Package com.oracle.bmc.networkfirewall.model

Class SslForwardProxyProfile

  • @Generated(value="OracleSDKGenerator",
           comments="API Version: 20230501")
public final class SslForwardProxyProfile
extends DecryptionProfile
    SSLForwardProxy used on the firewall policy rules.
    Note: Objects should always be created or deserialized using the SslForwardProxyProfile.Builder. This model distinguishes fields that are null because they are unset from fields that are explicitly set to null. This is done in the setter methods of the SslForwardProxyProfile.Builder, which maintain a set of all explicitly set fields called SslForwardProxyProfile.Builder.__explicitlySet__. The hashCode() and equals(Object) methods are implemented to take the explicitly set fields into account. The constructor, on the other hand, does not take the explicitly set fields into account (since the constructor cannot distinguish explicit null from unset null).

    • Constructor Detail

      • SslForwardProxyProfile

        @Deprecated
public SslForwardProxyProfile​(String name,
                              String parentResourceId,
                              Boolean isExpiredCertificateBlocked,
                              Boolean isUntrustedIssuerBlocked,
                              Boolean isRevocationStatusTimeoutBlocked,
                              Boolean isUnsupportedVersionBlocked,
                              Boolean isUnsupportedCipherBlocked,
                              Boolean isUnknownRevocationStatusBlocked,
                              Boolean areCertificateExtensionsRestricted,
                              Boolean isAutoIncludeAltName,
                              Boolean isOutOfCapacityBlocked)
        Deprecated.

    • Method Detail

      • getIsExpiredCertificateBlocked

        public Boolean getIsExpiredCertificateBlocked()
        Whether to block sessions if server’s certificate is expired.
        Returns:
        the value

      • getIsUntrustedIssuerBlocked

        public Boolean getIsUntrustedIssuerBlocked()
        Whether to block sessions if server’s certificate is issued by an untrusted certificate authority (CA).
        Returns:
        the value

      • getIsRevocationStatusTimeoutBlocked

        public Boolean getIsRevocationStatusTimeoutBlocked()
        Whether to block sessions if the revocation status check for server’s certificate does not succeed within the maximum allowed time (defaulting to 5 seconds).
        Returns:
        the value

      • getIsUnsupportedVersionBlocked

        public Boolean getIsUnsupportedVersionBlocked()
        Whether to block sessions if SSL version is not supported.
        Returns:
        the value

      • getIsUnsupportedCipherBlocked

        public Boolean getIsUnsupportedCipherBlocked()
        Whether to block sessions if SSL cipher suite is not supported.
        Returns:
        the value

      • getIsUnknownRevocationStatusBlocked

        public Boolean getIsUnknownRevocationStatusBlocked()
        Whether to block sessions if the revocation status check for server’s certificate results in “unknown”.
        Returns:
        the value

      • getAreCertificateExtensionsRestricted

        public Boolean getAreCertificateExtensionsRestricted()
        Whether to block sessions if the server’s certificate uses extensions other than key usage and/or extended key usage.
        Returns:
        the value

      • getIsAutoIncludeAltName

        public Boolean getIsAutoIncludeAltName()
        Whether to automatically append SAN to impersonating certificate if server certificate is missing SAN.
        Returns:
        the value

      • getIsOutOfCapacityBlocked

        public Boolean getIsOutOfCapacityBlocked()
        Whether to block sessions if the firewall is temporarily unable to decrypt their traffic.
        Returns:
        the value

      • toString

        public String toString​(boolean includeByteArrayContents)
        Return a string representation of the object.
        Overrides:
        toString in class DecryptionProfile
        Parameters:
        includeByteArrayContents - true to include the full contents of byte arrays
        Returns:
        string representation