Google Cloud Network Security V1 Client - Class ClientValidationMode (1.3.0)

Reference documentation and code samples for the Google Cloud Network Security V1 Client class ClientValidationMode.

Mutual TLS certificate validation mode.

Protobuf type google.cloud.networksecurity.v1.ServerTlsPolicy.MTLSPolicy.ClientValidationMode

Namespace

Google \ Cloud \ NetworkSecurity \ V1 \ ServerTlsPolicy \ MTLSPolicy

Methods

static::name

Parameter
Name Description
value mixed

static::value

Parameter
Name Description
name mixed

Constants

CLIENT_VALIDATION_MODE_UNSPECIFIED

Value: 0

Not allowed.

Generated from protobuf enum CLIENT_VALIDATION_MODE_UNSPECIFIED = 0;

ALLOW_INVALID_OR_MISSING_CLIENT_CERT

Value: 1

Allow connection even if certificate chain validation of the client certificate failed or no client certificate was presented. The proof of possession of the private key is always checked if client certificate was presented. This mode requires the backend to implement processing of data extracted from a client certificate to authenticate the peer, or to reject connections if the client certificate fingerprint is missing.

Generated from protobuf enum ALLOW_INVALID_OR_MISSING_CLIENT_CERT = 1;

REJECT_INVALID

Value: 2

Require a client certificate and allow connection to the backend only if validation of the client certificate passed.

If set, requires a reference to non-empty TrustConfig specified in client_validation_trust_config.

Generated from protobuf enum REJECT_INVALID = 2;