Struct TlsInspectionPolicy

pub struct TlsInspectionPolicy {
    pub ca_pool: Option<String>,
    pub create_time: Option<DateTime<Utc>>,
    pub custom_tls_features: Option<Vec<String>>,
    pub description: Option<String>,
    pub exclude_public_ca_set: Option<bool>,
    pub min_tls_version: Option<String>,
    pub name: Option<String>,
    pub tls_feature_profile: Option<String>,
    pub trust_config: Option<String>,
    pub update_time: Option<DateTime<Utc>>,
}

The TlsInspectionPolicy resource contains references to CA pools in Certificate Authority Service and associated metadata.

Activities

This type is used in activities, which are methods you may call on this type or where this type is involved in. The list links the activity name, along with information about where it is used (one of request and response).

• locations tls inspection policies create projects (request)
• locations tls inspection policies get projects (response)
• locations tls inspection policies patch projects (request)

Fields

ca_pool: Option<String>

Required. A CA pool resource used to issue interception certificates. The CA pool string has a relative resource path following the form “projects/{project}/locations/{location}/caPools/{ca_pool}”.

create_time: Option<DateTime<Utc>>

Output only. The timestamp when the resource was created.

custom_tls_features: Option<Vec<String>>

Optional. List of custom TLS cipher suites selected. This field is valid only if the selected tls_feature_profile is CUSTOM. The compute.SslPoliciesService.ListAvailableFeatures method returns the set of features that can be specified in this list. Note that Secure Web Proxy does not yet honor this field.

description: Option<String>

Optional. Free-text description of the resource.

exclude_public_ca_set: Option<bool>

Optional. If FALSE (the default), use our default set of public CAs in addition to any CAs specified in trust_config. These public CAs are currently based on the Mozilla Root Program and are subject to change over time. If TRUE, do not accept our default set of public CAs. Only CAs specified in trust_config will be accepted. This defaults to FALSE (use public CAs in addition to trust_config) for backwards compatibility, but trusting public root CAs is not recommended unless the traffic in question is outbound to public web servers. When possible, prefer setting this to “false” and explicitly specifying trusted CAs and certificates in a TrustConfig. Note that Secure Web Proxy does not yet honor this field.

min_tls_version: Option<String>

Optional. Minimum TLS version that the firewall should use when negotiating connections with both clients and servers. If this is not set, then the default value is to allow the broadest set of clients and servers (TLS 1.0 or higher). Setting this to more restrictive values may improve security, but may also prevent the firewall from connecting to some clients or servers. Note that Secure Web Proxy does not yet honor this field.

name: Option<String>

Required. Name of the resource. Name is of the form projects/{project}/locations/{location}/tlsInspectionPolicies/{tls_inspection_policy} tls_inspection_policy should match the pattern:(^a-z?$).

tls_feature_profile: Option<String>

Optional. The selected Profile. If this is not set, then the default value is to allow the broadest set of clients and servers (“PROFILE_COMPATIBLE”). Setting this to more restrictive values may improve security, but may also prevent the TLS inspection proxy from connecting to some clients or servers. Note that Secure Web Proxy does not yet honor this field.

trust_config: Option<String>

Optional. A TrustConfig resource used when making a connection to the TLS server. This is a relative resource path following the form “projects/{project}/locations/{location}/trustConfigs/{trust_config}”. This is necessary to intercept TLS connections to servers with certificates signed by a private CA or self-signed certificates. Note that Secure Web Proxy does not yet honor this field.

update_time: Option<DateTime<Utc>>

Output only. The timestamp when the resource was updated.

Trait Implementations

impl Clone for TlsInspectionPolicy

fn clone(&self) -> TlsInspectionPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TlsInspectionPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for TlsInspectionPolicy

fn default() -> TlsInspectionPolicy

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for TlsInspectionPolicy

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for TlsInspectionPolicy

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl RequestValue for TlsInspectionPolicy

impl ResponseResult for TlsInspectionPolicy