| Package | Description |
|---|---|
| envoy.api.v2.auth |
| Modifier and Type | Method and Description |
|---|---|
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.addAllVerifyCertificateHash(Iterable<String> values)
If specified, Envoy will verify (pin) the hex-encoded SHA-256 fingerprint of
the presented certificate.
|
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.addAllVerifySpkiSha256(Iterable<String> values)
If specified, Envoy will verify (pin) base64-encoded SHA-256 hash of
the Subject Public Key Information (SPKI) of the presented certificate.
|
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.addAllVerifySubjectAltName(Iterable<String> values)
An optional list of subject alternative names.
|
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.addRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field,
Object value) |
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.addVerifyCertificateHash(String value)
If specified, Envoy will verify (pin) the hex-encoded SHA-256 fingerprint of
the presented certificate.
|
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.addVerifyCertificateHashBytes(com.google.protobuf.ByteString value)
If specified, Envoy will verify (pin) the hex-encoded SHA-256 fingerprint of
the presented certificate.
|
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.addVerifySpkiSha256(String value)
If specified, Envoy will verify (pin) base64-encoded SHA-256 hash of
the Subject Public Key Information (SPKI) of the presented certificate.
|
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.addVerifySpkiSha256Bytes(com.google.protobuf.ByteString value)
If specified, Envoy will verify (pin) base64-encoded SHA-256 hash of
the Subject Public Key Information (SPKI) of the presented certificate.
|
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.addVerifySubjectAltName(String value)
An optional list of subject alternative names.
|
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.addVerifySubjectAltNameBytes(com.google.protobuf.ByteString value)
An optional list of subject alternative names.
|
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.clear() |
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.clearCrl()
An optional `certificate revocation list
<http://https://en.wikipedia.org/wiki/Certificate_revocation_list>`_
(in PEM format).
|
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.clearField(com.google.protobuf.Descriptors.FieldDescriptor field) |
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) |
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.clearRequireOcspStaple()
[#not-implemented-hide:] Must present a signed time-stamped OCSP response.
|
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.clearRequireSignedCertificateTimestamp()
[#not-implemented-hide:] Must present signed certificate time-stamp.
|
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.clearTrustedCa()
TLS certificate data containing certificate authority certificates to use in verifying
a presented peer certificate (e.g. server certificate for clusters or client certificate
for listeners).
|
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.clearVerifyCertificateHash()
If specified, Envoy will verify (pin) the hex-encoded SHA-256 fingerprint of
the presented certificate.
|
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.clearVerifySpkiSha256()
If specified, Envoy will verify (pin) base64-encoded SHA-256 hash of
the Subject Public Key Information (SPKI) of the presented certificate.
|
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.clearVerifySubjectAltName()
An optional list of subject alternative names.
|
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.clone() |
Cert.CertificateValidationContext.Builder |
Auth.AuthAction.X509Rule.Builder.getValidationContextBuilder()
How to validate peer certificates.
|
Cert.CertificateValidationContext.Builder |
Cert.CommonTlsContext.Builder.getValidationContextBuilder()
How to validate peer certificates.
|
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.mergeCrl(Base.DataSource value)
An optional `certificate revocation list
<http://https://en.wikipedia.org/wiki/Certificate_revocation_list>`_
(in PEM format).
|
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.mergeFrom(Cert.CertificateValidationContext other) |
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.mergeFrom(com.google.protobuf.CodedInputStream input,
com.google.protobuf.ExtensionRegistryLite extensionRegistry) |
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.mergeFrom(com.google.protobuf.Message other) |
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.mergeRequireOcspStaple(com.google.protobuf.BoolValue value)
[#not-implemented-hide:] Must present a signed time-stamped OCSP response.
|
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.mergeRequireSignedCertificateTimestamp(com.google.protobuf.BoolValue value)
[#not-implemented-hide:] Must present signed certificate time-stamp.
|
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.mergeTrustedCa(Base.DataSource value)
TLS certificate data containing certificate authority certificates to use in verifying
a presented peer certificate (e.g. server certificate for clusters or client certificate
for listeners).
|
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.mergeUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields) |
static Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.newBuilder() |
static Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.newBuilder(Cert.CertificateValidationContext prototype) |
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.newBuilderForType() |
protected Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.newBuilderForType(com.google.protobuf.GeneratedMessageV3.BuilderParent parent) |
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.setCrl(Base.DataSource.Builder builderForValue)
An optional `certificate revocation list
<http://https://en.wikipedia.org/wiki/Certificate_revocation_list>`_
(in PEM format).
|
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.setCrl(Base.DataSource value)
An optional `certificate revocation list
<http://https://en.wikipedia.org/wiki/Certificate_revocation_list>`_
(in PEM format).
|
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.setField(com.google.protobuf.Descriptors.FieldDescriptor field,
Object value) |
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.setRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field,
int index,
Object value) |
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.setRequireOcspStaple(com.google.protobuf.BoolValue.Builder builderForValue)
[#not-implemented-hide:] Must present a signed time-stamped OCSP response.
|
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.setRequireOcspStaple(com.google.protobuf.BoolValue value)
[#not-implemented-hide:] Must present a signed time-stamped OCSP response.
|
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.setRequireSignedCertificateTimestamp(com.google.protobuf.BoolValue.Builder builderForValue)
[#not-implemented-hide:] Must present signed certificate time-stamp.
|
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.setRequireSignedCertificateTimestamp(com.google.protobuf.BoolValue value)
[#not-implemented-hide:] Must present signed certificate time-stamp.
|
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.setTrustedCa(Base.DataSource.Builder builderForValue)
TLS certificate data containing certificate authority certificates to use in verifying
a presented peer certificate (e.g. server certificate for clusters or client certificate
for listeners).
|
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.setTrustedCa(Base.DataSource value)
TLS certificate data containing certificate authority certificates to use in verifying
a presented peer certificate (e.g. server certificate for clusters or client certificate
for listeners).
|
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.setUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields) |
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.setVerifyCertificateHash(int index,
String value)
If specified, Envoy will verify (pin) the hex-encoded SHA-256 fingerprint of
the presented certificate.
|
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.setVerifySpkiSha256(int index,
String value)
If specified, Envoy will verify (pin) base64-encoded SHA-256 hash of
the Subject Public Key Information (SPKI) of the presented certificate.
|
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.Builder.setVerifySubjectAltName(int index,
String value)
An optional list of subject alternative names.
|
Cert.CertificateValidationContext.Builder |
Cert.CertificateValidationContext.toBuilder() |
| Modifier and Type | Method and Description |
|---|---|
Auth.AuthAction.X509Rule.Builder |
Auth.AuthAction.X509Rule.Builder.setValidationContext(Cert.CertificateValidationContext.Builder builderForValue)
How to validate peer certificates.
|
Cert.CommonTlsContext.Builder |
Cert.CommonTlsContext.Builder.setValidationContext(Cert.CertificateValidationContext.Builder builderForValue)
How to validate peer certificates.
|
Copyright © 2018 The Envoy Project. All rights reserved.