software.amazon.awssdk.services.appmesh.model

Interface TlsValidationContext.Builder

All Superinterfaces:

Buildable, CopyableBuilder<TlsValidationContext.Builder,TlsValidationContext>, SdkBuilder<TlsValidationContext.Builder,TlsValidationContext>, SdkPojo

Enclosing class:

TlsValidationContext

public static interface TlsValidationContext.Builder
extends SdkPojo, CopyableBuilder<TlsValidationContext.Builder,TlsValidationContext>

Method Summary

Modifier and Type	Method and Description
default TlsValidationContext.Builder	subjectAlternativeNames(Consumer<SubjectAlternativeNames.Builder> subjectAlternativeNames) A reference to an object that represents the SANs for a Transport Layer Security (TLS) validation context.
TlsValidationContext.Builder	subjectAlternativeNames(SubjectAlternativeNames subjectAlternativeNames) A reference to an object that represents the SANs for a Transport Layer Security (TLS) validation context.
default TlsValidationContext.Builder	trust(Consumer<TlsValidationContextTrust.Builder> trust) A reference to where to retrieve the trust chain when validating a peer’s Transport Layer Security (TLS) certificate.
TlsValidationContext.Builder	trust(TlsValidationContextTrust trust) A reference to where to retrieve the trust chain when validating a peer’s Transport Layer Security (TLS) certificate.

Methods inherited from interface software.amazon.awssdk.core.SdkPojo

equalsBySdkFields, sdkFields

Methods inherited from interface software.amazon.awssdk.utils.builder.CopyableBuilder

copy

Methods inherited from interface software.amazon.awssdk.utils.builder.SdkBuilder

applyMutation, build

Method Detail

subjectAlternativeNames

TlsValidationContext.Builder subjectAlternativeNames(SubjectAlternativeNames subjectAlternativeNames)

A reference to an object that represents the SANs for a Transport Layer Security (TLS) validation context. If you don't specify SANs on the terminating mesh endpoint, the Envoy proxy for that node doesn't verify the SAN on a peer client certificate. If you don't specify SANs on the originating mesh endpoint, the SAN on the certificate provided by the terminating endpoint must match the mesh endpoint service discovery configuration. Since SPIRE vended certificates have a SPIFFE ID as a name, you must set the SAN since the name doesn't match the service discovery name.

Parameters:

subjectAlternativeNames - A reference to an object that represents the SANs for a Transport Layer Security (TLS) validation context. If you don't specify SANs on the terminating mesh endpoint, the Envoy proxy for that node doesn't verify the SAN on a peer client certificate. If you don't specify SANs on the originating mesh endpoint, the SAN on the certificate provided by the terminating endpoint must match the mesh endpoint service discovery configuration. Since SPIRE vended certificates have a SPIFFE ID as a name, you must set the SAN since the name doesn't match the service discovery name.

Returns:

Returns a reference to this object so that method calls can be chained together.

subjectAlternativeNames

default TlsValidationContext.Builder subjectAlternativeNames(Consumer<SubjectAlternativeNames.Builder> subjectAlternativeNames)

A reference to an object that represents the SANs for a Transport Layer Security (TLS) validation context. If you don't specify SANs on the terminating mesh endpoint, the Envoy proxy for that node doesn't verify the SAN on a peer client certificate. If you don't specify SANs on the originating mesh endpoint, the SAN on the certificate provided by the terminating endpoint must match the mesh endpoint service discovery configuration. Since SPIRE vended certificates have a SPIFFE ID as a name, you must set the SAN since the name doesn't match the service discovery name.

This is a convenience method that creates an instance of the SubjectAlternativeNames.Builder avoiding the need to create one manually via SubjectAlternativeNames.builder().

When the Consumer completes, SdkBuilder.build() is called immediately and its result is passed to subjectAlternativeNames(SubjectAlternativeNames).

Parameters:

subjectAlternativeNames - a consumer that will call methods on SubjectAlternativeNames.Builder

Returns:

Returns a reference to this object so that method calls can be chained together.

See Also:

subjectAlternativeNames(SubjectAlternativeNames)

trust

TlsValidationContext.Builder trust(TlsValidationContextTrust trust)

A reference to where to retrieve the trust chain when validating a peer’s Transport Layer Security (TLS) certificate.

Parameters:

trust - A reference to where to retrieve the trust chain when validating a peer’s Transport Layer Security (TLS) certificate.

Returns:

Returns a reference to this object so that method calls can be chained together.

trust

default TlsValidationContext.Builder trust(Consumer<TlsValidationContextTrust.Builder> trust)

A reference to where to retrieve the trust chain when validating a peer’s Transport Layer Security (TLS) certificate.

This is a convenience method that creates an instance of the TlsValidationContextTrust.Builder avoiding the need to create one manually via TlsValidationContextTrust.builder().

When the Consumer completes, SdkBuilder.build() is called immediately and its result is passed to trust(TlsValidationContextTrust).

Parameters:

trust - a consumer that will call methods on TlsValidationContextTrust.Builder

Returns:

Returns a reference to this object so that method calls can be chained together.

See Also:

trust(TlsValidationContextTrust)