SSL configuration.
| JSON representation |
|---|
{ "sslMode" : enum ( |
| Fields | |
|---|---|
sslMode
|
Optional. SSL mode. Specifies client-server SSL/TLS connection behavior. |
caSource
|
Optional. Certificate Authority (CA) source. Only CA_SOURCE_MANAGED is supported currently, and is the default value. |
SslMode
SSL mode options.
| Enums | |
|---|---|
SSL_MODE_UNSPECIFIED
|
SSL mode is not specified. Defaults to ENCRYPTED_ONLY. |
SSL_MODE_ALLOW
|
SSL connections are optional. CA verification not enforced. |
SSL_MODE_REQUIRE
|
SSL connections are required. CA verification not enforced. Clients may use locally self-signed certificates (default psql client behavior). |
SSL_MODE_VERIFY_CA
|
SSL connections are required. CA verification enforced. Clients must have certificates signed by a Cluster CA, for example, using GenerateClientCertificate. |
ALLOW_UNENCRYPTED_AND_ENCRYPTED
|
SSL connections are optional. CA verification not enforced. |
ENCRYPTED_ONLY
|
SSL connections are required. CA verification not enforced. |
CaSource
Certificate Authority (CA) source for SSL/TLS certificates.
| Enums | |
|---|---|
CA_SOURCE_UNSPECIFIED
|
Certificate Authority (CA) source not specified. Defaults to CA_SOURCE_MANAGED. |
CA_SOURCE_MANAGED
|
Certificate Authority (CA) managed by the AlloyDB Cluster. |

