类 GatewayOuterClass.ServerTLSSettings.Builder
java.lang.Object
com.google.protobuf.AbstractMessageLite.Builder
com.google.protobuf.AbstractMessage.Builder<GatewayOuterClass.ServerTLSSettings.Builder>
com.google.protobuf.GeneratedMessageV3.Builder<GatewayOuterClass.ServerTLSSettings.Builder>
istio.networking.v1alpha3.GatewayOuterClass.ServerTLSSettings.Builder
- 所有已实现的接口:
com.google.protobuf.Message.Builder,com.google.protobuf.MessageLite.Builder,com.google.protobuf.MessageLiteOrBuilder,com.google.protobuf.MessageOrBuilder,GatewayOuterClass.ServerTLSSettingsOrBuilder,Cloneable
public static final class GatewayOuterClass.ServerTLSSettings.Builder
extends com.google.protobuf.GeneratedMessageV3.Builder<GatewayOuterClass.ServerTLSSettings.Builder>
implements GatewayOuterClass.ServerTLSSettingsOrBuilder
Protobuf type
istio.networking.v1alpha3.ServerTLSSettings-
方法概要
修饰符和类型方法说明addAllCipherSuites(Iterable<String> values) Optional: If specified, only support the specified cipher list.addAllSubjectAltNames(Iterable<String> values) A list of alternate names to verify the subject identity in the certificate presented by the client.addAllVerifyCertificateHash(Iterable<String> values) An optional list of hex-encoded SHA-256 hashes of the authorized client certificates.addAllVerifyCertificateSpki(Iterable<String> values) An optional list of base64-encoded SHA-256 hashes of the SKPIs of authorized client certificates.addCipherSuites(String value) Optional: If specified, only support the specified cipher list.addCipherSuitesBytes(com.google.protobuf.ByteString value) Optional: If specified, only support the specified cipher list.addRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field, Object value) addSubjectAltNames(String value) A list of alternate names to verify the subject identity in the certificate presented by the client.addSubjectAltNamesBytes(com.google.protobuf.ByteString value) A list of alternate names to verify the subject identity in the certificate presented by the client.addVerifyCertificateHash(String value) An optional list of hex-encoded SHA-256 hashes of the authorized client certificates.addVerifyCertificateHashBytes(com.google.protobuf.ByteString value) An optional list of hex-encoded SHA-256 hashes of the authorized client certificates.addVerifyCertificateSpki(String value) An optional list of base64-encoded SHA-256 hashes of the SKPIs of authorized client certificates.addVerifyCertificateSpkiBytes(com.google.protobuf.ByteString value) An optional list of base64-encoded SHA-256 hashes of the SKPIs of authorized client certificates.build()clear()REQUIRED if mode is `MUTUAL`.Optional: If specified, only support the specified cipher list.For gateways running on Kubernetes, the name of the secret that holds the TLS certs including the CA certificates.clearField(com.google.protobuf.Descriptors.FieldDescriptor field) If set to true, the load balancer will send a 301 redirect for all http connections, asking the clients to use HTTPS.Optional: Maximum TLS protocol version.Optional: Minimum TLS protocol version.Optional: Indicates whether connections to this port should be secured using TLS.clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) REQUIRED if mode is `SIMPLE` or `MUTUAL`.REQUIRED if mode is `SIMPLE` or `MUTUAL`.A list of alternate names to verify the subject identity in the certificate presented by the client.An optional list of hex-encoded SHA-256 hashes of the authorized client certificates.An optional list of base64-encoded SHA-256 hashes of the SKPIs of authorized client certificates.clone()REQUIRED if mode is `MUTUAL`.com.google.protobuf.ByteStringREQUIRED if mode is `MUTUAL`.getCipherSuites(int index) Optional: If specified, only support the specified cipher list.com.google.protobuf.ByteStringgetCipherSuitesBytes(int index) Optional: If specified, only support the specified cipher list.intOptional: If specified, only support the specified cipher list.com.google.protobuf.ProtocolStringListOptional: If specified, only support the specified cipher list.For gateways running on Kubernetes, the name of the secret that holds the TLS certs including the CA certificates.com.google.protobuf.ByteStringFor gateways running on Kubernetes, the name of the secret that holds the TLS certs including the CA certificates.static final com.google.protobuf.Descriptors.Descriptorcom.google.protobuf.Descriptors.DescriptorbooleanIf set to true, the load balancer will send a 301 redirect for all http connections, asking the clients to use HTTPS.Optional: Maximum TLS protocol version.intOptional: Maximum TLS protocol version.Optional: Minimum TLS protocol version.intOptional: Minimum TLS protocol version.getMode()Optional: Indicates whether connections to this port should be secured using TLS.intOptional: Indicates whether connections to this port should be secured using TLS.REQUIRED if mode is `SIMPLE` or `MUTUAL`.com.google.protobuf.ByteStringREQUIRED if mode is `SIMPLE` or `MUTUAL`.REQUIRED if mode is `SIMPLE` or `MUTUAL`.com.google.protobuf.ByteStringREQUIRED if mode is `SIMPLE` or `MUTUAL`.getSubjectAltNames(int index) A list of alternate names to verify the subject identity in the certificate presented by the client.com.google.protobuf.ByteStringgetSubjectAltNamesBytes(int index) A list of alternate names to verify the subject identity in the certificate presented by the client.intA list of alternate names to verify the subject identity in the certificate presented by the client.com.google.protobuf.ProtocolStringListA list of alternate names to verify the subject identity in the certificate presented by the client.getVerifyCertificateHash(int index) An optional list of hex-encoded SHA-256 hashes of the authorized client certificates.com.google.protobuf.ByteStringgetVerifyCertificateHashBytes(int index) An optional list of hex-encoded SHA-256 hashes of the authorized client certificates.intAn optional list of hex-encoded SHA-256 hashes of the authorized client certificates.com.google.protobuf.ProtocolStringListAn optional list of hex-encoded SHA-256 hashes of the authorized client certificates.getVerifyCertificateSpki(int index) An optional list of base64-encoded SHA-256 hashes of the SKPIs of authorized client certificates.com.google.protobuf.ByteStringgetVerifyCertificateSpkiBytes(int index) An optional list of base64-encoded SHA-256 hashes of the SKPIs of authorized client certificates.intAn optional list of base64-encoded SHA-256 hashes of the SKPIs of authorized client certificates.com.google.protobuf.ProtocolStringListAn optional list of base64-encoded SHA-256 hashes of the SKPIs of authorized client certificates.protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTablefinal booleanmergeFrom(com.google.protobuf.CodedInputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) mergeFrom(com.google.protobuf.Message other) mergeUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields) setCaCertificates(String value) REQUIRED if mode is `MUTUAL`.setCaCertificatesBytes(com.google.protobuf.ByteString value) REQUIRED if mode is `MUTUAL`.setCipherSuites(int index, String value) Optional: If specified, only support the specified cipher list.setCredentialName(String value) For gateways running on Kubernetes, the name of the secret that holds the TLS certs including the CA certificates.setCredentialNameBytes(com.google.protobuf.ByteString value) For gateways running on Kubernetes, the name of the secret that holds the TLS certs including the CA certificates.setHttpsRedirect(boolean value) If set to true, the load balancer will send a 301 redirect for all http connections, asking the clients to use HTTPS.Optional: Maximum TLS protocol version.setMaxProtocolVersionValue(int value) Optional: Maximum TLS protocol version.Optional: Minimum TLS protocol version.setMinProtocolVersionValue(int value) Optional: Minimum TLS protocol version.Optional: Indicates whether connections to this port should be secured using TLS.setModeValue(int value) Optional: Indicates whether connections to this port should be secured using TLS.setPrivateKey(String value) REQUIRED if mode is `SIMPLE` or `MUTUAL`.setPrivateKeyBytes(com.google.protobuf.ByteString value) REQUIRED if mode is `SIMPLE` or `MUTUAL`.setRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field, int index, Object value) setServerCertificate(String value) REQUIRED if mode is `SIMPLE` or `MUTUAL`.setServerCertificateBytes(com.google.protobuf.ByteString value) REQUIRED if mode is `SIMPLE` or `MUTUAL`.setSubjectAltNames(int index, String value) A list of alternate names to verify the subject identity in the certificate presented by the client.setUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields) setVerifyCertificateHash(int index, String value) An optional list of hex-encoded SHA-256 hashes of the authorized client certificates.setVerifyCertificateSpki(int index, String value) An optional list of base64-encoded SHA-256 hashes of the SKPIs of authorized client certificates.从类继承的方法 com.google.protobuf.GeneratedMessageV3.Builder
getAllFields, getField, getFieldBuilder, getOneofFieldDescriptor, getParentForChildren, getRepeatedField, getRepeatedFieldBuilder, getRepeatedFieldCount, getUnknownFields, getUnknownFieldSetBuilder, hasField, hasOneof, internalGetMapField, internalGetMapFieldReflection, internalGetMutableMapField, internalGetMutableMapFieldReflection, isClean, markClean, mergeUnknownLengthDelimitedField, mergeUnknownVarintField, newBuilderForField, onBuilt, onChanged, parseUnknownField, setUnknownFieldSetBuilder, setUnknownFieldsProto3从类继承的方法 com.google.protobuf.AbstractMessage.Builder
findInitializationErrors, getInitializationErrorString, internalMergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, newUninitializedMessageException, toString从类继承的方法 com.google.protobuf.AbstractMessageLite.Builder
addAll, addAll, mergeDelimitedFrom, mergeDelimitedFrom, mergeFrom, newUninitializedMessageException从接口继承的方法 com.google.protobuf.Message.Builder
mergeDelimitedFrom, mergeDelimitedFrom从接口继承的方法 com.google.protobuf.MessageLite.Builder
mergeFrom从接口继承的方法 com.google.protobuf.MessageOrBuilder
findInitializationErrors, getAllFields, getField, getInitializationErrorString, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, getUnknownFields, hasField, hasOneof
-
方法详细资料
-
getDescriptor
public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() -
internalGetFieldAccessorTable
protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()- 指定者:
internalGetFieldAccessorTable在类中com.google.protobuf.GeneratedMessageV3.Builder<GatewayOuterClass.ServerTLSSettings.Builder>
-
clear
- 指定者:
clear在接口中com.google.protobuf.Message.Builder- 指定者:
clear在接口中com.google.protobuf.MessageLite.Builder- 覆盖:
clear在类中com.google.protobuf.GeneratedMessageV3.Builder<GatewayOuterClass.ServerTLSSettings.Builder>
-
getDescriptorForType
public com.google.protobuf.Descriptors.Descriptor getDescriptorForType()- 指定者:
getDescriptorForType在接口中com.google.protobuf.Message.Builder- 指定者:
getDescriptorForType在接口中com.google.protobuf.MessageOrBuilder- 覆盖:
getDescriptorForType在类中com.google.protobuf.GeneratedMessageV3.Builder<GatewayOuterClass.ServerTLSSettings.Builder>
-
getDefaultInstanceForType
- 指定者:
getDefaultInstanceForType在接口中com.google.protobuf.MessageLiteOrBuilder- 指定者:
getDefaultInstanceForType在接口中com.google.protobuf.MessageOrBuilder
-
build
- 指定者:
build在接口中com.google.protobuf.Message.Builder- 指定者:
build在接口中com.google.protobuf.MessageLite.Builder
-
buildPartial
- 指定者:
buildPartial在接口中com.google.protobuf.Message.Builder- 指定者:
buildPartial在接口中com.google.protobuf.MessageLite.Builder
-
clone
- 指定者:
clone在接口中com.google.protobuf.Message.Builder- 指定者:
clone在接口中com.google.protobuf.MessageLite.Builder- 覆盖:
clone在类中com.google.protobuf.GeneratedMessageV3.Builder<GatewayOuterClass.ServerTLSSettings.Builder>
-
setField
public GatewayOuterClass.ServerTLSSettings.Builder setField(com.google.protobuf.Descriptors.FieldDescriptor field, Object value) - 指定者:
setField在接口中com.google.protobuf.Message.Builder- 覆盖:
setField在类中com.google.protobuf.GeneratedMessageV3.Builder<GatewayOuterClass.ServerTLSSettings.Builder>
-
clearField
public GatewayOuterClass.ServerTLSSettings.Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field) - 指定者:
clearField在接口中com.google.protobuf.Message.Builder- 覆盖:
clearField在类中com.google.protobuf.GeneratedMessageV3.Builder<GatewayOuterClass.ServerTLSSettings.Builder>
-
clearOneof
public GatewayOuterClass.ServerTLSSettings.Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) - 指定者:
clearOneof在接口中com.google.protobuf.Message.Builder- 覆盖:
clearOneof在类中com.google.protobuf.GeneratedMessageV3.Builder<GatewayOuterClass.ServerTLSSettings.Builder>
-
setRepeatedField
public GatewayOuterClass.ServerTLSSettings.Builder setRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field, int index, Object value) - 指定者:
setRepeatedField在接口中com.google.protobuf.Message.Builder- 覆盖:
setRepeatedField在类中com.google.protobuf.GeneratedMessageV3.Builder<GatewayOuterClass.ServerTLSSettings.Builder>
-
addRepeatedField
public GatewayOuterClass.ServerTLSSettings.Builder addRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field, Object value) - 指定者:
addRepeatedField在接口中com.google.protobuf.Message.Builder- 覆盖:
addRepeatedField在类中com.google.protobuf.GeneratedMessageV3.Builder<GatewayOuterClass.ServerTLSSettings.Builder>
-
mergeFrom
- 指定者:
mergeFrom在接口中com.google.protobuf.Message.Builder- 覆盖:
mergeFrom在类中com.google.protobuf.AbstractMessage.Builder<GatewayOuterClass.ServerTLSSettings.Builder>
-
mergeFrom
public GatewayOuterClass.ServerTLSSettings.Builder mergeFrom(GatewayOuterClass.ServerTLSSettings other) -
isInitialized
public final boolean isInitialized()- 指定者:
isInitialized在接口中com.google.protobuf.MessageLiteOrBuilder- 覆盖:
isInitialized在类中com.google.protobuf.GeneratedMessageV3.Builder<GatewayOuterClass.ServerTLSSettings.Builder>
-
mergeFrom
public GatewayOuterClass.ServerTLSSettings.Builder mergeFrom(com.google.protobuf.CodedInputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws IOException - 指定者:
mergeFrom在接口中com.google.protobuf.Message.Builder- 指定者:
mergeFrom在接口中com.google.protobuf.MessageLite.Builder- 覆盖:
mergeFrom在类中com.google.protobuf.AbstractMessage.Builder<GatewayOuterClass.ServerTLSSettings.Builder>- 抛出:
IOException
-
getHttpsRedirect
public boolean getHttpsRedirect()If set to true, the load balancer will send a 301 redirect for all http connections, asking the clients to use HTTPS.
bool https_redirect = 1;- 指定者:
getHttpsRedirect在接口中GatewayOuterClass.ServerTLSSettingsOrBuilder- 返回:
- The httpsRedirect.
-
setHttpsRedirect
If set to true, the load balancer will send a 301 redirect for all http connections, asking the clients to use HTTPS.
bool https_redirect = 1;- 参数:
value- The httpsRedirect to set.- 返回:
- This builder for chaining.
-
clearHttpsRedirect
If set to true, the load balancer will send a 301 redirect for all http connections, asking the clients to use HTTPS.
bool https_redirect = 1;- 返回:
- This builder for chaining.
-
getModeValue
public int getModeValue()Optional: Indicates whether connections to this port should be secured using TLS. The value of this field determines how TLS is enforced.
.istio.networking.v1alpha3.ServerTLSSettings.TLSmode mode = 2;- 指定者:
getModeValue在接口中GatewayOuterClass.ServerTLSSettingsOrBuilder- 返回:
- The enum numeric value on the wire for mode.
-
setModeValue
Optional: Indicates whether connections to this port should be secured using TLS. The value of this field determines how TLS is enforced.
.istio.networking.v1alpha3.ServerTLSSettings.TLSmode mode = 2;- 参数:
value- The enum numeric value on the wire for mode to set.- 返回:
- This builder for chaining.
-
getMode
Optional: Indicates whether connections to this port should be secured using TLS. The value of this field determines how TLS is enforced.
.istio.networking.v1alpha3.ServerTLSSettings.TLSmode mode = 2;- 指定者:
getMode在接口中GatewayOuterClass.ServerTLSSettingsOrBuilder- 返回:
- The mode.
-
setMode
public GatewayOuterClass.ServerTLSSettings.Builder setMode(GatewayOuterClass.ServerTLSSettings.TLSmode value) Optional: Indicates whether connections to this port should be secured using TLS. The value of this field determines how TLS is enforced.
.istio.networking.v1alpha3.ServerTLSSettings.TLSmode mode = 2;- 参数:
value- The mode to set.- 返回:
- This builder for chaining.
-
clearMode
Optional: Indicates whether connections to this port should be secured using TLS. The value of this field determines how TLS is enforced.
.istio.networking.v1alpha3.ServerTLSSettings.TLSmode mode = 2;- 返回:
- This builder for chaining.
-
getServerCertificate
REQUIRED if mode is `SIMPLE` or `MUTUAL`. The path to the file holding the server-side TLS certificate to use.
string server_certificate = 3;- 指定者:
getServerCertificate在接口中GatewayOuterClass.ServerTLSSettingsOrBuilder- 返回:
- The serverCertificate.
-
getServerCertificateBytes
public com.google.protobuf.ByteString getServerCertificateBytes()REQUIRED if mode is `SIMPLE` or `MUTUAL`. The path to the file holding the server-side TLS certificate to use.
string server_certificate = 3;- 指定者:
getServerCertificateBytes在接口中GatewayOuterClass.ServerTLSSettingsOrBuilder- 返回:
- The bytes for serverCertificate.
-
setServerCertificate
REQUIRED if mode is `SIMPLE` or `MUTUAL`. The path to the file holding the server-side TLS certificate to use.
string server_certificate = 3;- 参数:
value- The serverCertificate to set.- 返回:
- This builder for chaining.
-
clearServerCertificate
REQUIRED if mode is `SIMPLE` or `MUTUAL`. The path to the file holding the server-side TLS certificate to use.
string server_certificate = 3;- 返回:
- This builder for chaining.
-
setServerCertificateBytes
public GatewayOuterClass.ServerTLSSettings.Builder setServerCertificateBytes(com.google.protobuf.ByteString value) REQUIRED if mode is `SIMPLE` or `MUTUAL`. The path to the file holding the server-side TLS certificate to use.
string server_certificate = 3;- 参数:
value- The bytes for serverCertificate to set.- 返回:
- This builder for chaining.
-
getPrivateKey
REQUIRED if mode is `SIMPLE` or `MUTUAL`. The path to the file holding the server's private key.
string private_key = 4;- 指定者:
getPrivateKey在接口中GatewayOuterClass.ServerTLSSettingsOrBuilder- 返回:
- The privateKey.
-
getPrivateKeyBytes
public com.google.protobuf.ByteString getPrivateKeyBytes()REQUIRED if mode is `SIMPLE` or `MUTUAL`. The path to the file holding the server's private key.
string private_key = 4;- 指定者:
getPrivateKeyBytes在接口中GatewayOuterClass.ServerTLSSettingsOrBuilder- 返回:
- The bytes for privateKey.
-
setPrivateKey
REQUIRED if mode is `SIMPLE` or `MUTUAL`. The path to the file holding the server's private key.
string private_key = 4;- 参数:
value- The privateKey to set.- 返回:
- This builder for chaining.
-
clearPrivateKey
REQUIRED if mode is `SIMPLE` or `MUTUAL`. The path to the file holding the server's private key.
string private_key = 4;- 返回:
- This builder for chaining.
-
setPrivateKeyBytes
public GatewayOuterClass.ServerTLSSettings.Builder setPrivateKeyBytes(com.google.protobuf.ByteString value) REQUIRED if mode is `SIMPLE` or `MUTUAL`. The path to the file holding the server's private key.
string private_key = 4;- 参数:
value- The bytes for privateKey to set.- 返回:
- This builder for chaining.
-
getCaCertificates
REQUIRED if mode is `MUTUAL`. The path to a file containing certificate authority certificates to use in verifying a presented client side certificate.
string ca_certificates = 5;- 指定者:
getCaCertificates在接口中GatewayOuterClass.ServerTLSSettingsOrBuilder- 返回:
- The caCertificates.
-
getCaCertificatesBytes
public com.google.protobuf.ByteString getCaCertificatesBytes()REQUIRED if mode is `MUTUAL`. The path to a file containing certificate authority certificates to use in verifying a presented client side certificate.
string ca_certificates = 5;- 指定者:
getCaCertificatesBytes在接口中GatewayOuterClass.ServerTLSSettingsOrBuilder- 返回:
- The bytes for caCertificates.
-
setCaCertificates
REQUIRED if mode is `MUTUAL`. The path to a file containing certificate authority certificates to use in verifying a presented client side certificate.
string ca_certificates = 5;- 参数:
value- The caCertificates to set.- 返回:
- This builder for chaining.
-
clearCaCertificates
REQUIRED if mode is `MUTUAL`. The path to a file containing certificate authority certificates to use in verifying a presented client side certificate.
string ca_certificates = 5;- 返回:
- This builder for chaining.
-
setCaCertificatesBytes
public GatewayOuterClass.ServerTLSSettings.Builder setCaCertificatesBytes(com.google.protobuf.ByteString value) REQUIRED if mode is `MUTUAL`. The path to a file containing certificate authority certificates to use in verifying a presented client side certificate.
string ca_certificates = 5;- 参数:
value- The bytes for caCertificates to set.- 返回:
- This builder for chaining.
-
getCredentialName
For gateways running on Kubernetes, the name of the secret that holds the TLS certs including the CA certificates. Applicable only on Kubernetes. The secret (of type `generic`) should contain the following keys and values: `key: <privateKey>` and `cert: <serverCert>`. For mutual TLS, `cacert: <CACertificate>` can be provided in the same secret or a separate secret named `<secret>-cacert`. Secret of type tls for server certificates along with ca.crt key for CA certificates is also supported. Only one of server certificates and CA certificate or credentialName can be specified.
string credential_name = 10;- 指定者:
getCredentialName在接口中GatewayOuterClass.ServerTLSSettingsOrBuilder- 返回:
- The credentialName.
-
getCredentialNameBytes
public com.google.protobuf.ByteString getCredentialNameBytes()For gateways running on Kubernetes, the name of the secret that holds the TLS certs including the CA certificates. Applicable only on Kubernetes. The secret (of type `generic`) should contain the following keys and values: `key: <privateKey>` and `cert: <serverCert>`. For mutual TLS, `cacert: <CACertificate>` can be provided in the same secret or a separate secret named `<secret>-cacert`. Secret of type tls for server certificates along with ca.crt key for CA certificates is also supported. Only one of server certificates and CA certificate or credentialName can be specified.
string credential_name = 10;- 指定者:
getCredentialNameBytes在接口中GatewayOuterClass.ServerTLSSettingsOrBuilder- 返回:
- The bytes for credentialName.
-
setCredentialName
For gateways running on Kubernetes, the name of the secret that holds the TLS certs including the CA certificates. Applicable only on Kubernetes. The secret (of type `generic`) should contain the following keys and values: `key: <privateKey>` and `cert: <serverCert>`. For mutual TLS, `cacert: <CACertificate>` can be provided in the same secret or a separate secret named `<secret>-cacert`. Secret of type tls for server certificates along with ca.crt key for CA certificates is also supported. Only one of server certificates and CA certificate or credentialName can be specified.
string credential_name = 10;- 参数:
value- The credentialName to set.- 返回:
- This builder for chaining.
-
clearCredentialName
For gateways running on Kubernetes, the name of the secret that holds the TLS certs including the CA certificates. Applicable only on Kubernetes. The secret (of type `generic`) should contain the following keys and values: `key: <privateKey>` and `cert: <serverCert>`. For mutual TLS, `cacert: <CACertificate>` can be provided in the same secret or a separate secret named `<secret>-cacert`. Secret of type tls for server certificates along with ca.crt key for CA certificates is also supported. Only one of server certificates and CA certificate or credentialName can be specified.
string credential_name = 10;- 返回:
- This builder for chaining.
-
setCredentialNameBytes
public GatewayOuterClass.ServerTLSSettings.Builder setCredentialNameBytes(com.google.protobuf.ByteString value) For gateways running on Kubernetes, the name of the secret that holds the TLS certs including the CA certificates. Applicable only on Kubernetes. The secret (of type `generic`) should contain the following keys and values: `key: <privateKey>` and `cert: <serverCert>`. For mutual TLS, `cacert: <CACertificate>` can be provided in the same secret or a separate secret named `<secret>-cacert`. Secret of type tls for server certificates along with ca.crt key for CA certificates is also supported. Only one of server certificates and CA certificate or credentialName can be specified.
string credential_name = 10;- 参数:
value- The bytes for credentialName to set.- 返回:
- This builder for chaining.
-
getSubjectAltNamesList
public com.google.protobuf.ProtocolStringList getSubjectAltNamesList()A list of alternate names to verify the subject identity in the certificate presented by the client.
repeated string subject_alt_names = 6;- 指定者:
getSubjectAltNamesList在接口中GatewayOuterClass.ServerTLSSettingsOrBuilder- 返回:
- A list containing the subjectAltNames.
-
getSubjectAltNamesCount
public int getSubjectAltNamesCount()A list of alternate names to verify the subject identity in the certificate presented by the client.
repeated string subject_alt_names = 6;- 指定者:
getSubjectAltNamesCount在接口中GatewayOuterClass.ServerTLSSettingsOrBuilder- 返回:
- The count of subjectAltNames.
-
getSubjectAltNames
A list of alternate names to verify the subject identity in the certificate presented by the client.
repeated string subject_alt_names = 6;- 指定者:
getSubjectAltNames在接口中GatewayOuterClass.ServerTLSSettingsOrBuilder- 参数:
index- The index of the element to return.- 返回:
- The subjectAltNames at the given index.
-
getSubjectAltNamesBytes
public com.google.protobuf.ByteString getSubjectAltNamesBytes(int index) A list of alternate names to verify the subject identity in the certificate presented by the client.
repeated string subject_alt_names = 6;- 指定者:
getSubjectAltNamesBytes在接口中GatewayOuterClass.ServerTLSSettingsOrBuilder- 参数:
index- The index of the value to return.- 返回:
- The bytes of the subjectAltNames at the given index.
-
setSubjectAltNames
A list of alternate names to verify the subject identity in the certificate presented by the client.
repeated string subject_alt_names = 6;- 参数:
index- The index to set the value at.value- The subjectAltNames to set.- 返回:
- This builder for chaining.
-
addSubjectAltNames
A list of alternate names to verify the subject identity in the certificate presented by the client.
repeated string subject_alt_names = 6;- 参数:
value- The subjectAltNames to add.- 返回:
- This builder for chaining.
-
addAllSubjectAltNames
A list of alternate names to verify the subject identity in the certificate presented by the client.
repeated string subject_alt_names = 6;- 参数:
values- The subjectAltNames to add.- 返回:
- This builder for chaining.
-
clearSubjectAltNames
A list of alternate names to verify the subject identity in the certificate presented by the client.
repeated string subject_alt_names = 6;- 返回:
- This builder for chaining.
-
addSubjectAltNamesBytes
public GatewayOuterClass.ServerTLSSettings.Builder addSubjectAltNamesBytes(com.google.protobuf.ByteString value) A list of alternate names to verify the subject identity in the certificate presented by the client.
repeated string subject_alt_names = 6;- 参数:
value- The bytes of the subjectAltNames to add.- 返回:
- This builder for chaining.
-
getVerifyCertificateSpkiList
public com.google.protobuf.ProtocolStringList getVerifyCertificateSpkiList()An optional list of base64-encoded SHA-256 hashes of the SKPIs of authorized client certificates. Note: When both verify_certificate_hash and verify_certificate_spki are specified, a hash matching either value will result in the certificate being accepted.
repeated string verify_certificate_spki = 11;- 指定者:
getVerifyCertificateSpkiList在接口中GatewayOuterClass.ServerTLSSettingsOrBuilder- 返回:
- A list containing the verifyCertificateSpki.
-
getVerifyCertificateSpkiCount
public int getVerifyCertificateSpkiCount()An optional list of base64-encoded SHA-256 hashes of the SKPIs of authorized client certificates. Note: When both verify_certificate_hash and verify_certificate_spki are specified, a hash matching either value will result in the certificate being accepted.
repeated string verify_certificate_spki = 11;- 指定者:
getVerifyCertificateSpkiCount在接口中GatewayOuterClass.ServerTLSSettingsOrBuilder- 返回:
- The count of verifyCertificateSpki.
-
getVerifyCertificateSpki
An optional list of base64-encoded SHA-256 hashes of the SKPIs of authorized client certificates. Note: When both verify_certificate_hash and verify_certificate_spki are specified, a hash matching either value will result in the certificate being accepted.
repeated string verify_certificate_spki = 11;- 指定者:
getVerifyCertificateSpki在接口中GatewayOuterClass.ServerTLSSettingsOrBuilder- 参数:
index- The index of the element to return.- 返回:
- The verifyCertificateSpki at the given index.
-
getVerifyCertificateSpkiBytes
public com.google.protobuf.ByteString getVerifyCertificateSpkiBytes(int index) An optional list of base64-encoded SHA-256 hashes of the SKPIs of authorized client certificates. Note: When both verify_certificate_hash and verify_certificate_spki are specified, a hash matching either value will result in the certificate being accepted.
repeated string verify_certificate_spki = 11;- 指定者:
getVerifyCertificateSpkiBytes在接口中GatewayOuterClass.ServerTLSSettingsOrBuilder- 参数:
index- The index of the value to return.- 返回:
- The bytes of the verifyCertificateSpki at the given index.
-
setVerifyCertificateSpki
public GatewayOuterClass.ServerTLSSettings.Builder setVerifyCertificateSpki(int index, String value) An optional list of base64-encoded SHA-256 hashes of the SKPIs of authorized client certificates. Note: When both verify_certificate_hash and verify_certificate_spki are specified, a hash matching either value will result in the certificate being accepted.
repeated string verify_certificate_spki = 11;- 参数:
index- The index to set the value at.value- The verifyCertificateSpki to set.- 返回:
- This builder for chaining.
-
addVerifyCertificateSpki
An optional list of base64-encoded SHA-256 hashes of the SKPIs of authorized client certificates. Note: When both verify_certificate_hash and verify_certificate_spki are specified, a hash matching either value will result in the certificate being accepted.
repeated string verify_certificate_spki = 11;- 参数:
value- The verifyCertificateSpki to add.- 返回:
- This builder for chaining.
-
addAllVerifyCertificateSpki
public GatewayOuterClass.ServerTLSSettings.Builder addAllVerifyCertificateSpki(Iterable<String> values) An optional list of base64-encoded SHA-256 hashes of the SKPIs of authorized client certificates. Note: When both verify_certificate_hash and verify_certificate_spki are specified, a hash matching either value will result in the certificate being accepted.
repeated string verify_certificate_spki = 11;- 参数:
values- The verifyCertificateSpki to add.- 返回:
- This builder for chaining.
-
clearVerifyCertificateSpki
An optional list of base64-encoded SHA-256 hashes of the SKPIs of authorized client certificates. Note: When both verify_certificate_hash and verify_certificate_spki are specified, a hash matching either value will result in the certificate being accepted.
repeated string verify_certificate_spki = 11;- 返回:
- This builder for chaining.
-
addVerifyCertificateSpkiBytes
public GatewayOuterClass.ServerTLSSettings.Builder addVerifyCertificateSpkiBytes(com.google.protobuf.ByteString value) An optional list of base64-encoded SHA-256 hashes of the SKPIs of authorized client certificates. Note: When both verify_certificate_hash and verify_certificate_spki are specified, a hash matching either value will result in the certificate being accepted.
repeated string verify_certificate_spki = 11;- 参数:
value- The bytes of the verifyCertificateSpki to add.- 返回:
- This builder for chaining.
-
getVerifyCertificateHashList
public com.google.protobuf.ProtocolStringList getVerifyCertificateHashList()An optional list of hex-encoded SHA-256 hashes of the authorized client certificates. Both simple and colon separated formats are acceptable. Note: When both verify_certificate_hash and verify_certificate_spki are specified, a hash matching either value will result in the certificate being accepted.
repeated string verify_certificate_hash = 12;- 指定者:
getVerifyCertificateHashList在接口中GatewayOuterClass.ServerTLSSettingsOrBuilder- 返回:
- A list containing the verifyCertificateHash.
-
getVerifyCertificateHashCount
public int getVerifyCertificateHashCount()An optional list of hex-encoded SHA-256 hashes of the authorized client certificates. Both simple and colon separated formats are acceptable. Note: When both verify_certificate_hash and verify_certificate_spki are specified, a hash matching either value will result in the certificate being accepted.
repeated string verify_certificate_hash = 12;- 指定者:
getVerifyCertificateHashCount在接口中GatewayOuterClass.ServerTLSSettingsOrBuilder- 返回:
- The count of verifyCertificateHash.
-
getVerifyCertificateHash
An optional list of hex-encoded SHA-256 hashes of the authorized client certificates. Both simple and colon separated formats are acceptable. Note: When both verify_certificate_hash and verify_certificate_spki are specified, a hash matching either value will result in the certificate being accepted.
repeated string verify_certificate_hash = 12;- 指定者:
getVerifyCertificateHash在接口中GatewayOuterClass.ServerTLSSettingsOrBuilder- 参数:
index- The index of the element to return.- 返回:
- The verifyCertificateHash at the given index.
-
getVerifyCertificateHashBytes
public com.google.protobuf.ByteString getVerifyCertificateHashBytes(int index) An optional list of hex-encoded SHA-256 hashes of the authorized client certificates. Both simple and colon separated formats are acceptable. Note: When both verify_certificate_hash and verify_certificate_spki are specified, a hash matching either value will result in the certificate being accepted.
repeated string verify_certificate_hash = 12;- 指定者:
getVerifyCertificateHashBytes在接口中GatewayOuterClass.ServerTLSSettingsOrBuilder- 参数:
index- The index of the value to return.- 返回:
- The bytes of the verifyCertificateHash at the given index.
-
setVerifyCertificateHash
public GatewayOuterClass.ServerTLSSettings.Builder setVerifyCertificateHash(int index, String value) An optional list of hex-encoded SHA-256 hashes of the authorized client certificates. Both simple and colon separated formats are acceptable. Note: When both verify_certificate_hash and verify_certificate_spki are specified, a hash matching either value will result in the certificate being accepted.
repeated string verify_certificate_hash = 12;- 参数:
index- The index to set the value at.value- The verifyCertificateHash to set.- 返回:
- This builder for chaining.
-
addVerifyCertificateHash
An optional list of hex-encoded SHA-256 hashes of the authorized client certificates. Both simple and colon separated formats are acceptable. Note: When both verify_certificate_hash and verify_certificate_spki are specified, a hash matching either value will result in the certificate being accepted.
repeated string verify_certificate_hash = 12;- 参数:
value- The verifyCertificateHash to add.- 返回:
- This builder for chaining.
-
addAllVerifyCertificateHash
public GatewayOuterClass.ServerTLSSettings.Builder addAllVerifyCertificateHash(Iterable<String> values) An optional list of hex-encoded SHA-256 hashes of the authorized client certificates. Both simple and colon separated formats are acceptable. Note: When both verify_certificate_hash and verify_certificate_spki are specified, a hash matching either value will result in the certificate being accepted.
repeated string verify_certificate_hash = 12;- 参数:
values- The verifyCertificateHash to add.- 返回:
- This builder for chaining.
-
clearVerifyCertificateHash
An optional list of hex-encoded SHA-256 hashes of the authorized client certificates. Both simple and colon separated formats are acceptable. Note: When both verify_certificate_hash and verify_certificate_spki are specified, a hash matching either value will result in the certificate being accepted.
repeated string verify_certificate_hash = 12;- 返回:
- This builder for chaining.
-
addVerifyCertificateHashBytes
public GatewayOuterClass.ServerTLSSettings.Builder addVerifyCertificateHashBytes(com.google.protobuf.ByteString value) An optional list of hex-encoded SHA-256 hashes of the authorized client certificates. Both simple and colon separated formats are acceptable. Note: When both verify_certificate_hash and verify_certificate_spki are specified, a hash matching either value will result in the certificate being accepted.
repeated string verify_certificate_hash = 12;- 参数:
value- The bytes of the verifyCertificateHash to add.- 返回:
- This builder for chaining.
-
getMinProtocolVersionValue
public int getMinProtocolVersionValue()Optional: Minimum TLS protocol version.
.istio.networking.v1alpha3.ServerTLSSettings.TLSProtocol min_protocol_version = 7;- 指定者:
getMinProtocolVersionValue在接口中GatewayOuterClass.ServerTLSSettingsOrBuilder- 返回:
- The enum numeric value on the wire for minProtocolVersion.
-
setMinProtocolVersionValue
Optional: Minimum TLS protocol version.
.istio.networking.v1alpha3.ServerTLSSettings.TLSProtocol min_protocol_version = 7;- 参数:
value- The enum numeric value on the wire for minProtocolVersion to set.- 返回:
- This builder for chaining.
-
getMinProtocolVersion
Optional: Minimum TLS protocol version.
.istio.networking.v1alpha3.ServerTLSSettings.TLSProtocol min_protocol_version = 7;- 指定者:
getMinProtocolVersion在接口中GatewayOuterClass.ServerTLSSettingsOrBuilder- 返回:
- The minProtocolVersion.
-
setMinProtocolVersion
public GatewayOuterClass.ServerTLSSettings.Builder setMinProtocolVersion(GatewayOuterClass.ServerTLSSettings.TLSProtocol value) Optional: Minimum TLS protocol version.
.istio.networking.v1alpha3.ServerTLSSettings.TLSProtocol min_protocol_version = 7;- 参数:
value- The minProtocolVersion to set.- 返回:
- This builder for chaining.
-
clearMinProtocolVersion
Optional: Minimum TLS protocol version.
.istio.networking.v1alpha3.ServerTLSSettings.TLSProtocol min_protocol_version = 7;- 返回:
- This builder for chaining.
-
getMaxProtocolVersionValue
public int getMaxProtocolVersionValue()Optional: Maximum TLS protocol version.
.istio.networking.v1alpha3.ServerTLSSettings.TLSProtocol max_protocol_version = 8;- 指定者:
getMaxProtocolVersionValue在接口中GatewayOuterClass.ServerTLSSettingsOrBuilder- 返回:
- The enum numeric value on the wire for maxProtocolVersion.
-
setMaxProtocolVersionValue
Optional: Maximum TLS protocol version.
.istio.networking.v1alpha3.ServerTLSSettings.TLSProtocol max_protocol_version = 8;- 参数:
value- The enum numeric value on the wire for maxProtocolVersion to set.- 返回:
- This builder for chaining.
-
getMaxProtocolVersion
Optional: Maximum TLS protocol version.
.istio.networking.v1alpha3.ServerTLSSettings.TLSProtocol max_protocol_version = 8;- 指定者:
getMaxProtocolVersion在接口中GatewayOuterClass.ServerTLSSettingsOrBuilder- 返回:
- The maxProtocolVersion.
-
setMaxProtocolVersion
public GatewayOuterClass.ServerTLSSettings.Builder setMaxProtocolVersion(GatewayOuterClass.ServerTLSSettings.TLSProtocol value) Optional: Maximum TLS protocol version.
.istio.networking.v1alpha3.ServerTLSSettings.TLSProtocol max_protocol_version = 8;- 参数:
value- The maxProtocolVersion to set.- 返回:
- This builder for chaining.
-
clearMaxProtocolVersion
Optional: Maximum TLS protocol version.
.istio.networking.v1alpha3.ServerTLSSettings.TLSProtocol max_protocol_version = 8;- 返回:
- This builder for chaining.
-
getCipherSuitesList
public com.google.protobuf.ProtocolStringList getCipherSuitesList()Optional: If specified, only support the specified cipher list. Otherwise default to the default cipher list supported by Envoy.
repeated string cipher_suites = 9;- 指定者:
getCipherSuitesList在接口中GatewayOuterClass.ServerTLSSettingsOrBuilder- 返回:
- A list containing the cipherSuites.
-
getCipherSuitesCount
public int getCipherSuitesCount()Optional: If specified, only support the specified cipher list. Otherwise default to the default cipher list supported by Envoy.
repeated string cipher_suites = 9;- 指定者:
getCipherSuitesCount在接口中GatewayOuterClass.ServerTLSSettingsOrBuilder- 返回:
- The count of cipherSuites.
-
getCipherSuites
Optional: If specified, only support the specified cipher list. Otherwise default to the default cipher list supported by Envoy.
repeated string cipher_suites = 9;- 指定者:
getCipherSuites在接口中GatewayOuterClass.ServerTLSSettingsOrBuilder- 参数:
index- The index of the element to return.- 返回:
- The cipherSuites at the given index.
-
getCipherSuitesBytes
public com.google.protobuf.ByteString getCipherSuitesBytes(int index) Optional: If specified, only support the specified cipher list. Otherwise default to the default cipher list supported by Envoy.
repeated string cipher_suites = 9;- 指定者:
getCipherSuitesBytes在接口中GatewayOuterClass.ServerTLSSettingsOrBuilder- 参数:
index- The index of the value to return.- 返回:
- The bytes of the cipherSuites at the given index.
-
setCipherSuites
Optional: If specified, only support the specified cipher list. Otherwise default to the default cipher list supported by Envoy.
repeated string cipher_suites = 9;- 参数:
index- The index to set the value at.value- The cipherSuites to set.- 返回:
- This builder for chaining.
-
addCipherSuites
Optional: If specified, only support the specified cipher list. Otherwise default to the default cipher list supported by Envoy.
repeated string cipher_suites = 9;- 参数:
value- The cipherSuites to add.- 返回:
- This builder for chaining.
-
addAllCipherSuites
Optional: If specified, only support the specified cipher list. Otherwise default to the default cipher list supported by Envoy.
repeated string cipher_suites = 9;- 参数:
values- The cipherSuites to add.- 返回:
- This builder for chaining.
-
clearCipherSuites
Optional: If specified, only support the specified cipher list. Otherwise default to the default cipher list supported by Envoy.
repeated string cipher_suites = 9;- 返回:
- This builder for chaining.
-
addCipherSuitesBytes
public GatewayOuterClass.ServerTLSSettings.Builder addCipherSuitesBytes(com.google.protobuf.ByteString value) Optional: If specified, only support the specified cipher list. Otherwise default to the default cipher list supported by Envoy.
repeated string cipher_suites = 9;- 参数:
value- The bytes of the cipherSuites to add.- 返回:
- This builder for chaining.
-
setUnknownFields
public final GatewayOuterClass.ServerTLSSettings.Builder setUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields) - 指定者:
setUnknownFields在接口中com.google.protobuf.Message.Builder- 覆盖:
setUnknownFields在类中com.google.protobuf.GeneratedMessageV3.Builder<GatewayOuterClass.ServerTLSSettings.Builder>
-
mergeUnknownFields
public final GatewayOuterClass.ServerTLSSettings.Builder mergeUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields) - 指定者:
mergeUnknownFields在接口中com.google.protobuf.Message.Builder- 覆盖:
mergeUnknownFields在类中com.google.protobuf.GeneratedMessageV3.Builder<GatewayOuterClass.ServerTLSSettings.Builder>
-