public static final class CaPool.IssuancePolicy extends GeneratedMessageV3 implements CaPool.IssuancePolicyOrBuilder
Defines controls over all certificate issuance within a
CaPool.
Protobuf type google.cloud.security.privateca.v1.CaPool.IssuancePolicy
Inherited Members
com.google.protobuf.GeneratedMessageV3.<ListT>makeMutableCopy(ListT)
com.google.protobuf.GeneratedMessageV3.<ListT>makeMutableCopy(ListT,int)
com.google.protobuf.GeneratedMessageV3.<T>emptyList(java.lang.Class<T>)
com.google.protobuf.GeneratedMessageV3.internalGetMapFieldReflection(int)
Static Fields
ALLOWED_ISSUANCE_MODES_FIELD_NUMBER
public static final int ALLOWED_ISSUANCE_MODES_FIELD_NUMBER
| Field Value |
|---|
| Type | Description |
int | |
ALLOWED_KEY_TYPES_FIELD_NUMBER
public static final int ALLOWED_KEY_TYPES_FIELD_NUMBER
| Field Value |
|---|
| Type | Description |
int | |
BASELINE_VALUES_FIELD_NUMBER
public static final int BASELINE_VALUES_FIELD_NUMBER
| Field Value |
|---|
| Type | Description |
int | |
IDENTITY_CONSTRAINTS_FIELD_NUMBER
public static final int IDENTITY_CONSTRAINTS_FIELD_NUMBER
| Field Value |
|---|
| Type | Description |
int | |
MAXIMUM_LIFETIME_FIELD_NUMBER
public static final int MAXIMUM_LIFETIME_FIELD_NUMBER
| Field Value |
|---|
| Type | Description |
int | |
PASSTHROUGH_EXTENSIONS_FIELD_NUMBER
public static final int PASSTHROUGH_EXTENSIONS_FIELD_NUMBER
| Field Value |
|---|
| Type | Description |
int | |
Static Methods
getDefaultInstance()
public static CaPool.IssuancePolicy getDefaultInstance()
getDescriptor()
public static final Descriptors.Descriptor getDescriptor()
newBuilder()
public static CaPool.IssuancePolicy.Builder newBuilder()
newBuilder(CaPool.IssuancePolicy prototype)
public static CaPool.IssuancePolicy.Builder newBuilder(CaPool.IssuancePolicy prototype)
public static CaPool.IssuancePolicy parseDelimitedFrom(InputStream input)
public static CaPool.IssuancePolicy parseDelimitedFrom(InputStream input, ExtensionRegistryLite extensionRegistry)
parseFrom(byte[] data)
public static CaPool.IssuancePolicy parseFrom(byte[] data)
| Parameter |
|---|
| Name | Description |
data | byte[]
|
parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry)
public static CaPool.IssuancePolicy parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry)
parseFrom(ByteString data)
public static CaPool.IssuancePolicy parseFrom(ByteString data)
parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry)
public static CaPool.IssuancePolicy parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry)
public static CaPool.IssuancePolicy parseFrom(CodedInputStream input)
public static CaPool.IssuancePolicy parseFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)
public static CaPool.IssuancePolicy parseFrom(InputStream input)
public static CaPool.IssuancePolicy parseFrom(InputStream input, ExtensionRegistryLite extensionRegistry)
parseFrom(ByteBuffer data)
public static CaPool.IssuancePolicy parseFrom(ByteBuffer data)
parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry)
public static CaPool.IssuancePolicy parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry)
parser()
public static Parser<CaPool.IssuancePolicy> parser()
Methods
equals(Object obj)
public boolean equals(Object obj)
| Parameter |
|---|
| Name | Description |
obj | Object
|
Overrides
getAllowedIssuanceModes()
public CaPool.IssuancePolicy.IssuanceModes getAllowedIssuanceModes()
Optional. If specified, then only methods allowed in the
IssuanceModes
may be used to issue
Certificates.
.google.cloud.security.privateca.v1.CaPool.IssuancePolicy.IssuanceModes allowed_issuance_modes = 3 [(.google.api.field_behavior) = OPTIONAL];
getAllowedIssuanceModesOrBuilder()
public CaPool.IssuancePolicy.IssuanceModesOrBuilder getAllowedIssuanceModesOrBuilder()
Optional. If specified, then only methods allowed in the
IssuanceModes
may be used to issue
Certificates.
.google.cloud.security.privateca.v1.CaPool.IssuancePolicy.IssuanceModes allowed_issuance_modes = 3 [(.google.api.field_behavior) = OPTIONAL];
getAllowedKeyTypes(int index)
public CaPool.IssuancePolicy.AllowedKeyType getAllowedKeyTypes(int index)
Optional. If any
AllowedKeyType
is specified, then the certificate request's public key must match one of
the key types listed here. Otherwise, any key may be used.
repeated .google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType allowed_key_types = 1 [(.google.api.field_behavior) = OPTIONAL];
| Parameter |
|---|
| Name | Description |
index | int
|
getAllowedKeyTypesCount()
public int getAllowedKeyTypesCount()
Optional. If any
AllowedKeyType
is specified, then the certificate request's public key must match one of
the key types listed here. Otherwise, any key may be used.
repeated .google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType allowed_key_types = 1 [(.google.api.field_behavior) = OPTIONAL];
| Returns |
|---|
| Type | Description |
int | |
getAllowedKeyTypesList()
public List<CaPool.IssuancePolicy.AllowedKeyType> getAllowedKeyTypesList()
Optional. If any
AllowedKeyType
is specified, then the certificate request's public key must match one of
the key types listed here. Otherwise, any key may be used.
repeated .google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType allowed_key_types = 1 [(.google.api.field_behavior) = OPTIONAL];
getAllowedKeyTypesOrBuilder(int index)
public CaPool.IssuancePolicy.AllowedKeyTypeOrBuilder getAllowedKeyTypesOrBuilder(int index)
Optional. If any
AllowedKeyType
is specified, then the certificate request's public key must match one of
the key types listed here. Otherwise, any key may be used.
repeated .google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType allowed_key_types = 1 [(.google.api.field_behavior) = OPTIONAL];
| Parameter |
|---|
| Name | Description |
index | int
|
getAllowedKeyTypesOrBuilderList()
public List<? extends CaPool.IssuancePolicy.AllowedKeyTypeOrBuilder> getAllowedKeyTypesOrBuilderList()
Optional. If any
AllowedKeyType
is specified, then the certificate request's public key must match one of
the key types listed here. Otherwise, any key may be used.
repeated .google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType allowed_key_types = 1 [(.google.api.field_behavior) = OPTIONAL];
| Returns |
|---|
| Type | Description |
List<? extends com.google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyTypeOrBuilder> | |
getBaselineValues()
public X509Parameters getBaselineValues()
Optional. A set of X.509 values that will be applied to all certificates
issued through this CaPool.
If a certificate request includes conflicting values for the same
properties, they will be overwritten by the values defined here. If a
certificate request uses a
CertificateTemplate
that defines conflicting
predefined_values
for the same properties, the certificate issuance request will fail.
.google.cloud.security.privateca.v1.X509Parameters baseline_values = 4 [(.google.api.field_behavior) = OPTIONAL];
getBaselineValuesOrBuilder()
public X509ParametersOrBuilder getBaselineValuesOrBuilder()
Optional. A set of X.509 values that will be applied to all certificates
issued through this CaPool.
If a certificate request includes conflicting values for the same
properties, they will be overwritten by the values defined here. If a
certificate request uses a
CertificateTemplate
that defines conflicting
predefined_values
for the same properties, the certificate issuance request will fail.
.google.cloud.security.privateca.v1.X509Parameters baseline_values = 4 [(.google.api.field_behavior) = OPTIONAL];
getDefaultInstanceForType()
public CaPool.IssuancePolicy getDefaultInstanceForType()
getIdentityConstraints()
public CertificateIdentityConstraints getIdentityConstraints()
Optional. Describes constraints on identities that may appear in
Certificates issued
through this CaPool. If this
is omitted, then this CaPool
will not add restrictions on a certificate's identity.
.google.cloud.security.privateca.v1.CertificateIdentityConstraints identity_constraints = 5 [(.google.api.field_behavior) = OPTIONAL];
getIdentityConstraintsOrBuilder()
public CertificateIdentityConstraintsOrBuilder getIdentityConstraintsOrBuilder()
Optional. Describes constraints on identities that may appear in
Certificates issued
through this CaPool. If this
is omitted, then this CaPool
will not add restrictions on a certificate's identity.
.google.cloud.security.privateca.v1.CertificateIdentityConstraints identity_constraints = 5 [(.google.api.field_behavior) = OPTIONAL];
getMaximumLifetime()
public Duration getMaximumLifetime()
Optional. The maximum lifetime allowed for issued
Certificates. Note that
if the issuing
CertificateAuthority
expires before a
Certificate's requested
maximum_lifetime, the effective lifetime will be explicitly truncated to
match it.
.google.protobuf.Duration maximum_lifetime = 2 [(.google.api.field_behavior) = OPTIONAL];
| Returns |
|---|
| Type | Description |
Duration | The maximumLifetime.
|
getMaximumLifetimeOrBuilder()
public DurationOrBuilder getMaximumLifetimeOrBuilder()
Optional. The maximum lifetime allowed for issued
Certificates. Note that
if the issuing
CertificateAuthority
expires before a
Certificate's requested
maximum_lifetime, the effective lifetime will be explicitly truncated to
match it.
.google.protobuf.Duration maximum_lifetime = 2 [(.google.api.field_behavior) = OPTIONAL];
getParserForType()
public Parser<CaPool.IssuancePolicy> getParserForType()
Overrides
getPassthroughExtensions()
public CertificateExtensionConstraints getPassthroughExtensions()
Optional. Describes the set of X.509 extensions that may appear in a
Certificate issued
through this CaPool. If a
certificate request sets extensions that don't appear in the
passthrough_extensions,
those extensions will be dropped. If a certificate request uses a
CertificateTemplate
with
predefined_values
that don't appear here, the certificate issuance request will fail. If
this is omitted, then this
CaPool will not add
restrictions on a certificate's X.509 extensions. These constraints do
not apply to X.509 extensions set in this
CaPool's
baseline_values.
.google.cloud.security.privateca.v1.CertificateExtensionConstraints passthrough_extensions = 6 [(.google.api.field_behavior) = OPTIONAL];
getPassthroughExtensionsOrBuilder()
public CertificateExtensionConstraintsOrBuilder getPassthroughExtensionsOrBuilder()
Optional. Describes the set of X.509 extensions that may appear in a
Certificate issued
through this CaPool. If a
certificate request sets extensions that don't appear in the
passthrough_extensions,
those extensions will be dropped. If a certificate request uses a
CertificateTemplate
with
predefined_values
that don't appear here, the certificate issuance request will fail. If
this is omitted, then this
CaPool will not add
restrictions on a certificate's X.509 extensions. These constraints do
not apply to X.509 extensions set in this
CaPool's
baseline_values.
.google.cloud.security.privateca.v1.CertificateExtensionConstraints passthrough_extensions = 6 [(.google.api.field_behavior) = OPTIONAL];
getSerializedSize()
public int getSerializedSize()
| Returns |
|---|
| Type | Description |
int | |
Overrides
hasAllowedIssuanceModes()
public boolean hasAllowedIssuanceModes()
Optional. If specified, then only methods allowed in the
IssuanceModes
may be used to issue
Certificates.
.google.cloud.security.privateca.v1.CaPool.IssuancePolicy.IssuanceModes allowed_issuance_modes = 3 [(.google.api.field_behavior) = OPTIONAL];
| Returns |
|---|
| Type | Description |
boolean | Whether the allowedIssuanceModes field is set.
|
hasBaselineValues()
public boolean hasBaselineValues()
Optional. A set of X.509 values that will be applied to all certificates
issued through this CaPool.
If a certificate request includes conflicting values for the same
properties, they will be overwritten by the values defined here. If a
certificate request uses a
CertificateTemplate
that defines conflicting
predefined_values
for the same properties, the certificate issuance request will fail.
.google.cloud.security.privateca.v1.X509Parameters baseline_values = 4 [(.google.api.field_behavior) = OPTIONAL];
| Returns |
|---|
| Type | Description |
boolean | Whether the baselineValues field is set.
|
hasIdentityConstraints()
public boolean hasIdentityConstraints()
Optional. Describes constraints on identities that may appear in
Certificates issued
through this CaPool. If this
is omitted, then this CaPool
will not add restrictions on a certificate's identity.
.google.cloud.security.privateca.v1.CertificateIdentityConstraints identity_constraints = 5 [(.google.api.field_behavior) = OPTIONAL];
| Returns |
|---|
| Type | Description |
boolean | Whether the identityConstraints field is set.
|
hasMaximumLifetime()
public boolean hasMaximumLifetime()
Optional. The maximum lifetime allowed for issued
Certificates. Note that
if the issuing
CertificateAuthority
expires before a
Certificate's requested
maximum_lifetime, the effective lifetime will be explicitly truncated to
match it.
.google.protobuf.Duration maximum_lifetime = 2 [(.google.api.field_behavior) = OPTIONAL];
| Returns |
|---|
| Type | Description |
boolean | Whether the maximumLifetime field is set.
|
hasPassthroughExtensions()
public boolean hasPassthroughExtensions()
Optional. Describes the set of X.509 extensions that may appear in a
Certificate issued
through this CaPool. If a
certificate request sets extensions that don't appear in the
passthrough_extensions,
those extensions will be dropped. If a certificate request uses a
CertificateTemplate
with
predefined_values
that don't appear here, the certificate issuance request will fail. If
this is omitted, then this
CaPool will not add
restrictions on a certificate's X.509 extensions. These constraints do
not apply to X.509 extensions set in this
CaPool's
baseline_values.
.google.cloud.security.privateca.v1.CertificateExtensionConstraints passthrough_extensions = 6 [(.google.api.field_behavior) = OPTIONAL];
| Returns |
|---|
| Type | Description |
boolean | Whether the passthroughExtensions field is set.
|
hashCode()
| Returns |
|---|
| Type | Description |
int | |
Overrides
internalGetFieldAccessorTable()
protected GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()
Overrides
isInitialized()
public final boolean isInitialized()
Overrides
newBuilderForType()
public CaPool.IssuancePolicy.Builder newBuilderForType()
newBuilderForType(GeneratedMessageV3.BuilderParent parent)
protected CaPool.IssuancePolicy.Builder newBuilderForType(GeneratedMessageV3.BuilderParent parent)
Overrides
newInstance(GeneratedMessageV3.UnusedPrivateParameter unused)
protected Object newInstance(GeneratedMessageV3.UnusedPrivateParameter unused)
Overrides
toBuilder()
public CaPool.IssuancePolicy.Builder toBuilder()
writeTo(CodedOutputStream output)
public void writeTo(CodedOutputStream output)
Overrides
