Reference documentation and code samples for the Cloud SQL Admin V1 API module Google::Cloud::Sql::V1::IpConfiguration::SslMode.
The SSL options for database connections.
Constants
SSL_MODE_UNSPECIFIED
value: 0
The SSL mode is unknown.
ALLOW_UNENCRYPTED_AND_ENCRYPTED
value: 1
Allow non-SSL/non-TLS and SSL/TLS connections.
For SSL connections to MySQL and PostgreSQL, the client certificate
isn't verified.
When this value is used, the legacy require_ssl flag must be false or
cleared to avoid a conflict between the values of the two flags.
ENCRYPTED_ONLY
value: 2
Only allow connections encrypted with SSL/TLS.
For SSL connections to MySQL and PostgreSQL, the client certificate
isn't verified.
When this value is used, the legacy require_ssl flag must be false or
cleared to avoid a conflict between the values of the two flags.
TRUSTED_CLIENT_CERTIFICATE_REQUIRED
value: 3
Only allow connections encrypted with SSL/TLS and with valid
client certificates.
When this value is used, the legacy require_ssl flag must be true or
cleared to avoid the conflict between values of two flags.
PostgreSQL clients or users that connect using IAM database
authentication must use either the
Cloud SQL Auth
Proxy or
Cloud SQL
Connectors
to enforce client identity verification.
Only applicable to MySQL and PostgreSQL. Not applicable to SQL Server.