Reference documentation and code samples for the Google Cloud Network Security V1 Client class ServerTlsPolicy.
ServerTlsPolicy is a resource that specifies how a server should authenticate incoming requests. This resource itself does not affect configuration unless it is attached to a target https proxy or endpoint config selector resource.
Generated from protobuf message google.cloud.networksecurity.v1.ServerTlsPolicy
Namespace
Google \ Cloud \ NetworkSecurity \ V1Methods
__construct
Constructor.
data
array
Optional. Data for populating the Message object.
↳ name
string
Required. Name of the ServerTlsPolicy resource. It matches the pattern projects/*/locations/{location}/serverTlsPolicies/{server_tls_policy}
↳ description
string
Free-text description of the resource.
↳ create_time
↳ update_time
↳ labels
↳ allow_open
bool
Determines if server allows plaintext connections. If set to true, server allows plain text connections. By default, it is set to false. This setting is not exclusive of other encryption modes. For example, if allow_open
and mtls_policy
are set, server allows both plain text and mTLS connections. See documentation of other encryption modes to confirm compatibility. Consider using it if you wish to upgrade in place your deployment to TLS while having mixed TLS and non-TLS traffic reaching port :80.
↳ server_certificate
CertificateProvider
Defines a mechanism to provision server identity (public and private keys). Cannot be combined with allow_open
as a permissive mode that allows both plain text and TLS is not supported.
↳ mtls_policy
ServerTlsPolicy\MTLSPolicy
Defines a mechanism to provision peer validation certificates for peer to peer authentication (Mutual TLS - mTLS). If not specified, client certificate will not be requested. The connection is treated as TLS and not mTLS. If allow_open
and mtls_policy
are set, server allows both plain text and mTLS connections.
getName
Required. Name of the ServerTlsPolicy resource. It matches the pattern projects/*/locations/{location}/serverTlsPolicies/{server_tls_policy}
string
setName
Required. Name of the ServerTlsPolicy resource. It matches the pattern projects/*/locations/{location}/serverTlsPolicies/{server_tls_policy}
var
string
$this
getDescription
Free-text description of the resource.
string
setDescription
Free-text description of the resource.
var
string
$this
getCreateTime
Output only. The timestamp when the resource was created.
hasCreateTime
clearCreateTime
setCreateTime
Output only. The timestamp when the resource was created.
$this
getUpdateTime
Output only. The timestamp when the resource was updated.
hasUpdateTime
clearUpdateTime
setUpdateTime
Output only. The timestamp when the resource was updated.
$this
getLabels
Set of label tags associated with the resource.
setLabels
Set of label tags associated with the resource.
$this
getAllowOpen
Determines if server allows plaintext connections. If set to true, server
allows plain text connections. By default, it is set to false. This setting
is not exclusive of other encryption modes. For example, if allow_open
and mtls_policy
are set, server allows both plain text and mTLS
connections. See documentation of other encryption modes to confirm
compatibility.
Consider using it if you wish to upgrade in place your deployment to TLS while having mixed TLS and non-TLS traffic reaching port :80.
bool
setAllowOpen
Determines if server allows plaintext connections. If set to true, server
allows plain text connections. By default, it is set to false. This setting
is not exclusive of other encryption modes. For example, if allow_open
and mtls_policy
are set, server allows both plain text and mTLS
connections. See documentation of other encryption modes to confirm
compatibility.
Consider using it if you wish to upgrade in place your deployment to TLS while having mixed TLS and non-TLS traffic reaching port :80.
var
bool
$this
getServerCertificate
Defines a mechanism to provision server identity (public and private keys).
Cannot be combined with allow_open
as a permissive mode that allows both
plain text and TLS is not supported.
hasServerCertificate
clearServerCertificate
setServerCertificate
Defines a mechanism to provision server identity (public and private keys).
Cannot be combined with allow_open
as a permissive mode that allows both
plain text and TLS is not supported.
$this
getMtlsPolicy
Defines a mechanism to provision peer validation certificates for peer to
peer authentication (Mutual TLS - mTLS). If not specified, client
certificate will not be requested. The connection is treated as TLS and not
mTLS. If allow_open
and mtls_policy
are set, server allows both plain
text and mTLS connections.
hasMtlsPolicy
clearMtlsPolicy
setMtlsPolicy
Defines a mechanism to provision peer validation certificates for peer to
peer authentication (Mutual TLS - mTLS). If not specified, client
certificate will not be requested. The connection is treated as TLS and not
mTLS. If allow_open
and mtls_policy
are set, server allows both plain
text and mTLS connections.
$this