Package io.envoyproxy.envoy.extensions.transport_sockets.tls.v3

Class UpstreamTlsContext

  • All Implemented Interfaces:
    com.google.protobuf.Message, com.google.protobuf.MessageLite, com.google.protobuf.MessageLiteOrBuilder, com.google.protobuf.MessageOrBuilder, UpstreamTlsContextOrBuilder, java.io.Serializable
    public final class UpstreamTlsContext
extends com.google.protobuf.GeneratedMessage
implements UpstreamTlsContextOrBuilder
     [#next-free-field: 6]
    Protobuf type envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
    See Also:
    Serialized Form

    • Nested Class Summary

      Nested Classes 
      Modifier and Type Class Description
      static class  UpstreamTlsContext.Builder
      [#next-free-field: 6]

      • Nested classes/interfaces inherited from class com.google.protobuf.GeneratedMessage

        com.google.protobuf.GeneratedMessage.ExtendableBuilder<MessageT extends com.google.protobuf.GeneratedMessage.ExtendableMessage<MessageT>,​BuilderT extends com.google.protobuf.GeneratedMessage.ExtendableBuilder<MessageT,​BuilderT>>, com.google.protobuf.GeneratedMessage.ExtendableMessage<MessageT extends com.google.protobuf.GeneratedMessage.ExtendableMessage<MessageT>>, com.google.protobuf.GeneratedMessage.ExtendableMessageOrBuilder<MessageT extends com.google.protobuf.GeneratedMessage.ExtendableMessage<MessageT>>, com.google.protobuf.GeneratedMessage.FieldAccessorTable, com.google.protobuf.GeneratedMessage.GeneratedExtension<ContainingT extends com.google.protobuf.Message,​T extends java.lang.Object>, com.google.protobuf.GeneratedMessage.UnusedPrivateParameter

      • Nested classes/interfaces inherited from class com.google.protobuf.AbstractMessage

        com.google.protobuf.AbstractMessage.BuilderParent

      • Nested classes/interfaces inherited from class com.google.protobuf.AbstractMessageLite

        com.google.protobuf.AbstractMessageLite.InternalOneOfEnum

    • Constructor Summary

      Constructors 
      Modifier Constructor Description
      private UpstreamTlsContext()  
      private UpstreamTlsContext​(com.google.protobuf.GeneratedMessage.Builder<?> builder)  

    • Method Summary

      All Methods Static Methods Instance Methods Concrete Methods 
      Modifier and Type Method Description
      boolean equals​(java.lang.Object obj)  
      boolean getAllowRenegotiation()
      If true, server-initiated TLS renegotiation will be allowed.
      CommonTlsContext getCommonTlsContext()
      Common TLS context settings.
      CommonTlsContextOrBuilder getCommonTlsContextOrBuilder()
      Common TLS context settings.
      static UpstreamTlsContext getDefaultInstance()  
      UpstreamTlsContext getDefaultInstanceForType()  
      static com.google.protobuf.Descriptors.Descriptor getDescriptor()  
      com.google.protobuf.BoolValue getEnforceRsaKeyUsage()
      This field is used to control the enforcement, whereby the handshake will fail if the keyUsage extension is present and incompatible with the TLS usage.
      com.google.protobuf.BoolValueOrBuilder getEnforceRsaKeyUsageOrBuilder()
      This field is used to control the enforcement, whereby the handshake will fail if the keyUsage extension is present and incompatible with the TLS usage.
      com.google.protobuf.UInt32Value getMaxSessionKeys()
      Maximum number of session keys (Pre-Shared Keys for TLSv1.3+, Session IDs and Session Tickets for TLSv1.2 and older) to store for the purpose of session resumption.
      com.google.protobuf.UInt32ValueOrBuilder getMaxSessionKeysOrBuilder()
      Maximum number of session keys (Pre-Shared Keys for TLSv1.3+, Session IDs and Session Tickets for TLSv1.2 and older) to store for the purpose of session resumption.
      com.google.protobuf.Parser<UpstreamTlsContext> getParserForType()  
      int getSerializedSize()  
      java.lang.String getSni()
      SNI string to use when creating TLS backend connections.
      com.google.protobuf.ByteString getSniBytes()
      SNI string to use when creating TLS backend connections.
      boolean hasCommonTlsContext()
      Common TLS context settings.
      boolean hasEnforceRsaKeyUsage()
      This field is used to control the enforcement, whereby the handshake will fail if the keyUsage extension is present and incompatible with the TLS usage.
      int hashCode()  
      boolean hasMaxSessionKeys()
      Maximum number of session keys (Pre-Shared Keys for TLSv1.3+, Session IDs and Session Tickets for TLSv1.2 and older) to store for the purpose of session resumption.
      protected com.google.protobuf.GeneratedMessage.FieldAccessorTable internalGetFieldAccessorTable()  
      boolean isInitialized()  
      static UpstreamTlsContext.Builder newBuilder()  
      static UpstreamTlsContext.Builder newBuilder​(UpstreamTlsContext prototype)  
      UpstreamTlsContext.Builder newBuilderForType()  
      protected UpstreamTlsContext.Builder newBuilderForType​(com.google.protobuf.AbstractMessage.BuilderParent parent)  
      static UpstreamTlsContext parseDelimitedFrom​(java.io.InputStream input)  
      static UpstreamTlsContext parseDelimitedFrom​(java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)  
      static UpstreamTlsContext parseFrom​(byte[] data)  
      static UpstreamTlsContext parseFrom​(byte[] data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)  
      static UpstreamTlsContext parseFrom​(com.google.protobuf.ByteString data)  
      static UpstreamTlsContext parseFrom​(com.google.protobuf.ByteString data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)  
      static UpstreamTlsContext parseFrom​(com.google.protobuf.CodedInputStream input)  
      static UpstreamTlsContext parseFrom​(com.google.protobuf.CodedInputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)  
      static UpstreamTlsContext parseFrom​(java.io.InputStream input)  
      static UpstreamTlsContext parseFrom​(java.io.InputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry)  
      static UpstreamTlsContext parseFrom​(java.nio.ByteBuffer data)  
      static UpstreamTlsContext parseFrom​(java.nio.ByteBuffer data, com.google.protobuf.ExtensionRegistryLite extensionRegistry)  
      static com.google.protobuf.Parser<UpstreamTlsContext> parser()  
      UpstreamTlsContext.Builder toBuilder()  
      void writeTo​(com.google.protobuf.CodedOutputStream output)  

      • Methods inherited from class com.google.protobuf.GeneratedMessage

        canUseUnsafe, computeStringSize, computeStringSizeNoTag, emptyBooleanList, emptyDoubleList, emptyFloatList, emptyIntList, emptyList, emptyLongList, getAllFields, getDescriptorForType, getField, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, getUnknownFields, hasField, hasOneof, internalGetMapField, internalGetMapFieldReflection, isStringEmpty, makeMutableCopy, makeMutableCopy, mergeFromAndMakeImmutableInternal, newFileScopedGeneratedExtension, newInstance, newMessageScopedGeneratedExtension, parseDelimitedWithIOException, parseDelimitedWithIOException, parseUnknownField, parseUnknownFieldProto3, parseWithIOException, parseWithIOException, parseWithIOException, parseWithIOException, serializeBooleanMapTo, serializeIntegerMapTo, serializeLongMapTo, serializeStringMapTo, writeReplace, writeString, writeStringNoTag

      • Methods inherited from class com.google.protobuf.AbstractMessage

        findInitializationErrors, getInitializationErrorString, hashFields, toString

      • Methods inherited from class com.google.protobuf.AbstractMessageLite

        addAll, checkByteStringIsUtf8, toByteArray, toByteString, writeDelimitedTo, writeTo

      • Methods inherited from class java.lang.Object

        clone, finalize, getClass, notify, notifyAll, wait, wait, wait

      • Methods inherited from interface com.google.protobuf.MessageLite

        toByteArray, toByteString, writeDelimitedTo, writeTo

      • Methods inherited from interface com.google.protobuf.MessageOrBuilder

        findInitializationErrors, getAllFields, getDescriptorForType, getField, getInitializationErrorString, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, getUnknownFields, hasField, hasOneof

    • Field Detail

      • bitField0_

        private int bitField0_

      • COMMON_TLS_CONTEXT_FIELD_NUMBER

        public static final int COMMON_TLS_CONTEXT_FIELD_NUMBER
        See Also:
        Constant Field Values

      • sni_

        private volatile java.lang.Object sni_

      • ALLOW_RENEGOTIATION_FIELD_NUMBER

        public static final int ALLOW_RENEGOTIATION_FIELD_NUMBER
        See Also:
        Constant Field Values

      • allowRenegotiation_

        private boolean allowRenegotiation_

      • MAX_SESSION_KEYS_FIELD_NUMBER

        public static final int MAX_SESSION_KEYS_FIELD_NUMBER
        See Also:
        Constant Field Values

      • maxSessionKeys_

        private com.google.protobuf.UInt32Value maxSessionKeys_

      • ENFORCE_RSA_KEY_USAGE_FIELD_NUMBER

        public static final int ENFORCE_RSA_KEY_USAGE_FIELD_NUMBER
        See Also:
        Constant Field Values

      • enforceRsaKeyUsage_

        private com.google.protobuf.BoolValue enforceRsaKeyUsage_

      • memoizedIsInitialized

        private byte memoizedIsInitialized

    • Constructor Detail

      • UpstreamTlsContext

        private UpstreamTlsContext​(com.google.protobuf.GeneratedMessage.Builder<?> builder)

      • UpstreamTlsContext

        private UpstreamTlsContext()

    • Method Detail

      • getDescriptor

        public static final com.google.protobuf.Descriptors.Descriptor getDescriptor()

      • internalGetFieldAccessorTable

        protected com.google.protobuf.GeneratedMessage.FieldAccessorTable internalGetFieldAccessorTable()
        Specified by:
        internalGetFieldAccessorTable in class com.google.protobuf.GeneratedMessage

      • hasCommonTlsContext

        public boolean hasCommonTlsContext()
         Common TLS context settings.

 .. attention::

 Server certificate verification is not enabled by default. Configure
 :ref:`trusted_ca<envoy_v3_api_field_extensions.transport_sockets.tls.v3.CertificateValidationContext.trusted_ca>` to enable
 verification.
        .envoy.extensions.transport_sockets.tls.v3.CommonTlsContext common_tls_context = 1;
        Specified by:
        hasCommonTlsContext in interface UpstreamTlsContextOrBuilder
        Returns:
        Whether the commonTlsContext field is set.

      • getCommonTlsContext

        public CommonTlsContext getCommonTlsContext()
         Common TLS context settings.

 .. attention::

 Server certificate verification is not enabled by default. Configure
 :ref:`trusted_ca<envoy_v3_api_field_extensions.transport_sockets.tls.v3.CertificateValidationContext.trusted_ca>` to enable
 verification.
        .envoy.extensions.transport_sockets.tls.v3.CommonTlsContext common_tls_context = 1;
        Specified by:
        getCommonTlsContext in interface UpstreamTlsContextOrBuilder
        Returns:
        The commonTlsContext.

      • getCommonTlsContextOrBuilder

        public CommonTlsContextOrBuilder getCommonTlsContextOrBuilder()
         Common TLS context settings.

 .. attention::

 Server certificate verification is not enabled by default. Configure
 :ref:`trusted_ca<envoy_v3_api_field_extensions.transport_sockets.tls.v3.CertificateValidationContext.trusted_ca>` to enable
 verification.
        .envoy.extensions.transport_sockets.tls.v3.CommonTlsContext common_tls_context = 1;
        Specified by:
        getCommonTlsContextOrBuilder in interface UpstreamTlsContextOrBuilder

      • getSni

        public java.lang.String getSni()
         SNI string to use when creating TLS backend connections.
        string sni = 2 [(.validate.rules) = { ... }
        Specified by:
        getSni in interface UpstreamTlsContextOrBuilder
        Returns:
        The sni.

      • getSniBytes

        public com.google.protobuf.ByteString getSniBytes()
         SNI string to use when creating TLS backend connections.
        string sni = 2 [(.validate.rules) = { ... }
        Specified by:
        getSniBytes in interface UpstreamTlsContextOrBuilder
        Returns:
        The bytes for sni.

      • getAllowRenegotiation

        public boolean getAllowRenegotiation()
         If true, server-initiated TLS renegotiation will be allowed.

 .. attention::

 TLS renegotiation is considered insecure and shouldn't be used unless absolutely necessary.
        bool allow_renegotiation = 3;
        Specified by:
        getAllowRenegotiation in interface UpstreamTlsContextOrBuilder
        Returns:
        The allowRenegotiation.

      • hasMaxSessionKeys

        public boolean hasMaxSessionKeys()
         Maximum number of session keys (Pre-Shared Keys for TLSv1.3+, Session IDs and Session Tickets
 for TLSv1.2 and older) to store for the purpose of session resumption.

 Defaults to 1, setting this to 0 disables session resumption.
        .google.protobuf.UInt32Value max_session_keys = 4;
        Specified by:
        hasMaxSessionKeys in interface UpstreamTlsContextOrBuilder
        Returns:
        Whether the maxSessionKeys field is set.

      • getMaxSessionKeys

        public com.google.protobuf.UInt32Value getMaxSessionKeys()
         Maximum number of session keys (Pre-Shared Keys for TLSv1.3+, Session IDs and Session Tickets
 for TLSv1.2 and older) to store for the purpose of session resumption.

 Defaults to 1, setting this to 0 disables session resumption.
        .google.protobuf.UInt32Value max_session_keys = 4;
        Specified by:
        getMaxSessionKeys in interface UpstreamTlsContextOrBuilder
        Returns:
        The maxSessionKeys.

      • getMaxSessionKeysOrBuilder

        public com.google.protobuf.UInt32ValueOrBuilder getMaxSessionKeysOrBuilder()
         Maximum number of session keys (Pre-Shared Keys for TLSv1.3+, Session IDs and Session Tickets
 for TLSv1.2 and older) to store for the purpose of session resumption.

 Defaults to 1, setting this to 0 disables session resumption.
        .google.protobuf.UInt32Value max_session_keys = 4;
        Specified by:
        getMaxSessionKeysOrBuilder in interface UpstreamTlsContextOrBuilder

      • hasEnforceRsaKeyUsage

        public boolean hasEnforceRsaKeyUsage()
         This field is used to control the enforcement, whereby the handshake will fail if the keyUsage extension
 is present and incompatible with the TLS usage. Currently, the default value is false (i.e., enforcement off)
 but it is expected to be changed to true by default in a future release.
 ``ssl.was_key_usage_invalid`` in :ref:`listener metrics <config_listener_stats>` will be set for certificate
 configurations that would fail if this option were set to true.
        .google.protobuf.BoolValue enforce_rsa_key_usage = 5;
        Specified by:
        hasEnforceRsaKeyUsage in interface UpstreamTlsContextOrBuilder
        Returns:
        Whether the enforceRsaKeyUsage field is set.

      • getEnforceRsaKeyUsage

        public com.google.protobuf.BoolValue getEnforceRsaKeyUsage()
         This field is used to control the enforcement, whereby the handshake will fail if the keyUsage extension
 is present and incompatible with the TLS usage. Currently, the default value is false (i.e., enforcement off)
 but it is expected to be changed to true by default in a future release.
 ``ssl.was_key_usage_invalid`` in :ref:`listener metrics <config_listener_stats>` will be set for certificate
 configurations that would fail if this option were set to true.
        .google.protobuf.BoolValue enforce_rsa_key_usage = 5;
        Specified by:
        getEnforceRsaKeyUsage in interface UpstreamTlsContextOrBuilder
        Returns:
        The enforceRsaKeyUsage.

      • getEnforceRsaKeyUsageOrBuilder

        public com.google.protobuf.BoolValueOrBuilder getEnforceRsaKeyUsageOrBuilder()
         This field is used to control the enforcement, whereby the handshake will fail if the keyUsage extension
 is present and incompatible with the TLS usage. Currently, the default value is false (i.e., enforcement off)
 but it is expected to be changed to true by default in a future release.
 ``ssl.was_key_usage_invalid`` in :ref:`listener metrics <config_listener_stats>` will be set for certificate
 configurations that would fail if this option were set to true.
        .google.protobuf.BoolValue enforce_rsa_key_usage = 5;
        Specified by:
        getEnforceRsaKeyUsageOrBuilder in interface UpstreamTlsContextOrBuilder

      • isInitialized

        public final boolean isInitialized()
        Specified by:
        isInitialized in interface com.google.protobuf.MessageLiteOrBuilder
        Overrides:
        isInitialized in class com.google.protobuf.GeneratedMessage

      • writeTo

        public void writeTo​(com.google.protobuf.CodedOutputStream output)
             throws java.io.IOException
        Specified by:
        writeTo in interface com.google.protobuf.MessageLite
        Overrides:
        writeTo in class com.google.protobuf.GeneratedMessage
        Throws:
        java.io.IOException

      • getSerializedSize

        public int getSerializedSize()
        Specified by:
        getSerializedSize in interface com.google.protobuf.MessageLite
        Overrides:
        getSerializedSize in class com.google.protobuf.GeneratedMessage

      • equals

        public boolean equals​(java.lang.Object obj)
        Specified by:
        equals in interface com.google.protobuf.Message
        Overrides:
        equals in class com.google.protobuf.AbstractMessage

      • hashCode

        public int hashCode()
        Specified by:
        hashCode in interface com.google.protobuf.Message
        Overrides:
        hashCode in class com.google.protobuf.AbstractMessage

      • parseFrom

        public static UpstreamTlsContext parseFrom​(java.nio.ByteBuffer data)
                                    throws com.google.protobuf.InvalidProtocolBufferException
        Throws:
        com.google.protobuf.InvalidProtocolBufferException

      • parseFrom

        public static UpstreamTlsContext parseFrom​(java.nio.ByteBuffer data,
                                           com.google.protobuf.ExtensionRegistryLite extensionRegistry)
                                    throws com.google.protobuf.InvalidProtocolBufferException
        Throws:
        com.google.protobuf.InvalidProtocolBufferException

      • parseFrom

        public static UpstreamTlsContext parseFrom​(com.google.protobuf.ByteString data)
                                    throws com.google.protobuf.InvalidProtocolBufferException
        Throws:
        com.google.protobuf.InvalidProtocolBufferException

      • parseFrom

        public static UpstreamTlsContext parseFrom​(com.google.protobuf.ByteString data,
                                           com.google.protobuf.ExtensionRegistryLite extensionRegistry)
                                    throws com.google.protobuf.InvalidProtocolBufferException
        Throws:
        com.google.protobuf.InvalidProtocolBufferException

      • parseFrom

        public static UpstreamTlsContext parseFrom​(byte[] data)
                                    throws com.google.protobuf.InvalidProtocolBufferException
        Throws:
        com.google.protobuf.InvalidProtocolBufferException

      • parseFrom

        public static UpstreamTlsContext parseFrom​(byte[] data,
                                           com.google.protobuf.ExtensionRegistryLite extensionRegistry)
                                    throws com.google.protobuf.InvalidProtocolBufferException
        Throws:
        com.google.protobuf.InvalidProtocolBufferException

      • parseFrom

        public static UpstreamTlsContext parseFrom​(java.io.InputStream input)
                                    throws java.io.IOException
        Throws:
        java.io.IOException

      • parseFrom

        public static UpstreamTlsContext parseFrom​(java.io.InputStream input,
                                           com.google.protobuf.ExtensionRegistryLite extensionRegistry)
                                    throws java.io.IOException
        Throws:
        java.io.IOException

      • parseDelimitedFrom

        public static UpstreamTlsContext parseDelimitedFrom​(java.io.InputStream input)
                                             throws java.io.IOException
        Throws:
        java.io.IOException

      • parseDelimitedFrom

        public static UpstreamTlsContext parseDelimitedFrom​(java.io.InputStream input,
                                                    com.google.protobuf.ExtensionRegistryLite extensionRegistry)
                                             throws java.io.IOException
        Throws:
        java.io.IOException

      • parseFrom

        public static UpstreamTlsContext parseFrom​(com.google.protobuf.CodedInputStream input)
                                    throws java.io.IOException
        Throws:
        java.io.IOException

      • parseFrom

        public static UpstreamTlsContext parseFrom​(com.google.protobuf.CodedInputStream input,
                                           com.google.protobuf.ExtensionRegistryLite extensionRegistry)
                                    throws java.io.IOException
        Throws:
        java.io.IOException

      • newBuilderForType

        public UpstreamTlsContext.Builder newBuilderForType()
        Specified by:
        newBuilderForType in interface com.google.protobuf.Message
        Specified by:
        newBuilderForType in interface com.google.protobuf.MessageLite

      • toBuilder

        public UpstreamTlsContext.Builder toBuilder()
        Specified by:
        toBuilder in interface com.google.protobuf.Message
        Specified by:
        toBuilder in interface com.google.protobuf.MessageLite

      • newBuilderForType

        protected UpstreamTlsContext.Builder newBuilderForType​(com.google.protobuf.AbstractMessage.BuilderParent parent)
        Overrides:
        newBuilderForType in class com.google.protobuf.AbstractMessage

      • getParserForType

        public com.google.protobuf.Parser<UpstreamTlsContext> getParserForType()
        Specified by:
        getParserForType in interface com.google.protobuf.Message
        Specified by:
        getParserForType in interface com.google.protobuf.MessageLite
        Overrides:
        getParserForType in class com.google.protobuf.GeneratedMessage

      • getDefaultInstanceForType

        public UpstreamTlsContext getDefaultInstanceForType()
        Specified by:
        getDefaultInstanceForType in interface com.google.protobuf.MessageLiteOrBuilder
        Specified by:
        getDefaultInstanceForType in interface com.google.protobuf.MessageOrBuilder