public final class TlsCertificate extends com.google.protobuf.GeneratedMessageV3 implements TlsCertificateOrBuilder
[#next-free-field: 8]Protobuf type
envoy.extensions.transport_sockets.tls.v4alpha.TlsCertificate| Modifier and Type | Class and Description |
|---|---|
static class |
TlsCertificate.Builder
[#next-free-field: 8]
Protobuf type
envoy.extensions.transport_sockets.tls.v4alpha.TlsCertificate |
com.google.protobuf.GeneratedMessageV3.BuilderParent, com.google.protobuf.GeneratedMessageV3.ExtendableBuilder<MessageType extends com.google.protobuf.GeneratedMessageV3.ExtendableMessage,BuilderType extends com.google.protobuf.GeneratedMessageV3.ExtendableBuilder<MessageType,BuilderType>>, com.google.protobuf.GeneratedMessageV3.ExtendableMessage<MessageType extends com.google.protobuf.GeneratedMessageV3.ExtendableMessage>, com.google.protobuf.GeneratedMessageV3.ExtendableMessageOrBuilder<MessageType extends com.google.protobuf.GeneratedMessageV3.ExtendableMessage>, com.google.protobuf.GeneratedMessageV3.FieldAccessorTable, com.google.protobuf.GeneratedMessageV3.UnusedPrivateParameter| Modifier and Type | Field and Description |
|---|---|
static int |
CERTIFICATE_CHAIN_FIELD_NUMBER |
static int |
OCSP_STAPLE_FIELD_NUMBER |
static int |
PASSWORD_FIELD_NUMBER |
static int |
PRIVATE_KEY_FIELD_NUMBER |
static int |
PRIVATE_KEY_PROVIDER_FIELD_NUMBER |
static int |
SIGNED_CERTIFICATE_TIMESTAMP_FIELD_NUMBER |
static int |
WATCHED_DIRECTORY_FIELD_NUMBER |
| Modifier and Type | Method and Description |
|---|---|
boolean |
equals(Object obj) |
DataSource |
getCertificateChain()
The TLS certificate chain.
|
DataSourceOrBuilder |
getCertificateChainOrBuilder()
The TLS certificate chain.
|
static TlsCertificate |
getDefaultInstance() |
TlsCertificate |
getDefaultInstanceForType() |
static com.google.protobuf.Descriptors.Descriptor |
getDescriptor() |
DataSource |
getOcspStaple()
The OCSP response to be stapled with this certificate during the handshake.
|
DataSourceOrBuilder |
getOcspStapleOrBuilder()
The OCSP response to be stapled with this certificate during the handshake.
|
com.google.protobuf.Parser<TlsCertificate> |
getParserForType() |
DataSource |
getPassword()
The password to decrypt the TLS private key.
|
DataSourceOrBuilder |
getPasswordOrBuilder()
The password to decrypt the TLS private key.
|
DataSource |
getPrivateKey()
The TLS private key.
|
DataSourceOrBuilder |
getPrivateKeyOrBuilder()
The TLS private key.
|
PrivateKeyProvider |
getPrivateKeyProvider()
BoringSSL private key method provider.
|
PrivateKeyProviderOrBuilder |
getPrivateKeyProviderOrBuilder()
BoringSSL private key method provider.
|
int |
getSerializedSize() |
DataSource |
getSignedCertificateTimestamp(int index)
[#not-implemented-hide:]
repeated .envoy.config.core.v4alpha.DataSource signed_certificate_timestamp = 5; |
int |
getSignedCertificateTimestampCount()
[#not-implemented-hide:]
repeated .envoy.config.core.v4alpha.DataSource signed_certificate_timestamp = 5; |
List<DataSource> |
getSignedCertificateTimestampList()
[#not-implemented-hide:]
repeated .envoy.config.core.v4alpha.DataSource signed_certificate_timestamp = 5; |
DataSourceOrBuilder |
getSignedCertificateTimestampOrBuilder(int index)
[#not-implemented-hide:]
repeated .envoy.config.core.v4alpha.DataSource signed_certificate_timestamp = 5; |
List<? extends DataSourceOrBuilder> |
getSignedCertificateTimestampOrBuilderList()
[#not-implemented-hide:]
repeated .envoy.config.core.v4alpha.DataSource signed_certificate_timestamp = 5; |
com.google.protobuf.UnknownFieldSet |
getUnknownFields() |
WatchedDirectory |
getWatchedDirectory()
If specified, updates of file-based *certificate_chain* and *private_key*
sources will be triggered by this watch.
|
WatchedDirectoryOrBuilder |
getWatchedDirectoryOrBuilder()
If specified, updates of file-based *certificate_chain* and *private_key*
sources will be triggered by this watch.
|
boolean |
hasCertificateChain()
The TLS certificate chain.
|
int |
hashCode() |
boolean |
hasOcspStaple()
The OCSP response to be stapled with this certificate during the handshake.
|
boolean |
hasPassword()
The password to decrypt the TLS private key.
|
boolean |
hasPrivateKey()
The TLS private key.
|
boolean |
hasPrivateKeyProvider()
BoringSSL private key method provider.
|
boolean |
hasWatchedDirectory()
If specified, updates of file-based *certificate_chain* and *private_key*
sources will be triggered by this watch.
|
protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable |
internalGetFieldAccessorTable() |
boolean |
isInitialized() |
static TlsCertificate.Builder |
newBuilder() |
static TlsCertificate.Builder |
newBuilder(TlsCertificate prototype) |
TlsCertificate.Builder |
newBuilderForType() |
protected TlsCertificate.Builder |
newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) |
protected Object |
newInstance(com.google.protobuf.GeneratedMessageV3.UnusedPrivateParameter unused) |
static TlsCertificate |
parseDelimitedFrom(InputStream input) |
static TlsCertificate |
parseDelimitedFrom(InputStream input,
com.google.protobuf.ExtensionRegistryLite extensionRegistry) |
static TlsCertificate |
parseFrom(byte[] data) |
static TlsCertificate |
parseFrom(byte[] data,
com.google.protobuf.ExtensionRegistryLite extensionRegistry) |
static TlsCertificate |
parseFrom(ByteBuffer data) |
static TlsCertificate |
parseFrom(ByteBuffer data,
com.google.protobuf.ExtensionRegistryLite extensionRegistry) |
static TlsCertificate |
parseFrom(com.google.protobuf.ByteString data) |
static TlsCertificate |
parseFrom(com.google.protobuf.ByteString data,
com.google.protobuf.ExtensionRegistryLite extensionRegistry) |
static TlsCertificate |
parseFrom(com.google.protobuf.CodedInputStream input) |
static TlsCertificate |
parseFrom(com.google.protobuf.CodedInputStream input,
com.google.protobuf.ExtensionRegistryLite extensionRegistry) |
static TlsCertificate |
parseFrom(InputStream input) |
static TlsCertificate |
parseFrom(InputStream input,
com.google.protobuf.ExtensionRegistryLite extensionRegistry) |
static com.google.protobuf.Parser<TlsCertificate> |
parser() |
TlsCertificate.Builder |
toBuilder() |
void |
writeTo(com.google.protobuf.CodedOutputStream output) |
canUseUnsafe, computeStringSize, computeStringSizeNoTag, emptyBooleanList, emptyDoubleList, emptyFloatList, emptyIntList, emptyLongList, getAllFields, getDescriptorForType, getField, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, hasField, hasOneof, internalGetMapField, makeExtensionsImmutable, mergeFromAndMakeImmutableInternal, mutableCopy, mutableCopy, mutableCopy, mutableCopy, mutableCopy, newBooleanList, newBuilderForType, newDoubleList, newFloatList, newIntList, newLongList, parseDelimitedWithIOException, parseDelimitedWithIOException, parseUnknownField, parseUnknownFieldProto3, parseWithIOException, parseWithIOException, parseWithIOException, parseWithIOException, serializeBooleanMapTo, serializeIntegerMapTo, serializeLongMapTo, serializeStringMapTo, writeReplace, writeString, writeStringNoTagfindInitializationErrors, getInitializationErrorString, hashBoolean, hashEnum, hashEnumList, hashFields, hashLong, toStringaddAll, addAll, checkByteStringIsUtf8, toByteArray, toByteString, writeDelimitedTo, writeToclone, finalize, getClass, notify, notifyAll, wait, wait, waitpublic static final int CERTIFICATE_CHAIN_FIELD_NUMBER
public static final int PRIVATE_KEY_FIELD_NUMBER
public static final int WATCHED_DIRECTORY_FIELD_NUMBER
public static final int PRIVATE_KEY_PROVIDER_FIELD_NUMBER
public static final int PASSWORD_FIELD_NUMBER
public static final int OCSP_STAPLE_FIELD_NUMBER
public static final int SIGNED_CERTIFICATE_TIMESTAMP_FIELD_NUMBER
protected Object newInstance(com.google.protobuf.GeneratedMessageV3.UnusedPrivateParameter unused)
newInstance in class com.google.protobuf.GeneratedMessageV3public final com.google.protobuf.UnknownFieldSet getUnknownFields()
getUnknownFields in interface com.google.protobuf.MessageOrBuildergetUnknownFields in class com.google.protobuf.GeneratedMessageV3public static final com.google.protobuf.Descriptors.Descriptor getDescriptor()
protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()
internalGetFieldAccessorTable in class com.google.protobuf.GeneratedMessageV3public boolean hasCertificateChain()
The TLS certificate chain. If *certificate_chain* is a filesystem path, a watch will be added to the parent directory for any file moves to support rotation. This currently only applies to dynamic secrets, when the *TlsCertificate* is delivered via SDS.
.envoy.config.core.v4alpha.DataSource certificate_chain = 1;hasCertificateChain in interface TlsCertificateOrBuilderpublic DataSource getCertificateChain()
The TLS certificate chain. If *certificate_chain* is a filesystem path, a watch will be added to the parent directory for any file moves to support rotation. This currently only applies to dynamic secrets, when the *TlsCertificate* is delivered via SDS.
.envoy.config.core.v4alpha.DataSource certificate_chain = 1;getCertificateChain in interface TlsCertificateOrBuilderpublic DataSourceOrBuilder getCertificateChainOrBuilder()
The TLS certificate chain. If *certificate_chain* is a filesystem path, a watch will be added to the parent directory for any file moves to support rotation. This currently only applies to dynamic secrets, when the *TlsCertificate* is delivered via SDS.
.envoy.config.core.v4alpha.DataSource certificate_chain = 1;getCertificateChainOrBuilder in interface TlsCertificateOrBuilderpublic boolean hasPrivateKey()
The TLS private key. If *private_key* is a filesystem path, a watch will be added to the parent directory for any file moves to support rotation. This currently only applies to dynamic secrets, when the *TlsCertificate* is delivered via SDS.
.envoy.config.core.v4alpha.DataSource private_key = 2 [(.udpa.annotations.sensitive) = true];hasPrivateKey in interface TlsCertificateOrBuilderpublic DataSource getPrivateKey()
The TLS private key. If *private_key* is a filesystem path, a watch will be added to the parent directory for any file moves to support rotation. This currently only applies to dynamic secrets, when the *TlsCertificate* is delivered via SDS.
.envoy.config.core.v4alpha.DataSource private_key = 2 [(.udpa.annotations.sensitive) = true];getPrivateKey in interface TlsCertificateOrBuilderpublic DataSourceOrBuilder getPrivateKeyOrBuilder()
The TLS private key. If *private_key* is a filesystem path, a watch will be added to the parent directory for any file moves to support rotation. This currently only applies to dynamic secrets, when the *TlsCertificate* is delivered via SDS.
.envoy.config.core.v4alpha.DataSource private_key = 2 [(.udpa.annotations.sensitive) = true];getPrivateKeyOrBuilder in interface TlsCertificateOrBuilderpublic boolean hasWatchedDirectory()
If specified, updates of file-based *certificate_chain* and *private_key* sources will be triggered by this watch. The certificate/key pair will be read together and validated for atomic read consistency (i.e. no intervening modification occurred between cert/key read, verified by file hash comparisons). This allows explicit control over the path watched, by default the parent directories of the filesystem paths in *certificate_chain* and *private_key* are watched if this field is not specified. This only applies when a *TlsCertificate* is delivered by SDS with references to filesystem paths. See the :ref:`SDS key rotation <sds_key_rotation>` documentation for further details.
.envoy.config.core.v4alpha.WatchedDirectory watched_directory = 7;hasWatchedDirectory in interface TlsCertificateOrBuilderpublic WatchedDirectory getWatchedDirectory()
If specified, updates of file-based *certificate_chain* and *private_key* sources will be triggered by this watch. The certificate/key pair will be read together and validated for atomic read consistency (i.e. no intervening modification occurred between cert/key read, verified by file hash comparisons). This allows explicit control over the path watched, by default the parent directories of the filesystem paths in *certificate_chain* and *private_key* are watched if this field is not specified. This only applies when a *TlsCertificate* is delivered by SDS with references to filesystem paths. See the :ref:`SDS key rotation <sds_key_rotation>` documentation for further details.
.envoy.config.core.v4alpha.WatchedDirectory watched_directory = 7;getWatchedDirectory in interface TlsCertificateOrBuilderpublic WatchedDirectoryOrBuilder getWatchedDirectoryOrBuilder()
If specified, updates of file-based *certificate_chain* and *private_key* sources will be triggered by this watch. The certificate/key pair will be read together and validated for atomic read consistency (i.e. no intervening modification occurred between cert/key read, verified by file hash comparisons). This allows explicit control over the path watched, by default the parent directories of the filesystem paths in *certificate_chain* and *private_key* are watched if this field is not specified. This only applies when a *TlsCertificate* is delivered by SDS with references to filesystem paths. See the :ref:`SDS key rotation <sds_key_rotation>` documentation for further details.
.envoy.config.core.v4alpha.WatchedDirectory watched_directory = 7;getWatchedDirectoryOrBuilder in interface TlsCertificateOrBuilderpublic boolean hasPrivateKeyProvider()
BoringSSL private key method provider. This is an alternative to :ref:`private_key <envoy_api_field_extensions.transport_sockets.tls.v4alpha.TlsCertificate.private_key>` field. This can't be marked as ``oneof`` due to API compatibility reasons. Setting both :ref:`private_key <envoy_api_field_extensions.transport_sockets.tls.v4alpha.TlsCertificate.private_key>` and :ref:`private_key_provider <envoy_api_field_extensions.transport_sockets.tls.v4alpha.TlsCertificate.private_key_provider>` fields will result in an error.
.envoy.extensions.transport_sockets.tls.v4alpha.PrivateKeyProvider private_key_provider = 6;hasPrivateKeyProvider in interface TlsCertificateOrBuilderpublic PrivateKeyProvider getPrivateKeyProvider()
BoringSSL private key method provider. This is an alternative to :ref:`private_key <envoy_api_field_extensions.transport_sockets.tls.v4alpha.TlsCertificate.private_key>` field. This can't be marked as ``oneof`` due to API compatibility reasons. Setting both :ref:`private_key <envoy_api_field_extensions.transport_sockets.tls.v4alpha.TlsCertificate.private_key>` and :ref:`private_key_provider <envoy_api_field_extensions.transport_sockets.tls.v4alpha.TlsCertificate.private_key_provider>` fields will result in an error.
.envoy.extensions.transport_sockets.tls.v4alpha.PrivateKeyProvider private_key_provider = 6;getPrivateKeyProvider in interface TlsCertificateOrBuilderpublic PrivateKeyProviderOrBuilder getPrivateKeyProviderOrBuilder()
BoringSSL private key method provider. This is an alternative to :ref:`private_key <envoy_api_field_extensions.transport_sockets.tls.v4alpha.TlsCertificate.private_key>` field. This can't be marked as ``oneof`` due to API compatibility reasons. Setting both :ref:`private_key <envoy_api_field_extensions.transport_sockets.tls.v4alpha.TlsCertificate.private_key>` and :ref:`private_key_provider <envoy_api_field_extensions.transport_sockets.tls.v4alpha.TlsCertificate.private_key_provider>` fields will result in an error.
.envoy.extensions.transport_sockets.tls.v4alpha.PrivateKeyProvider private_key_provider = 6;getPrivateKeyProviderOrBuilder in interface TlsCertificateOrBuilderpublic boolean hasPassword()
The password to decrypt the TLS private key. If this field is not set, it is assumed that the TLS private key is not password encrypted.
.envoy.config.core.v4alpha.DataSource password = 3 [(.udpa.annotations.sensitive) = true];hasPassword in interface TlsCertificateOrBuilderpublic DataSource getPassword()
The password to decrypt the TLS private key. If this field is not set, it is assumed that the TLS private key is not password encrypted.
.envoy.config.core.v4alpha.DataSource password = 3 [(.udpa.annotations.sensitive) = true];getPassword in interface TlsCertificateOrBuilderpublic DataSourceOrBuilder getPasswordOrBuilder()
The password to decrypt the TLS private key. If this field is not set, it is assumed that the TLS private key is not password encrypted.
.envoy.config.core.v4alpha.DataSource password = 3 [(.udpa.annotations.sensitive) = true];getPasswordOrBuilder in interface TlsCertificateOrBuilderpublic boolean hasOcspStaple()
The OCSP response to be stapled with this certificate during the handshake. The response must be DER-encoded and may only be provided via ``filename`` or ``inline_bytes``. The response may pertain to only one certificate.
.envoy.config.core.v4alpha.DataSource ocsp_staple = 4;hasOcspStaple in interface TlsCertificateOrBuilderpublic DataSource getOcspStaple()
The OCSP response to be stapled with this certificate during the handshake. The response must be DER-encoded and may only be provided via ``filename`` or ``inline_bytes``. The response may pertain to only one certificate.
.envoy.config.core.v4alpha.DataSource ocsp_staple = 4;getOcspStaple in interface TlsCertificateOrBuilderpublic DataSourceOrBuilder getOcspStapleOrBuilder()
The OCSP response to be stapled with this certificate during the handshake. The response must be DER-encoded and may only be provided via ``filename`` or ``inline_bytes``. The response may pertain to only one certificate.
.envoy.config.core.v4alpha.DataSource ocsp_staple = 4;getOcspStapleOrBuilder in interface TlsCertificateOrBuilderpublic List<DataSource> getSignedCertificateTimestampList()
[#not-implemented-hide:]
repeated .envoy.config.core.v4alpha.DataSource signed_certificate_timestamp = 5;getSignedCertificateTimestampList in interface TlsCertificateOrBuilderpublic List<? extends DataSourceOrBuilder> getSignedCertificateTimestampOrBuilderList()
[#not-implemented-hide:]
repeated .envoy.config.core.v4alpha.DataSource signed_certificate_timestamp = 5;getSignedCertificateTimestampOrBuilderList in interface TlsCertificateOrBuilderpublic int getSignedCertificateTimestampCount()
[#not-implemented-hide:]
repeated .envoy.config.core.v4alpha.DataSource signed_certificate_timestamp = 5;getSignedCertificateTimestampCount in interface TlsCertificateOrBuilderpublic DataSource getSignedCertificateTimestamp(int index)
[#not-implemented-hide:]
repeated .envoy.config.core.v4alpha.DataSource signed_certificate_timestamp = 5;getSignedCertificateTimestamp in interface TlsCertificateOrBuilderpublic DataSourceOrBuilder getSignedCertificateTimestampOrBuilder(int index)
[#not-implemented-hide:]
repeated .envoy.config.core.v4alpha.DataSource signed_certificate_timestamp = 5;getSignedCertificateTimestampOrBuilder in interface TlsCertificateOrBuilderpublic final boolean isInitialized()
isInitialized in interface com.google.protobuf.MessageLiteOrBuilderisInitialized in class com.google.protobuf.GeneratedMessageV3public void writeTo(com.google.protobuf.CodedOutputStream output)
throws IOException
writeTo in interface com.google.protobuf.MessageLitewriteTo in class com.google.protobuf.GeneratedMessageV3IOExceptionpublic int getSerializedSize()
getSerializedSize in interface com.google.protobuf.MessageLitegetSerializedSize in class com.google.protobuf.GeneratedMessageV3public boolean equals(Object obj)
equals in interface com.google.protobuf.Messageequals in class com.google.protobuf.AbstractMessagepublic int hashCode()
hashCode in interface com.google.protobuf.MessagehashCode in class com.google.protobuf.AbstractMessagepublic static TlsCertificate parseFrom(ByteBuffer data) throws com.google.protobuf.InvalidProtocolBufferException
com.google.protobuf.InvalidProtocolBufferExceptionpublic static TlsCertificate parseFrom(ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws com.google.protobuf.InvalidProtocolBufferException
com.google.protobuf.InvalidProtocolBufferExceptionpublic static TlsCertificate parseFrom(com.google.protobuf.ByteString data) throws com.google.protobuf.InvalidProtocolBufferException
com.google.protobuf.InvalidProtocolBufferExceptionpublic static TlsCertificate parseFrom(com.google.protobuf.ByteString data, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws com.google.protobuf.InvalidProtocolBufferException
com.google.protobuf.InvalidProtocolBufferExceptionpublic static TlsCertificate parseFrom(byte[] data) throws com.google.protobuf.InvalidProtocolBufferException
com.google.protobuf.InvalidProtocolBufferExceptionpublic static TlsCertificate parseFrom(byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws com.google.protobuf.InvalidProtocolBufferException
com.google.protobuf.InvalidProtocolBufferExceptionpublic static TlsCertificate parseFrom(InputStream input) throws IOException
IOExceptionpublic static TlsCertificate parseFrom(InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws IOException
IOExceptionpublic static TlsCertificate parseDelimitedFrom(InputStream input) throws IOException
IOExceptionpublic static TlsCertificate parseDelimitedFrom(InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws IOException
IOExceptionpublic static TlsCertificate parseFrom(com.google.protobuf.CodedInputStream input) throws IOException
IOExceptionpublic static TlsCertificate parseFrom(com.google.protobuf.CodedInputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws IOException
IOExceptionpublic TlsCertificate.Builder newBuilderForType()
newBuilderForType in interface com.google.protobuf.MessagenewBuilderForType in interface com.google.protobuf.MessageLitepublic static TlsCertificate.Builder newBuilder()
public static TlsCertificate.Builder newBuilder(TlsCertificate prototype)
public TlsCertificate.Builder toBuilder()
toBuilder in interface com.google.protobuf.MessagetoBuilder in interface com.google.protobuf.MessageLiteprotected TlsCertificate.Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent)
newBuilderForType in class com.google.protobuf.GeneratedMessageV3public static TlsCertificate getDefaultInstance()
public static com.google.protobuf.Parser<TlsCertificate> parser()
public com.google.protobuf.Parser<TlsCertificate> getParserForType()
getParserForType in interface com.google.protobuf.MessagegetParserForType in interface com.google.protobuf.MessageLitegetParserForType in class com.google.protobuf.GeneratedMessageV3public TlsCertificate getDefaultInstanceForType()
getDefaultInstanceForType in interface com.google.protobuf.MessageLiteOrBuildergetDefaultInstanceForType in interface com.google.protobuf.MessageOrBuilderCopyright © 2018–2021 The Envoy Project. All rights reserved.