TLS configuration information for virtual hosts and TargetServers.

Attributes

• ciphers (type: list(String.t), default: nil) - The SSL/TLS cipher suites to be used. For programmable proxies, it must be one of the cipher suite names listed in: http://docs.oracle.com/javase/8/docs/technotes/guides/security/StandardNames.html#ciphersuites. For configurable proxies, it must follow the configuration specified in: https://commondatastorage.googleapis.com/chromium-boringssl-docs/ssl.h.html#Cipher-suite-configuration. This setting has no effect for configurable proxies when negotiating TLS 1.3.
• clientAuthEnabled (type: boolean(), default: nil) - Optional. Enables two-way TLS.
• commonName (type: GoogleApi.Apigee.V1.Model.GoogleCloudApigeeV1TlsInfoCommonName.t, default: nil) - The TLS Common Name of the certificate.
• enabled (type: boolean(), default: nil) - Required. Enables TLS. If false, neither one-way nor two-way TLS will be enabled.
• ignoreValidationErrors (type: boolean(), default: nil) - If true, Edge ignores TLS certificate errors. Valid when configuring TLS for target servers and target endpoints, and when configuring virtual hosts that use 2-way TLS. When used with a target endpoint/target server, if the backend system uses SNI and returns a cert with a subject Distinguished Name (DN) that does not match the hostname, there is no way to ignore the error and the connection fails.
• keyAlias (type: String.t, default: nil) - Required if client_auth_enabled is true. The resource ID for the alias containing the private key and cert.
• keyStore (type: String.t, default: nil) - Required if client_auth_enabled is true. The resource ID of the keystore.
• protocols (type: list(String.t), default: nil) - The TLS versioins to be used.
• trustStore (type: String.t, default: nil) - The resource ID of the truststore.