Package io.envoyproxy.envoy.api.v2.auth
Class DownstreamTlsContext.Builder
java.lang.Object
com.google.protobuf.AbstractMessageLite.Builder
com.google.protobuf.AbstractMessage.Builder<BuilderT>
com.google.protobuf.GeneratedMessageV3.Builder<DownstreamTlsContext.Builder>
io.envoyproxy.envoy.api.v2.auth.DownstreamTlsContext.Builder
- All Implemented Interfaces:
com.google.protobuf.Message.Builder,com.google.protobuf.MessageLite.Builder,com.google.protobuf.MessageLiteOrBuilder,com.google.protobuf.MessageOrBuilder,DownstreamTlsContextOrBuilder,Cloneable
- Enclosing class:
- DownstreamTlsContext
public static final class DownstreamTlsContext.Builder
extends com.google.protobuf.GeneratedMessageV3.Builder<DownstreamTlsContext.Builder>
implements DownstreamTlsContextOrBuilder
[#next-free-field: 8]Protobuf type
envoy.api.v2.auth.DownstreamTlsContext-
Method Summary
Modifier and TypeMethodDescriptionaddRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field, Object value) build()clear()Common TLS context settings.Config for controlling stateless TLS session resumption: setting this to true will cause the TLS server to not issue TLS session tickets for the purposes of stateless TLS session resumption.clearField(com.google.protobuf.Descriptors.FieldDescriptor field) clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) If specified, Envoy will reject connections without a valid client certificate.If specified, Envoy will reject connections without a valid and matching SNI.TLS session ticket key settings.Config for fetching TLS session ticket keys via SDS API.If specified, ``session_timeout`` will change the maximum lifetime (in seconds) of the TLS session.clone()Common TLS context settings.Common TLS context settings.Common TLS context settings.static final com.google.protobuf.Descriptors.Descriptorcom.google.protobuf.Descriptors.DescriptorbooleanConfig for controlling stateless TLS session resumption: setting this to true will cause the TLS server to not issue TLS session tickets for the purposes of stateless TLS session resumption.com.google.protobuf.BoolValueIf specified, Envoy will reject connections without a valid client certificate.com.google.protobuf.BoolValue.BuilderIf specified, Envoy will reject connections without a valid client certificate.com.google.protobuf.BoolValueOrBuilderIf specified, Envoy will reject connections without a valid client certificate.com.google.protobuf.BoolValueIf specified, Envoy will reject connections without a valid and matching SNI.com.google.protobuf.BoolValue.BuilderIf specified, Envoy will reject connections without a valid and matching SNI.com.google.protobuf.BoolValueOrBuilderIf specified, Envoy will reject connections without a valid and matching SNI.TLS session ticket key settings.TLS session ticket key settings.TLS session ticket key settings.Config for fetching TLS session ticket keys via SDS API.Config for fetching TLS session ticket keys via SDS API.Config for fetching TLS session ticket keys via SDS API.com.google.protobuf.DurationIf specified, ``session_timeout`` will change the maximum lifetime (in seconds) of the TLS session.com.google.protobuf.Duration.BuilderIf specified, ``session_timeout`` will change the maximum lifetime (in seconds) of the TLS session.com.google.protobuf.DurationOrBuilderIf specified, ``session_timeout`` will change the maximum lifetime (in seconds) of the TLS session.booleanCommon TLS context settings.booleanConfig for controlling stateless TLS session resumption: setting this to true will cause the TLS server to not issue TLS session tickets for the purposes of stateless TLS session resumption.booleanIf specified, Envoy will reject connections without a valid client certificate.booleanIf specified, Envoy will reject connections without a valid and matching SNI.booleanTLS session ticket key settings.booleanConfig for fetching TLS session ticket keys via SDS API.booleanIf specified, ``session_timeout`` will change the maximum lifetime (in seconds) of the TLS session.protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTablefinal booleanCommon TLS context settings.mergeFrom(com.google.protobuf.CodedInputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) mergeFrom(com.google.protobuf.Message other) mergeFrom(DownstreamTlsContext other) mergeRequireClientCertificate(com.google.protobuf.BoolValue value) If specified, Envoy will reject connections without a valid client certificate.mergeRequireSni(com.google.protobuf.BoolValue value) If specified, Envoy will reject connections without a valid and matching SNI.TLS session ticket key settings.Config for fetching TLS session ticket keys via SDS API.mergeSessionTimeout(com.google.protobuf.Duration value) If specified, ``session_timeout`` will change the maximum lifetime (in seconds) of the TLS session.mergeUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields) Common TLS context settings.setCommonTlsContext(CommonTlsContext.Builder builderForValue) Common TLS context settings.setDisableStatelessSessionResumption(boolean value) Config for controlling stateless TLS session resumption: setting this to true will cause the TLS server to not issue TLS session tickets for the purposes of stateless TLS session resumption.setRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field, int index, Object value) setRequireClientCertificate(com.google.protobuf.BoolValue value) If specified, Envoy will reject connections without a valid client certificate.setRequireClientCertificate(com.google.protobuf.BoolValue.Builder builderForValue) If specified, Envoy will reject connections without a valid client certificate.setRequireSni(com.google.protobuf.BoolValue value) If specified, Envoy will reject connections without a valid and matching SNI.setRequireSni(com.google.protobuf.BoolValue.Builder builderForValue) If specified, Envoy will reject connections without a valid and matching SNI.TLS session ticket key settings.setSessionTicketKeys(TlsSessionTicketKeys.Builder builderForValue) TLS session ticket key settings.Config for fetching TLS session ticket keys via SDS API.setSessionTicketKeysSdsSecretConfig(SdsSecretConfig.Builder builderForValue) Config for fetching TLS session ticket keys via SDS API.setSessionTimeout(com.google.protobuf.Duration value) If specified, ``session_timeout`` will change the maximum lifetime (in seconds) of the TLS session.setSessionTimeout(com.google.protobuf.Duration.Builder builderForValue) If specified, ``session_timeout`` will change the maximum lifetime (in seconds) of the TLS session.setUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields) Methods inherited from class com.google.protobuf.GeneratedMessageV3.Builder
getAllFields, getField, getFieldBuilder, getOneofFieldDescriptor, getParentForChildren, getRepeatedField, getRepeatedFieldBuilder, getRepeatedFieldCount, getUnknownFields, getUnknownFieldSetBuilder, hasField, hasOneof, internalGetMapField, internalGetMapFieldReflection, internalGetMutableMapField, internalGetMutableMapFieldReflection, isClean, markClean, mergeUnknownLengthDelimitedField, mergeUnknownVarintField, newBuilderForField, onBuilt, onChanged, parseUnknownField, setUnknownFieldSetBuilder, setUnknownFieldsProto3Methods inherited from class com.google.protobuf.AbstractMessage.Builder
findInitializationErrors, getInitializationErrorString, internalMergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, newUninitializedMessageException, toStringMethods inherited from class com.google.protobuf.AbstractMessageLite.Builder
addAll, addAll, mergeDelimitedFrom, mergeDelimitedFrom, mergeFrom, newUninitializedMessageExceptionMethods inherited from class java.lang.Object
equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, waitMethods inherited from interface com.google.protobuf.Message.Builder
mergeDelimitedFrom, mergeDelimitedFromMethods inherited from interface com.google.protobuf.MessageLite.Builder
mergeFromMethods inherited from interface com.google.protobuf.MessageOrBuilder
findInitializationErrors, getAllFields, getField, getInitializationErrorString, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, getUnknownFields, hasField, hasOneof
-
Method Details
-
getDescriptor
public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() -
internalGetFieldAccessorTable
protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()- Specified by:
internalGetFieldAccessorTablein classcom.google.protobuf.GeneratedMessageV3.Builder<DownstreamTlsContext.Builder>
-
clear
- Specified by:
clearin interfacecom.google.protobuf.Message.Builder- Specified by:
clearin interfacecom.google.protobuf.MessageLite.Builder- Overrides:
clearin classcom.google.protobuf.GeneratedMessageV3.Builder<DownstreamTlsContext.Builder>
-
getDescriptorForType
public com.google.protobuf.Descriptors.Descriptor getDescriptorForType()- Specified by:
getDescriptorForTypein interfacecom.google.protobuf.Message.Builder- Specified by:
getDescriptorForTypein interfacecom.google.protobuf.MessageOrBuilder- Overrides:
getDescriptorForTypein classcom.google.protobuf.GeneratedMessageV3.Builder<DownstreamTlsContext.Builder>
-
getDefaultInstanceForType
- Specified by:
getDefaultInstanceForTypein interfacecom.google.protobuf.MessageLiteOrBuilder- Specified by:
getDefaultInstanceForTypein interfacecom.google.protobuf.MessageOrBuilder
-
build
- Specified by:
buildin interfacecom.google.protobuf.Message.Builder- Specified by:
buildin interfacecom.google.protobuf.MessageLite.Builder
-
buildPartial
- Specified by:
buildPartialin interfacecom.google.protobuf.Message.Builder- Specified by:
buildPartialin interfacecom.google.protobuf.MessageLite.Builder
-
clone
- Specified by:
clonein interfacecom.google.protobuf.Message.Builder- Specified by:
clonein interfacecom.google.protobuf.MessageLite.Builder- Overrides:
clonein classcom.google.protobuf.GeneratedMessageV3.Builder<DownstreamTlsContext.Builder>
-
setField
public DownstreamTlsContext.Builder setField(com.google.protobuf.Descriptors.FieldDescriptor field, Object value) - Specified by:
setFieldin interfacecom.google.protobuf.Message.Builder- Overrides:
setFieldin classcom.google.protobuf.GeneratedMessageV3.Builder<DownstreamTlsContext.Builder>
-
clearField
public DownstreamTlsContext.Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field) - Specified by:
clearFieldin interfacecom.google.protobuf.Message.Builder- Overrides:
clearFieldin classcom.google.protobuf.GeneratedMessageV3.Builder<DownstreamTlsContext.Builder>
-
clearOneof
public DownstreamTlsContext.Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) - Specified by:
clearOneofin interfacecom.google.protobuf.Message.Builder- Overrides:
clearOneofin classcom.google.protobuf.GeneratedMessageV3.Builder<DownstreamTlsContext.Builder>
-
setRepeatedField
public DownstreamTlsContext.Builder setRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field, int index, Object value) - Specified by:
setRepeatedFieldin interfacecom.google.protobuf.Message.Builder- Overrides:
setRepeatedFieldin classcom.google.protobuf.GeneratedMessageV3.Builder<DownstreamTlsContext.Builder>
-
addRepeatedField
public DownstreamTlsContext.Builder addRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field, Object value) - Specified by:
addRepeatedFieldin interfacecom.google.protobuf.Message.Builder- Overrides:
addRepeatedFieldin classcom.google.protobuf.GeneratedMessageV3.Builder<DownstreamTlsContext.Builder>
-
mergeFrom
- Specified by:
mergeFromin interfacecom.google.protobuf.Message.Builder- Overrides:
mergeFromin classcom.google.protobuf.AbstractMessage.Builder<DownstreamTlsContext.Builder>
-
mergeFrom
-
isInitialized
public final boolean isInitialized()- Specified by:
isInitializedin interfacecom.google.protobuf.MessageLiteOrBuilder- Overrides:
isInitializedin classcom.google.protobuf.GeneratedMessageV3.Builder<DownstreamTlsContext.Builder>
-
mergeFrom
public DownstreamTlsContext.Builder mergeFrom(com.google.protobuf.CodedInputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws IOException - Specified by:
mergeFromin interfacecom.google.protobuf.Message.Builder- Specified by:
mergeFromin interfacecom.google.protobuf.MessageLite.Builder- Overrides:
mergeFromin classcom.google.protobuf.AbstractMessage.Builder<DownstreamTlsContext.Builder>- Throws:
IOException
-
getSessionTicketKeysTypeCase
- Specified by:
getSessionTicketKeysTypeCasein interfaceDownstreamTlsContextOrBuilder
-
clearSessionTicketKeysType
-
hasCommonTlsContext
public boolean hasCommonTlsContext()Common TLS context settings.
.envoy.api.v2.auth.CommonTlsContext common_tls_context = 1;- Specified by:
hasCommonTlsContextin interfaceDownstreamTlsContextOrBuilder- Returns:
- Whether the commonTlsContext field is set.
-
getCommonTlsContext
Common TLS context settings.
.envoy.api.v2.auth.CommonTlsContext common_tls_context = 1;- Specified by:
getCommonTlsContextin interfaceDownstreamTlsContextOrBuilder- Returns:
- The commonTlsContext.
-
setCommonTlsContext
Common TLS context settings.
.envoy.api.v2.auth.CommonTlsContext common_tls_context = 1; -
setCommonTlsContext
Common TLS context settings.
.envoy.api.v2.auth.CommonTlsContext common_tls_context = 1; -
mergeCommonTlsContext
Common TLS context settings.
.envoy.api.v2.auth.CommonTlsContext common_tls_context = 1; -
clearCommonTlsContext
Common TLS context settings.
.envoy.api.v2.auth.CommonTlsContext common_tls_context = 1; -
getCommonTlsContextBuilder
Common TLS context settings.
.envoy.api.v2.auth.CommonTlsContext common_tls_context = 1; -
getCommonTlsContextOrBuilder
Common TLS context settings.
.envoy.api.v2.auth.CommonTlsContext common_tls_context = 1;- Specified by:
getCommonTlsContextOrBuilderin interfaceDownstreamTlsContextOrBuilder
-
hasRequireClientCertificate
public boolean hasRequireClientCertificate()If specified, Envoy will reject connections without a valid client certificate.
.google.protobuf.BoolValue require_client_certificate = 2;- Specified by:
hasRequireClientCertificatein interfaceDownstreamTlsContextOrBuilder- Returns:
- Whether the requireClientCertificate field is set.
-
getRequireClientCertificate
public com.google.protobuf.BoolValue getRequireClientCertificate()If specified, Envoy will reject connections without a valid client certificate.
.google.protobuf.BoolValue require_client_certificate = 2;- Specified by:
getRequireClientCertificatein interfaceDownstreamTlsContextOrBuilder- Returns:
- The requireClientCertificate.
-
setRequireClientCertificate
public DownstreamTlsContext.Builder setRequireClientCertificate(com.google.protobuf.BoolValue value) If specified, Envoy will reject connections without a valid client certificate.
.google.protobuf.BoolValue require_client_certificate = 2; -
setRequireClientCertificate
public DownstreamTlsContext.Builder setRequireClientCertificate(com.google.protobuf.BoolValue.Builder builderForValue) If specified, Envoy will reject connections without a valid client certificate.
.google.protobuf.BoolValue require_client_certificate = 2; -
mergeRequireClientCertificate
public DownstreamTlsContext.Builder mergeRequireClientCertificate(com.google.protobuf.BoolValue value) If specified, Envoy will reject connections without a valid client certificate.
.google.protobuf.BoolValue require_client_certificate = 2; -
clearRequireClientCertificate
If specified, Envoy will reject connections without a valid client certificate.
.google.protobuf.BoolValue require_client_certificate = 2; -
getRequireClientCertificateBuilder
public com.google.protobuf.BoolValue.Builder getRequireClientCertificateBuilder()If specified, Envoy will reject connections without a valid client certificate.
.google.protobuf.BoolValue require_client_certificate = 2; -
getRequireClientCertificateOrBuilder
public com.google.protobuf.BoolValueOrBuilder getRequireClientCertificateOrBuilder()If specified, Envoy will reject connections without a valid client certificate.
.google.protobuf.BoolValue require_client_certificate = 2;- Specified by:
getRequireClientCertificateOrBuilderin interfaceDownstreamTlsContextOrBuilder
-
hasRequireSni
public boolean hasRequireSni()If specified, Envoy will reject connections without a valid and matching SNI. [#not-implemented-hide:]
.google.protobuf.BoolValue require_sni = 3;- Specified by:
hasRequireSniin interfaceDownstreamTlsContextOrBuilder- Returns:
- Whether the requireSni field is set.
-
getRequireSni
public com.google.protobuf.BoolValue getRequireSni()If specified, Envoy will reject connections without a valid and matching SNI. [#not-implemented-hide:]
.google.protobuf.BoolValue require_sni = 3;- Specified by:
getRequireSniin interfaceDownstreamTlsContextOrBuilder- Returns:
- The requireSni.
-
setRequireSni
If specified, Envoy will reject connections without a valid and matching SNI. [#not-implemented-hide:]
.google.protobuf.BoolValue require_sni = 3; -
setRequireSni
public DownstreamTlsContext.Builder setRequireSni(com.google.protobuf.BoolValue.Builder builderForValue) If specified, Envoy will reject connections without a valid and matching SNI. [#not-implemented-hide:]
.google.protobuf.BoolValue require_sni = 3; -
mergeRequireSni
If specified, Envoy will reject connections without a valid and matching SNI. [#not-implemented-hide:]
.google.protobuf.BoolValue require_sni = 3; -
clearRequireSni
If specified, Envoy will reject connections without a valid and matching SNI. [#not-implemented-hide:]
.google.protobuf.BoolValue require_sni = 3; -
getRequireSniBuilder
public com.google.protobuf.BoolValue.Builder getRequireSniBuilder()If specified, Envoy will reject connections without a valid and matching SNI. [#not-implemented-hide:]
.google.protobuf.BoolValue require_sni = 3; -
getRequireSniOrBuilder
public com.google.protobuf.BoolValueOrBuilder getRequireSniOrBuilder()If specified, Envoy will reject connections without a valid and matching SNI. [#not-implemented-hide:]
.google.protobuf.BoolValue require_sni = 3;- Specified by:
getRequireSniOrBuilderin interfaceDownstreamTlsContextOrBuilder
-
hasSessionTicketKeys
public boolean hasSessionTicketKeys()TLS session ticket key settings.
.envoy.api.v2.auth.TlsSessionTicketKeys session_ticket_keys = 4;- Specified by:
hasSessionTicketKeysin interfaceDownstreamTlsContextOrBuilder- Returns:
- Whether the sessionTicketKeys field is set.
-
getSessionTicketKeys
TLS session ticket key settings.
.envoy.api.v2.auth.TlsSessionTicketKeys session_ticket_keys = 4;- Specified by:
getSessionTicketKeysin interfaceDownstreamTlsContextOrBuilder- Returns:
- The sessionTicketKeys.
-
setSessionTicketKeys
TLS session ticket key settings.
.envoy.api.v2.auth.TlsSessionTicketKeys session_ticket_keys = 4; -
setSessionTicketKeys
public DownstreamTlsContext.Builder setSessionTicketKeys(TlsSessionTicketKeys.Builder builderForValue) TLS session ticket key settings.
.envoy.api.v2.auth.TlsSessionTicketKeys session_ticket_keys = 4; -
mergeSessionTicketKeys
TLS session ticket key settings.
.envoy.api.v2.auth.TlsSessionTicketKeys session_ticket_keys = 4; -
clearSessionTicketKeys
TLS session ticket key settings.
.envoy.api.v2.auth.TlsSessionTicketKeys session_ticket_keys = 4; -
getSessionTicketKeysBuilder
TLS session ticket key settings.
.envoy.api.v2.auth.TlsSessionTicketKeys session_ticket_keys = 4; -
getSessionTicketKeysOrBuilder
TLS session ticket key settings.
.envoy.api.v2.auth.TlsSessionTicketKeys session_ticket_keys = 4;- Specified by:
getSessionTicketKeysOrBuilderin interfaceDownstreamTlsContextOrBuilder
-
hasSessionTicketKeysSdsSecretConfig
public boolean hasSessionTicketKeysSdsSecretConfig()Config for fetching TLS session ticket keys via SDS API.
.envoy.api.v2.auth.SdsSecretConfig session_ticket_keys_sds_secret_config = 5;- Specified by:
hasSessionTicketKeysSdsSecretConfigin interfaceDownstreamTlsContextOrBuilder- Returns:
- Whether the sessionTicketKeysSdsSecretConfig field is set.
-
getSessionTicketKeysSdsSecretConfig
Config for fetching TLS session ticket keys via SDS API.
.envoy.api.v2.auth.SdsSecretConfig session_ticket_keys_sds_secret_config = 5;- Specified by:
getSessionTicketKeysSdsSecretConfigin interfaceDownstreamTlsContextOrBuilder- Returns:
- The sessionTicketKeysSdsSecretConfig.
-
setSessionTicketKeysSdsSecretConfig
Config for fetching TLS session ticket keys via SDS API.
.envoy.api.v2.auth.SdsSecretConfig session_ticket_keys_sds_secret_config = 5; -
setSessionTicketKeysSdsSecretConfig
public DownstreamTlsContext.Builder setSessionTicketKeysSdsSecretConfig(SdsSecretConfig.Builder builderForValue) Config for fetching TLS session ticket keys via SDS API.
.envoy.api.v2.auth.SdsSecretConfig session_ticket_keys_sds_secret_config = 5; -
mergeSessionTicketKeysSdsSecretConfig
Config for fetching TLS session ticket keys via SDS API.
.envoy.api.v2.auth.SdsSecretConfig session_ticket_keys_sds_secret_config = 5; -
clearSessionTicketKeysSdsSecretConfig
Config for fetching TLS session ticket keys via SDS API.
.envoy.api.v2.auth.SdsSecretConfig session_ticket_keys_sds_secret_config = 5; -
getSessionTicketKeysSdsSecretConfigBuilder
Config for fetching TLS session ticket keys via SDS API.
.envoy.api.v2.auth.SdsSecretConfig session_ticket_keys_sds_secret_config = 5; -
getSessionTicketKeysSdsSecretConfigOrBuilder
Config for fetching TLS session ticket keys via SDS API.
.envoy.api.v2.auth.SdsSecretConfig session_ticket_keys_sds_secret_config = 5;- Specified by:
getSessionTicketKeysSdsSecretConfigOrBuilderin interfaceDownstreamTlsContextOrBuilder
-
hasDisableStatelessSessionResumption
public boolean hasDisableStatelessSessionResumption()Config for controlling stateless TLS session resumption: setting this to true will cause the TLS server to not issue TLS session tickets for the purposes of stateless TLS session resumption. If set to false, the TLS server will issue TLS session tickets and encrypt/decrypt them using the keys specified through either :ref:`session_ticket_keys <envoy_api_field_auth.DownstreamTlsContext.session_ticket_keys>` or :ref:`session_ticket_keys_sds_secret_config <envoy_api_field_auth.DownstreamTlsContext.session_ticket_keys_sds_secret_config>`. If this config is set to false and no keys are explicitly configured, the TLS server will issue TLS session tickets and encrypt/decrypt them using an internally-generated and managed key, with the implication that sessions cannot be resumed across hot restarts or on different hosts.
bool disable_stateless_session_resumption = 7;- Specified by:
hasDisableStatelessSessionResumptionin interfaceDownstreamTlsContextOrBuilder- Returns:
- Whether the disableStatelessSessionResumption field is set.
-
getDisableStatelessSessionResumption
public boolean getDisableStatelessSessionResumption()Config for controlling stateless TLS session resumption: setting this to true will cause the TLS server to not issue TLS session tickets for the purposes of stateless TLS session resumption. If set to false, the TLS server will issue TLS session tickets and encrypt/decrypt them using the keys specified through either :ref:`session_ticket_keys <envoy_api_field_auth.DownstreamTlsContext.session_ticket_keys>` or :ref:`session_ticket_keys_sds_secret_config <envoy_api_field_auth.DownstreamTlsContext.session_ticket_keys_sds_secret_config>`. If this config is set to false and no keys are explicitly configured, the TLS server will issue TLS session tickets and encrypt/decrypt them using an internally-generated and managed key, with the implication that sessions cannot be resumed across hot restarts or on different hosts.
bool disable_stateless_session_resumption = 7;- Specified by:
getDisableStatelessSessionResumptionin interfaceDownstreamTlsContextOrBuilder- Returns:
- The disableStatelessSessionResumption.
-
setDisableStatelessSessionResumption
Config for controlling stateless TLS session resumption: setting this to true will cause the TLS server to not issue TLS session tickets for the purposes of stateless TLS session resumption. If set to false, the TLS server will issue TLS session tickets and encrypt/decrypt them using the keys specified through either :ref:`session_ticket_keys <envoy_api_field_auth.DownstreamTlsContext.session_ticket_keys>` or :ref:`session_ticket_keys_sds_secret_config <envoy_api_field_auth.DownstreamTlsContext.session_ticket_keys_sds_secret_config>`. If this config is set to false and no keys are explicitly configured, the TLS server will issue TLS session tickets and encrypt/decrypt them using an internally-generated and managed key, with the implication that sessions cannot be resumed across hot restarts or on different hosts.
bool disable_stateless_session_resumption = 7;- Parameters:
value- The disableStatelessSessionResumption to set.- Returns:
- This builder for chaining.
-
clearDisableStatelessSessionResumption
Config for controlling stateless TLS session resumption: setting this to true will cause the TLS server to not issue TLS session tickets for the purposes of stateless TLS session resumption. If set to false, the TLS server will issue TLS session tickets and encrypt/decrypt them using the keys specified through either :ref:`session_ticket_keys <envoy_api_field_auth.DownstreamTlsContext.session_ticket_keys>` or :ref:`session_ticket_keys_sds_secret_config <envoy_api_field_auth.DownstreamTlsContext.session_ticket_keys_sds_secret_config>`. If this config is set to false and no keys are explicitly configured, the TLS server will issue TLS session tickets and encrypt/decrypt them using an internally-generated and managed key, with the implication that sessions cannot be resumed across hot restarts or on different hosts.
bool disable_stateless_session_resumption = 7;- Returns:
- This builder for chaining.
-
hasSessionTimeout
public boolean hasSessionTimeout()If specified, ``session_timeout`` will change the maximum lifetime (in seconds) of the TLS session. Currently this value is used as a hint for the `TLS session ticket lifetime (for TLSv1.2) <https://tools.ietf.org/html/rfc5077#section-5.6>`_. Only seconds can be specified (fractional seconds are ignored).
.google.protobuf.Duration session_timeout = 6 [(.validate.rules) = { ... }- Specified by:
hasSessionTimeoutin interfaceDownstreamTlsContextOrBuilder- Returns:
- Whether the sessionTimeout field is set.
-
getSessionTimeout
public com.google.protobuf.Duration getSessionTimeout()If specified, ``session_timeout`` will change the maximum lifetime (in seconds) of the TLS session. Currently this value is used as a hint for the `TLS session ticket lifetime (for TLSv1.2) <https://tools.ietf.org/html/rfc5077#section-5.6>`_. Only seconds can be specified (fractional seconds are ignored).
.google.protobuf.Duration session_timeout = 6 [(.validate.rules) = { ... }- Specified by:
getSessionTimeoutin interfaceDownstreamTlsContextOrBuilder- Returns:
- The sessionTimeout.
-
setSessionTimeout
If specified, ``session_timeout`` will change the maximum lifetime (in seconds) of the TLS session. Currently this value is used as a hint for the `TLS session ticket lifetime (for TLSv1.2) <https://tools.ietf.org/html/rfc5077#section-5.6>`_. Only seconds can be specified (fractional seconds are ignored).
.google.protobuf.Duration session_timeout = 6 [(.validate.rules) = { ... } -
setSessionTimeout
public DownstreamTlsContext.Builder setSessionTimeout(com.google.protobuf.Duration.Builder builderForValue) If specified, ``session_timeout`` will change the maximum lifetime (in seconds) of the TLS session. Currently this value is used as a hint for the `TLS session ticket lifetime (for TLSv1.2) <https://tools.ietf.org/html/rfc5077#section-5.6>`_. Only seconds can be specified (fractional seconds are ignored).
.google.protobuf.Duration session_timeout = 6 [(.validate.rules) = { ... } -
mergeSessionTimeout
If specified, ``session_timeout`` will change the maximum lifetime (in seconds) of the TLS session. Currently this value is used as a hint for the `TLS session ticket lifetime (for TLSv1.2) <https://tools.ietf.org/html/rfc5077#section-5.6>`_. Only seconds can be specified (fractional seconds are ignored).
.google.protobuf.Duration session_timeout = 6 [(.validate.rules) = { ... } -
clearSessionTimeout
If specified, ``session_timeout`` will change the maximum lifetime (in seconds) of the TLS session. Currently this value is used as a hint for the `TLS session ticket lifetime (for TLSv1.2) <https://tools.ietf.org/html/rfc5077#section-5.6>`_. Only seconds can be specified (fractional seconds are ignored).
.google.protobuf.Duration session_timeout = 6 [(.validate.rules) = { ... } -
getSessionTimeoutBuilder
public com.google.protobuf.Duration.Builder getSessionTimeoutBuilder()If specified, ``session_timeout`` will change the maximum lifetime (in seconds) of the TLS session. Currently this value is used as a hint for the `TLS session ticket lifetime (for TLSv1.2) <https://tools.ietf.org/html/rfc5077#section-5.6>`_. Only seconds can be specified (fractional seconds are ignored).
.google.protobuf.Duration session_timeout = 6 [(.validate.rules) = { ... } -
getSessionTimeoutOrBuilder
public com.google.protobuf.DurationOrBuilder getSessionTimeoutOrBuilder()If specified, ``session_timeout`` will change the maximum lifetime (in seconds) of the TLS session. Currently this value is used as a hint for the `TLS session ticket lifetime (for TLSv1.2) <https://tools.ietf.org/html/rfc5077#section-5.6>`_. Only seconds can be specified (fractional seconds are ignored).
.google.protobuf.Duration session_timeout = 6 [(.validate.rules) = { ... }- Specified by:
getSessionTimeoutOrBuilderin interfaceDownstreamTlsContextOrBuilder
-
setUnknownFields
public final DownstreamTlsContext.Builder setUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields) - Specified by:
setUnknownFieldsin interfacecom.google.protobuf.Message.Builder- Overrides:
setUnknownFieldsin classcom.google.protobuf.GeneratedMessageV3.Builder<DownstreamTlsContext.Builder>
-
mergeUnknownFields
public final DownstreamTlsContext.Builder mergeUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields) - Specified by:
mergeUnknownFieldsin interfacecom.google.protobuf.Message.Builder- Overrides:
mergeUnknownFieldsin classcom.google.protobuf.GeneratedMessageV3.Builder<DownstreamTlsContext.Builder>
-