()

public ByteString getDescriptionBytes()

Optional. Free-text description of the resource.

string description = 2 [(.google.api.field_behavior) = OPTIONAL];

Returns
Type Description
ByteString

The bytes for description.

getDescriptorForType()

public Descriptors.Descriptor getDescriptorForType()
Returns
Type Description
Descriptor
Overrides

getExcludePublicCaSet()

public boolean getExcludePublicCaSet()

Optional. If FALSE (the default), use our default set of public CAs in addition to any CAs specified in trust_config. These public CAs are currently based on the Mozilla Root Program and are subject to change over time. If TRUE, do not accept our default set of public CAs. Only CAs specified in trust_config will be accepted. This defaults to FALSE (use public CAs in addition to trust_config) for backwards compatibility, but trusting public root CAs is not recommended unless the traffic in question is outbound to public web servers. When possible, prefer setting this to "false" and explicitly specifying trusted CAs and certificates in a TrustConfig. Note that Secure Web Proxy does not yet honor this field.

optional bool exclude_public_ca_set = 7 [(.google.api.field_behavior) = OPTIONAL];

Returns
Type Description
boolean

The excludePublicCaSet.

getMinTlsVersion()

public TlsInspectionPolicy.TlsVersion getMinTlsVersion()

Optional. Minimum TLS version that the firewall should use when negotiating connections with both clients and servers. If this is not set, then the default value is to allow the broadest set of clients and servers (TLS 1.0 or higher). Setting this to more restrictive values may improve security, but may also prevent the firewall from connecting to some clients or servers. Note that Secure Web Proxy does not yet honor this field.

.google.cloud.networksecurity.v1.TlsInspectionPolicy.TlsVersion min_tls_version = 8 [(.google.api.field_behavior) = OPTIONAL];

Returns
Type Description
TlsInspectionPolicy.TlsVersion

The minTlsVersion.

getMinTlsVersionValue()

public int getMinTlsVersionValue()

Optional. Minimum TLS version that the firewall should use when negotiating connections with both clients and servers. If this is not set, then the default value is to allow the broadest set of clients and servers (TLS 1.0 or higher). Setting this to more restrictive values may improve security, but may also prevent the firewall from connecting to some clients or servers. Note that Secure Web Proxy does not yet honor this field.

.google.cloud.networksecurity.v1.TlsInspectionPolicy.TlsVersion min_tls_version = 8 [(.google.api.field_behavior) = OPTIONAL];

Returns
Type Description
int

The enum numeric value on the wire for minTlsVersion.

getName()

public String getName()

Required. Name of the resource. Name is of the form projects/{project}/locations/{location}/tlsInspectionPolicies/{tls_inspection_policy} tls_inspection_policy should match the pattern:(^a-z?$).

string name = 1 [(.google.api.field_behavior) = REQUIRED];

Returns
Type Description
String

The name.

getNameBytes()

public ByteString getNameBytes()

Required. Name of the resource. Name is of the form projects/{project}/locations/{location}/tlsInspectionPolicies/{tls_inspection_policy} tls_inspection_policy should match the pattern:(^a-z?$).

string name = 1 [(.google.api.field_behavior) = REQUIRED];

Returns
Type Description
ByteString

The bytes for name.

getTlsFeatureProfile()

public TlsInspectionPolicy.Profile getTlsFeatureProfile()

Optional. The selected Profile. If this is not set, then the default value is to allow the broadest set of clients and servers ("PROFILE_COMPATIBLE"). Setting this to more restrictive values may improve security, but may also prevent the TLS inspection proxy from connecting to some clients or servers. Note that Secure Web Proxy does not yet honor this field.

.google.cloud.networksecurity.v1.TlsInspectionPolicy.Profile tls_feature_profile = 9 [(.google.api.field_behavior) = OPTIONAL];

Returns
Type Description
TlsInspectionPolicy.Profile

The tlsFeatureProfile.

getTlsFeatureProfileValue()

public int getTlsFeatureProfileValue()

Optional. The selected Profile. If this is not set, then the default value is to allow the broadest set of clients and servers ("PROFILE_COMPATIBLE"). Setting this to more restrictive values may improve security, but may also prevent the TLS inspection proxy from connecting to some clients or servers. Note that Secure Web Proxy does not yet honor this field.

.google.cloud.networksecurity.v1.TlsInspectionPolicy.Profile tls_feature_profile = 9 [(.google.api.field_behavior) = OPTIONAL];

Returns
Type Description
int

The enum numeric value on the wire for tlsFeatureProfile.

getTrustConfig()

public String getTrustConfig()

Optional. A TrustConfig resource used when making a connection to the TLS server. This is a relative resource path following the form "projects/{project}/locations/{location}/trustConfigs/{trust_config}". This is necessary to intercept TLS connections to servers with certificates signed by a private CA or self-signed certificates. Note that Secure Web Proxy does not yet honor this field.

string trust_config = 6 [(.google.api.field_behavior) = OPTIONAL, (.google.api.resource_reference) = { ... }

Returns
Type Description
String

The trustConfig.

getTrustConfigBytes()

public ByteString getTrustConfigBytes()

Optional. A TrustConfig resource used when making a connection to the TLS server. This is a relative resource path following the form "projects/{project}/locations/{location}/trustConfigs/{trust_config}". This is necessary to intercept TLS connections to servers with certificates signed by a private CA or self-signed certificates. Note that Secure Web Proxy does not yet honor this field.

string trust_config = 6 [(.google.api.field_behavior) = OPTIONAL, (.google.api.resource_reference) = { ... }

Returns
Type Description
ByteString

The bytes for trustConfig.

getUpdateTime()

public Timestamp getUpdateTime()

Output only. The timestamp when the resource was updated.

.google.protobuf.Timestamp update_time = 4 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
Timestamp

The updateTime.

getUpdateTimeBuilder()

public Timestamp.Builder getUpdateTimeBuilder()

Output only. The timestamp when the resource was updated.

.google.protobuf.Timestamp update_time = 4 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
Builder

getUpdateTimeOrBuilder()

public TimestampOrBuilder getUpdateTimeOrBuilder()

Output only. The timestamp when the resource was updated.

.google.protobuf.Timestamp update_time = 4 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
TimestampOrBuilder

hasCreateTime()

public boolean hasCreateTime()

Output only. The timestamp when the resource was created.

.google.protobuf.Timestamp create_time = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
boolean

Whether the createTime field is set.

hasExcludePublicCaSet()

public boolean hasExcludePublicCaSet()

Optional. If FALSE (the default), use our default set of public CAs in addition to any CAs specified in trust_config. These public CAs are currently based on the Mozilla Root Program and are subject to change over time. If TRUE, do not accept our default set of public CAs. Only CAs specified in trust_config will be accepted. This defaults to FALSE (use public CAs in addition to trust_config) for backwards compatibility, but trusting public root CAs is not recommended unless the traffic in question is outbound to public web servers. When possible, prefer setting this to "false" and explicitly specifying trusted CAs and certificates in a TrustConfig. Note that Secure Web Proxy does not yet honor this field.

optional bool exclude_public_ca_set = 7 [(.google.api.field_behavior) = OPTIONAL];

Returns
Type Description
boolean

Whether the excludePublicCaSet field is set.

hasUpdateTime()

public boolean hasUpdateTime()

Output only. The timestamp when the resource was updated.

.google.protobuf.Timestamp update_time = 4 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type Description
boolean

Whether the updateTime field is set.

internalGetFieldAccessorTable()

protected GeneratedMessage.FieldAccessorTable internalGetFieldAccessorTable()
Returns
Type Description
FieldAccessorTable
Overrides

isInitialized()

public final boolean isInitialized()
Returns
Type Description
boolean
Overrides

mergeCreateTime(Timestamp value)

public TlsInspectionPolicy.Builder mergeCreateTime(Timestamp value)

Output only. The timestamp when the resource was created.

.google.protobuf.Timestamp create_time = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];

Parameter
Name Description
value Timestamp
Returns
Type Description
TlsInspectionPolicy.Builder

mergeFrom(TlsInspectionPolicy other)

public TlsInspectionPolicy.Builder mergeFrom(TlsInspectionPolicy other)
Parameter
Name Description
other TlsInspectionPolicy
Returns
Type Description
TlsInspectionPolicy.Builder

mergeFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)

public TlsInspectionPolicy.Builder mergeFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)
Parameters
Name Description
input CodedInputStream
extensionRegistry ExtensionRegistryLite
Returns
Type Description
TlsInspectionPolicy.Builder
Overrides
Exceptions
Type Description
IOException

mergeFrom(Message other)

public TlsInspectionPolicy.Builder mergeFrom(Message other)
Parameter
Name Description
other Message
Returns
Type Description
TlsInspectionPolicy.Builder
Overrides

mergeUpdateTime(Timestamp value)

public TlsInspectionPolicy.Builder mergeUpdateTime(Timestamp value)

Output only. The timestamp when the resource was updated.

.google.protobuf.Timestamp update_time = 4 [(.google.api.field_behavior) = OUTPUT_ONLY];

Parameter
Name Description
value Timestamp
Returns
Type Description
TlsInspectionPolicy.Builder

setCaPool(String value)

public TlsInspectionPolicy.Builder setCaPool(String value)

Required. A CA pool resource used to issue interception certificates. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".

string ca_pool = 5 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }

Parameter
Name Description
value String

The caPool to set.
Returns
Type Description
TlsInspectionPolicy.Builder

This builder for chaining.

setCaPoolBytes(ByteString value)

public TlsInspectionPolicy.Builder setCaPoolBytes(ByteString value)

Required. A CA pool resource used to issue interception certificates. The CA pool string has a relative resource path following the form "projects/{project}/locations/{location}/caPools/{ca_pool}".

string ca_pool = 5 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }

Parameter
Name Description
value ByteString

The bytes for caPool to set.
Returns
Type Description
TlsInspectionPolicy.Builder

This builder for chaining.

setCreateTime(Timestamp value)

public TlsInspectionPolicy.Builder setCreateTime(Timestamp value)

Output only. The timestamp when the resource was created.

.google.protobuf.Timestamp create_time = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];

Parameter
Name Description
value Timestamp
Returns
Type Description
TlsInspectionPolicy.Builder

setCreateTime(Timestamp.Builder builderForValue)

public TlsInspectionPolicy.Builder setCreateTime(Timestamp.Builder builderForValue)

Output only. The timestamp when the resource was created.

.google.protobuf.Timestamp create_time = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];

Parameter
Name Description
builderForValue Builder
Returns
Type Description
TlsInspectionPolicy.Builder

setCustomTlsFeatures(int index, String value)

public TlsInspectionPolicy.Builder setCustomTlsFeatures(int index, String value)

Optional. List of custom TLS cipher suites selected. This field is valid only if the selected tls_feature_profile is CUSTOM. The [compute.SslPoliciesService.ListAvailableFeatures][] method returns the set of features that can be specified in this list. Note that Secure Web Proxy does not yet honor this field.

repeated string custom_tls_features = 10 [(.google.api.field_behavior) = OPTIONAL];

Parameters
Name Description
index int

The index to set the value at.
value String

The customTlsFeatures to set.
Returns
Type Description
TlsInspectionPolicy.Builder

This builder for chaining.

setDescription(String value)

public TlsInspectionPolicy.Builder setDescription(String value)

Optional. Free-text description of the resource.

string description = 2 [(.google.api.field_behavior) = OPTIONAL];

Parameter
Name Description
value String

The description to set.
Returns
Type Description
TlsInspectionPolicy.Builder

This builder for chaining.

setDescriptionBytes(ByteString value)

public TlsInspectionPolicy.Builder setDescriptionBytes(ByteString value)

Optional. Free-text description of the resource.

string description = 2 [(.google.api.field_behavior) = OPTIONAL];

Parameter
Name Description
value ByteString

The bytes for description to set.
Returns
Type Description
TlsInspectionPolicy.Builder

This builder for chaining.

setExcludePublicCaSet(boolean value)

public TlsInspectionPolicy.Builder setExcludePublicCaSet(boolean value)

Optional. If FALSE (the default), use our default set of public CAs in addition to any CAs specified in trust_config. These public CAs are currently based on the Mozilla Root Program and are subject to change over time. If TRUE, do not accept our default set of public CAs. Only CAs specified in trust_config will be accepted. This defaults to FALSE (use public CAs in addition to trust_config) for backwards compatibility, but trusting public root CAs is not recommended unless the traffic in question is outbound to public web servers. When possible, prefer setting this to "false" and explicitly specifying trusted CAs and certificates in a TrustConfig. Note that Secure Web Proxy does not yet honor this field.

optional bool exclude_public_ca_set = 7 [(.google.api.field_behavior) = OPTIONAL];

Parameter
Name Description
value boolean

The excludePublicCaSet to set.
Returns
Type Description
TlsInspectionPolicy.Builder

This builder for chaining.

setMinTlsVersion(TlsInspectionPolicy.TlsVersion value)

public TlsInspectionPolicy.Builder setMinTlsVersion(TlsInspectionPolicy.TlsVersion value)

Optional. Minimum TLS version that the firewall should use when negotiating connections with both clients and servers. If this is not set, then the default value is to allow the broadest set of clients and servers (TLS 1.0 or higher). Setting this to more restrictive values may improve security, but may also prevent the firewall from connecting to some clients or servers. Note that Secure Web Proxy does not yet honor this field.

.google.cloud.networksecurity.v1.TlsInspectionPolicy.TlsVersion min_tls_version = 8 [(.google.api.field_behavior) = OPTIONAL];

Parameter
Name Description
value TlsInspectionPolicy.TlsVersion

The minTlsVersion to set.
Returns
Type Description
TlsInspectionPolicy.Builder

This builder for chaining.

setMinTlsVersionValue(int value)

public TlsInspectionPolicy.Builder setMinTlsVersionValue(int value)

Optional. Minimum TLS version that the firewall should use when negotiating connections with both clients and servers. If this is not set, then the default value is to allow the broadest set of clients and servers (TLS 1.0 or higher). Setting this to more restrictive values may improve security, but may also prevent the firewall from connecting to some clients or servers. Note that Secure Web Proxy does not yet honor this field.

.google.cloud.networksecurity.v1.TlsInspectionPolicy.TlsVersion min_tls_version = 8 [(.google.api.field_behavior) = OPTIONAL];

Parameter
Name Description
value int

The enum numeric value on the wire for minTlsVersion to set.
Returns
Type Description
TlsInspectionPolicy.Builder

This builder for chaining.

setName(String value)

public TlsInspectionPolicy.Builder setName(String value)

Required. Name of the resource. Name is of the form projects/{project}/locations/{location}/tlsInspectionPolicies/{tls_inspection_policy} tls_inspection_policy should match the pattern:(^a-z?$).

string name = 1 [(.google.api.field_behavior) = REQUIRED];

Parameter
Name Description
value String

The name to set.
Returns
Type Description
TlsInspectionPolicy.Builder

This builder for chaining.

setNameBytes(ByteString value)

public TlsInspectionPolicy.Builder setNameBytes(ByteString value)

Required. Name of the resource. Name is of the form projects/{project}/locations/{location}/tlsInspectionPolicies/{tls_inspection_policy} tls_inspection_policy should match the pattern:(^a-z?$).

string name = 1 [(.google.api.field_behavior) = REQUIRED];

Parameter
Name Description
value ByteString

The bytes for name to set.
Returns
Type Description
TlsInspectionPolicy.Builder

This builder for chaining.

setTlsFeatureProfile(TlsInspectionPolicy.Profile value)

public TlsInspectionPolicy.Builder setTlsFeatureProfile(TlsInspectionPolicy.Profile value)

Optional. The selected Profile. If this is not set, then the default value is to allow the broadest set of clients and servers ("PROFILE_COMPATIBLE"). Setting this to more restrictive values may improve security, but may also prevent the TLS inspection proxy from connecting to some clients or servers. Note that Secure Web Proxy does not yet honor this field.

.google.cloud.networksecurity.v1.TlsInspectionPolicy.Profile tls_feature_profile = 9 [(.google.api.field_behavior) = OPTIONAL];

Parameter
Name Description
value TlsInspectionPolicy.Profile

The tlsFeatureProfile to set.
Returns
Type Description
TlsInspectionPolicy.Builder

This builder for chaining.

setTlsFeatureProfileValue(int value)

public TlsInspectionPolicy.Builder setTlsFeatureProfileValue(int value)

Optional. The selected Profile. If this is not set, then the default value is to allow the broadest set of clients and servers ("PROFILE_COMPATIBLE"). Setting this to more restrictive values may improve security, but may also prevent the TLS inspection proxy from connecting to some clients or servers. Note that Secure Web Proxy does not yet honor this field.

.google.cloud.networksecurity.v1.TlsInspectionPolicy.Profile tls_feature_profile = 9 [(.google.api.field_behavior) = OPTIONAL];

Parameter
Name Description
value int

The enum numeric value on the wire for tlsFeatureProfile to set.
Returns
Type Description
TlsInspectionPolicy.Builder

This builder for chaining.

setTrustConfig(String value)

public TlsInspectionPolicy.Builder setTrustConfig(String value)

Optional. A TrustConfig resource used when making a connection to the TLS server. This is a relative resource path following the form "projects/{project}/locations/{location}/trustConfigs/{trust_config}". This is necessary to intercept TLS connections to servers with certificates signed by a private CA or self-signed certificates. Note that Secure Web Proxy does not yet honor this field.

string trust_config = 6 [(.google.api.field_behavior) = OPTIONAL, (.google.api.resource_reference) = { ... }

Parameter
Name Description
value String

The trustConfig to set.
Returns
Type Description
TlsInspectionPolicy.Builder

This builder for chaining.

setTrustConfigBytes(ByteString value)

public TlsInspectionPolicy.Builder setTrustConfigBytes(ByteString value)

Optional. A TrustConfig resource used when making a connection to the TLS server. This is a relative resource path following the form "projects/{project}/locations/{location}/trustConfigs/{trust_config}". This is necessary to intercept TLS connections to servers with certificates signed by a private CA or self-signed certificates. Note that Secure Web Proxy does not yet honor this field.

string trust_config = 6 [(.google.api.field_behavior) = OPTIONAL, (.google.api.resource_reference) = { ... }

Parameter
Name Description
value ByteString

The bytes for trustConfig to set.
Returns
Type Description
TlsInspectionPolicy.Builder

This builder for chaining.

setUpdateTime(Timestamp value)

public TlsInspectionPolicy.Builder setUpdateTime(Timestamp value)

Output only. The timestamp when the resource was updated.

.google.protobuf.Timestamp update_time = 4 [(.google.api.field_behavior) = OUTPUT_ONLY];

Parameter
Name Description
value Timestamp
Returns
Type Description
TlsInspectionPolicy.Builder

setUpdateTime(Timestamp.Builder builderForValue)

public TlsInspectionPolicy.Builder setUpdateTime(Timestamp.Builder builderForValue)

Output only. The timestamp when the resource was updated.

.google.protobuf.Timestamp update_time = 4 [(.google.api.field_behavior) = OUTPUT_ONLY];

Parameter
Name Description
builderForValue Builder
Returns
Type Description
TlsInspectionPolicy.Builder