Package com.oracle.bmc.networkfirewall.model

Class SslForwardProxyProfile.Builder

    • Constructor Detail

      • Builder

        public Builder()

    • Method Detail

      • isExpiredCertificateBlocked

        public SslForwardProxyProfile.Builder isExpiredCertificateBlocked​(Boolean isExpiredCertificateBlocked)
        Whether to block sessions if server’s certificate is expired.
        Parameters:
        isExpiredCertificateBlocked - the value to set
        Returns:
        this builder

      • isUntrustedIssuerBlocked

        public SslForwardProxyProfile.Builder isUntrustedIssuerBlocked​(Boolean isUntrustedIssuerBlocked)
        Whether to block sessions if server’s certificate is issued by an untrusted certificate authority (CA).
        Parameters:
        isUntrustedIssuerBlocked - the value to set
        Returns:
        this builder

      • isRevocationStatusTimeoutBlocked

        public SslForwardProxyProfile.Builder isRevocationStatusTimeoutBlocked​(Boolean isRevocationStatusTimeoutBlocked)
        Whether to block sessions if the revocation status check for server’s certificate does not succeed within the maximum allowed time (defaulting to 5 seconds).
        Parameters:
        isRevocationStatusTimeoutBlocked - the value to set
        Returns:
        this builder

      • isUnsupportedVersionBlocked

        public SslForwardProxyProfile.Builder isUnsupportedVersionBlocked​(Boolean isUnsupportedVersionBlocked)
        Whether to block sessions if SSL version is not supported.
        Parameters:
        isUnsupportedVersionBlocked - the value to set
        Returns:
        this builder

      • isUnsupportedCipherBlocked

        public SslForwardProxyProfile.Builder isUnsupportedCipherBlocked​(Boolean isUnsupportedCipherBlocked)
        Whether to block sessions if SSL cipher suite is not supported.
        Parameters:
        isUnsupportedCipherBlocked - the value to set
        Returns:
        this builder

      • isUnknownRevocationStatusBlocked

        public SslForwardProxyProfile.Builder isUnknownRevocationStatusBlocked​(Boolean isUnknownRevocationStatusBlocked)
        Whether to block sessions if the revocation status check for server’s certificate results in “unknown”.
        Parameters:
        isUnknownRevocationStatusBlocked - the value to set
        Returns:
        this builder

      • areCertificateExtensionsRestricted

        public SslForwardProxyProfile.Builder areCertificateExtensionsRestricted​(Boolean areCertificateExtensionsRestricted)
        Whether to block sessions if the server’s certificate uses extensions other than key usage and/or extended key usage.
        Parameters:
        areCertificateExtensionsRestricted - the value to set
        Returns:
        this builder

      • isAutoIncludeAltName

        public SslForwardProxyProfile.Builder isAutoIncludeAltName​(Boolean isAutoIncludeAltName)
        Whether to automatically append SAN to impersonating certificate if server certificate is missing SAN.
        Parameters:
        isAutoIncludeAltName - the value to set
        Returns:
        this builder

      • isOutOfCapacityBlocked

        public SslForwardProxyProfile.Builder isOutOfCapacityBlocked​(Boolean isOutOfCapacityBlocked)
        Whether to block sessions if the firewall is temporarily unable to decrypt their traffic.
        Parameters:
        isOutOfCapacityBlocked - the value to set
        Returns:
        this builder