com.amazonaws.services.networkfirewall.model.CheckCertificateRevocationStatusActions Maven / Gradle / Ivy
Show all versions of aws-java-sdk-networkfirewall Show documentation
/*
* Copyright 2019-2024 Amazon.com, Inc. or its affiliates. All Rights Reserved.
*
* Licensed under the Apache License, Version 2.0 (the "License"). You may not use this file except in compliance with
* the License. A copy of the License is located at
*
* http://aws.amazon.com/apache2.0
*
* or in the "license" file accompanying this file. This file is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
* CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions
* and limitations under the License.
*/
package com.amazonaws.services.networkfirewall.model;
import java.io.Serializable;
import javax.annotation.Generated;
import com.amazonaws.protocol.StructuredPojo;
import com.amazonaws.protocol.ProtocolMarshaller;
/**
*
* Defines the actions to take on the SSL/TLS connection if the certificate presented by the server in the connection
* has a revoked or unknown status.
*
*
* @see AWS API Documentation
*/
@Generated("com.amazonaws:aws-java-sdk-code-generator")
public class CheckCertificateRevocationStatusActions implements Serializable, Cloneable, StructuredPojo {
/**
*
* Configures how Network Firewall processes traffic when it determines that the certificate presented by the server
* in the SSL/TLS connection has a revoked status.
*
*
* -
*
* PASS - Allow the connection to continue, and pass subsequent packets to the stateful engine for
* inspection.
*
*
* -
*
* DROP - Network Firewall closes the connection and drops subsequent packets for that connection.
*
*
* -
*
* REJECT - Network Firewall sends a TCP reject packet back to your client. The service closes the connection
* and drops subsequent packets for that connection. REJECT
is available only for TCP traffic.
*
*
*
*/
private String revokedStatusAction;
/**
*
* Configures how Network Firewall processes traffic when it determines that the certificate presented by the server
* in the SSL/TLS connection has an unknown status, or a status that cannot be determined for any other reason,
* including when the service is unable to connect to the OCSP and CRL endpoints for the certificate.
*
*
* -
*
* PASS - Allow the connection to continue, and pass subsequent packets to the stateful engine for
* inspection.
*
*
* -
*
* DROP - Network Firewall closes the connection and drops subsequent packets for that connection.
*
*
* -
*
* REJECT - Network Firewall sends a TCP reject packet back to your client. The service closes the connection
* and drops subsequent packets for that connection. REJECT
is available only for TCP traffic.
*
*
*
*/
private String unknownStatusAction;
/**
*
* Configures how Network Firewall processes traffic when it determines that the certificate presented by the server
* in the SSL/TLS connection has a revoked status.
*
*
* -
*
* PASS - Allow the connection to continue, and pass subsequent packets to the stateful engine for
* inspection.
*
*
* -
*
* DROP - Network Firewall closes the connection and drops subsequent packets for that connection.
*
*
* -
*
* REJECT - Network Firewall sends a TCP reject packet back to your client. The service closes the connection
* and drops subsequent packets for that connection. REJECT
is available only for TCP traffic.
*
*
*
*
* @param revokedStatusAction
* Configures how Network Firewall processes traffic when it determines that the certificate presented by the
* server in the SSL/TLS connection has a revoked status.
*
* -
*
* PASS - Allow the connection to continue, and pass subsequent packets to the stateful engine for
* inspection.
*
*
* -
*
* DROP - Network Firewall closes the connection and drops subsequent packets for that connection.
*
*
* -
*
* REJECT - Network Firewall sends a TCP reject packet back to your client. The service closes the
* connection and drops subsequent packets for that connection. REJECT
is available only for TCP
* traffic.
*
*
* @see RevocationCheckAction
*/
public void setRevokedStatusAction(String revokedStatusAction) {
this.revokedStatusAction = revokedStatusAction;
}
/**
*
* Configures how Network Firewall processes traffic when it determines that the certificate presented by the server
* in the SSL/TLS connection has a revoked status.
*
*
* -
*
* PASS - Allow the connection to continue, and pass subsequent packets to the stateful engine for
* inspection.
*
*
* -
*
* DROP - Network Firewall closes the connection and drops subsequent packets for that connection.
*
*
* -
*
* REJECT - Network Firewall sends a TCP reject packet back to your client. The service closes the connection
* and drops subsequent packets for that connection. REJECT
is available only for TCP traffic.
*
*
*
*
* @return Configures how Network Firewall processes traffic when it determines that the certificate presented by
* the server in the SSL/TLS connection has a revoked status.
*
* -
*
* PASS - Allow the connection to continue, and pass subsequent packets to the stateful engine for
* inspection.
*
*
* -
*
* DROP - Network Firewall closes the connection and drops subsequent packets for that connection.
*
*
* -
*
* REJECT - Network Firewall sends a TCP reject packet back to your client. The service closes the
* connection and drops subsequent packets for that connection. REJECT
is available only for
* TCP traffic.
*
*
* @see RevocationCheckAction
*/
public String getRevokedStatusAction() {
return this.revokedStatusAction;
}
/**
*
* Configures how Network Firewall processes traffic when it determines that the certificate presented by the server
* in the SSL/TLS connection has a revoked status.
*
*
* -
*
* PASS - Allow the connection to continue, and pass subsequent packets to the stateful engine for
* inspection.
*
*
* -
*
* DROP - Network Firewall closes the connection and drops subsequent packets for that connection.
*
*
* -
*
* REJECT - Network Firewall sends a TCP reject packet back to your client. The service closes the connection
* and drops subsequent packets for that connection. REJECT
is available only for TCP traffic.
*
*
*
*
* @param revokedStatusAction
* Configures how Network Firewall processes traffic when it determines that the certificate presented by the
* server in the SSL/TLS connection has a revoked status.
*
* -
*
* PASS - Allow the connection to continue, and pass subsequent packets to the stateful engine for
* inspection.
*
*
* -
*
* DROP - Network Firewall closes the connection and drops subsequent packets for that connection.
*
*
* -
*
* REJECT - Network Firewall sends a TCP reject packet back to your client. The service closes the
* connection and drops subsequent packets for that connection. REJECT
is available only for TCP
* traffic.
*
*
* @return Returns a reference to this object so that method calls can be chained together.
* @see RevocationCheckAction
*/
public CheckCertificateRevocationStatusActions withRevokedStatusAction(String revokedStatusAction) {
setRevokedStatusAction(revokedStatusAction);
return this;
}
/**
*
* Configures how Network Firewall processes traffic when it determines that the certificate presented by the server
* in the SSL/TLS connection has a revoked status.
*
*
* -
*
* PASS - Allow the connection to continue, and pass subsequent packets to the stateful engine for
* inspection.
*
*
* -
*
* DROP - Network Firewall closes the connection and drops subsequent packets for that connection.
*
*
* -
*
* REJECT - Network Firewall sends a TCP reject packet back to your client. The service closes the connection
* and drops subsequent packets for that connection. REJECT
is available only for TCP traffic.
*
*
*
*
* @param revokedStatusAction
* Configures how Network Firewall processes traffic when it determines that the certificate presented by the
* server in the SSL/TLS connection has a revoked status.
*
* -
*
* PASS - Allow the connection to continue, and pass subsequent packets to the stateful engine for
* inspection.
*
*
* -
*
* DROP - Network Firewall closes the connection and drops subsequent packets for that connection.
*
*
* -
*
* REJECT - Network Firewall sends a TCP reject packet back to your client. The service closes the
* connection and drops subsequent packets for that connection. REJECT
is available only for TCP
* traffic.
*
*
* @return Returns a reference to this object so that method calls can be chained together.
* @see RevocationCheckAction
*/
public CheckCertificateRevocationStatusActions withRevokedStatusAction(RevocationCheckAction revokedStatusAction) {
this.revokedStatusAction = revokedStatusAction.toString();
return this;
}
/**
*
* Configures how Network Firewall processes traffic when it determines that the certificate presented by the server
* in the SSL/TLS connection has an unknown status, or a status that cannot be determined for any other reason,
* including when the service is unable to connect to the OCSP and CRL endpoints for the certificate.
*
*
* -
*
* PASS - Allow the connection to continue, and pass subsequent packets to the stateful engine for
* inspection.
*
*
* -
*
* DROP - Network Firewall closes the connection and drops subsequent packets for that connection.
*
*
* -
*
* REJECT - Network Firewall sends a TCP reject packet back to your client. The service closes the connection
* and drops subsequent packets for that connection. REJECT
is available only for TCP traffic.
*
*
*
*
* @param unknownStatusAction
* Configures how Network Firewall processes traffic when it determines that the certificate presented by the
* server in the SSL/TLS connection has an unknown status, or a status that cannot be determined for any
* other reason, including when the service is unable to connect to the OCSP and CRL endpoints for the
* certificate.
*
* -
*
* PASS - Allow the connection to continue, and pass subsequent packets to the stateful engine for
* inspection.
*
*
* -
*
* DROP - Network Firewall closes the connection and drops subsequent packets for that connection.
*
*
* -
*
* REJECT - Network Firewall sends a TCP reject packet back to your client. The service closes the
* connection and drops subsequent packets for that connection. REJECT
is available only for TCP
* traffic.
*
*
* @see RevocationCheckAction
*/
public void setUnknownStatusAction(String unknownStatusAction) {
this.unknownStatusAction = unknownStatusAction;
}
/**
*
* Configures how Network Firewall processes traffic when it determines that the certificate presented by the server
* in the SSL/TLS connection has an unknown status, or a status that cannot be determined for any other reason,
* including when the service is unable to connect to the OCSP and CRL endpoints for the certificate.
*
*
* -
*
* PASS - Allow the connection to continue, and pass subsequent packets to the stateful engine for
* inspection.
*
*
* -
*
* DROP - Network Firewall closes the connection and drops subsequent packets for that connection.
*
*
* -
*
* REJECT - Network Firewall sends a TCP reject packet back to your client. The service closes the connection
* and drops subsequent packets for that connection. REJECT
is available only for TCP traffic.
*
*
*
*
* @return Configures how Network Firewall processes traffic when it determines that the certificate presented by
* the server in the SSL/TLS connection has an unknown status, or a status that cannot be determined for any
* other reason, including when the service is unable to connect to the OCSP and CRL endpoints for the
* certificate.
*
* -
*
* PASS - Allow the connection to continue, and pass subsequent packets to the stateful engine for
* inspection.
*
*
* -
*
* DROP - Network Firewall closes the connection and drops subsequent packets for that connection.
*
*
* -
*
* REJECT - Network Firewall sends a TCP reject packet back to your client. The service closes the
* connection and drops subsequent packets for that connection. REJECT
is available only for
* TCP traffic.
*
*
* @see RevocationCheckAction
*/
public String getUnknownStatusAction() {
return this.unknownStatusAction;
}
/**
*
* Configures how Network Firewall processes traffic when it determines that the certificate presented by the server
* in the SSL/TLS connection has an unknown status, or a status that cannot be determined for any other reason,
* including when the service is unable to connect to the OCSP and CRL endpoints for the certificate.
*
*
* -
*
* PASS - Allow the connection to continue, and pass subsequent packets to the stateful engine for
* inspection.
*
*
* -
*
* DROP - Network Firewall closes the connection and drops subsequent packets for that connection.
*
*
* -
*
* REJECT - Network Firewall sends a TCP reject packet back to your client. The service closes the connection
* and drops subsequent packets for that connection. REJECT
is available only for TCP traffic.
*
*
*
*
* @param unknownStatusAction
* Configures how Network Firewall processes traffic when it determines that the certificate presented by the
* server in the SSL/TLS connection has an unknown status, or a status that cannot be determined for any
* other reason, including when the service is unable to connect to the OCSP and CRL endpoints for the
* certificate.
*
* -
*
* PASS - Allow the connection to continue, and pass subsequent packets to the stateful engine for
* inspection.
*
*
* -
*
* DROP - Network Firewall closes the connection and drops subsequent packets for that connection.
*
*
* -
*
* REJECT - Network Firewall sends a TCP reject packet back to your client. The service closes the
* connection and drops subsequent packets for that connection. REJECT
is available only for TCP
* traffic.
*
*
* @return Returns a reference to this object so that method calls can be chained together.
* @see RevocationCheckAction
*/
public CheckCertificateRevocationStatusActions withUnknownStatusAction(String unknownStatusAction) {
setUnknownStatusAction(unknownStatusAction);
return this;
}
/**
*
* Configures how Network Firewall processes traffic when it determines that the certificate presented by the server
* in the SSL/TLS connection has an unknown status, or a status that cannot be determined for any other reason,
* including when the service is unable to connect to the OCSP and CRL endpoints for the certificate.
*
*
* -
*
* PASS - Allow the connection to continue, and pass subsequent packets to the stateful engine for
* inspection.
*
*
* -
*
* DROP - Network Firewall closes the connection and drops subsequent packets for that connection.
*
*
* -
*
* REJECT - Network Firewall sends a TCP reject packet back to your client. The service closes the connection
* and drops subsequent packets for that connection. REJECT
is available only for TCP traffic.
*
*
*
*
* @param unknownStatusAction
* Configures how Network Firewall processes traffic when it determines that the certificate presented by the
* server in the SSL/TLS connection has an unknown status, or a status that cannot be determined for any
* other reason, including when the service is unable to connect to the OCSP and CRL endpoints for the
* certificate.
*
* -
*
* PASS - Allow the connection to continue, and pass subsequent packets to the stateful engine for
* inspection.
*
*
* -
*
* DROP - Network Firewall closes the connection and drops subsequent packets for that connection.
*
*
* -
*
* REJECT - Network Firewall sends a TCP reject packet back to your client. The service closes the
* connection and drops subsequent packets for that connection. REJECT
is available only for TCP
* traffic.
*
*
* @return Returns a reference to this object so that method calls can be chained together.
* @see RevocationCheckAction
*/
public CheckCertificateRevocationStatusActions withUnknownStatusAction(RevocationCheckAction unknownStatusAction) {
this.unknownStatusAction = unknownStatusAction.toString();
return this;
}
/**
* Returns a string representation of this object. This is useful for testing and debugging. Sensitive data will be
* redacted from this string using a placeholder value.
*
* @return A string representation of this object.
*
* @see java.lang.Object#toString()
*/
@Override
public String toString() {
StringBuilder sb = new StringBuilder();
sb.append("{");
if (getRevokedStatusAction() != null)
sb.append("RevokedStatusAction: ").append(getRevokedStatusAction()).append(",");
if (getUnknownStatusAction() != null)
sb.append("UnknownStatusAction: ").append(getUnknownStatusAction());
sb.append("}");
return sb.toString();
}
@Override
public boolean equals(Object obj) {
if (this == obj)
return true;
if (obj == null)
return false;
if (obj instanceof CheckCertificateRevocationStatusActions == false)
return false;
CheckCertificateRevocationStatusActions other = (CheckCertificateRevocationStatusActions) obj;
if (other.getRevokedStatusAction() == null ^ this.getRevokedStatusAction() == null)
return false;
if (other.getRevokedStatusAction() != null && other.getRevokedStatusAction().equals(this.getRevokedStatusAction()) == false)
return false;
if (other.getUnknownStatusAction() == null ^ this.getUnknownStatusAction() == null)
return false;
if (other.getUnknownStatusAction() != null && other.getUnknownStatusAction().equals(this.getUnknownStatusAction()) == false)
return false;
return true;
}
@Override
public int hashCode() {
final int prime = 31;
int hashCode = 1;
hashCode = prime * hashCode + ((getRevokedStatusAction() == null) ? 0 : getRevokedStatusAction().hashCode());
hashCode = prime * hashCode + ((getUnknownStatusAction() == null) ? 0 : getUnknownStatusAction().hashCode());
return hashCode;
}
@Override
public CheckCertificateRevocationStatusActions clone() {
try {
return (CheckCertificateRevocationStatusActions) super.clone();
} catch (CloneNotSupportedException e) {
throw new IllegalStateException("Got a CloneNotSupportedException from Object.clone() " + "even though we're Cloneable!", e);
}
}
@com.amazonaws.annotation.SdkInternalApi
@Override
public void marshall(ProtocolMarshaller protocolMarshaller) {
com.amazonaws.services.networkfirewall.model.transform.CheckCertificateRevocationStatusActionsMarshaller.getInstance().marshall(this,
protocolMarshaller);
}
}