Class CfnVirtualNode.TlsValidationContextProperty
An object that represents how the proxy will validate its peer during Transport Layer Security (TLS) negotiation.
Inheritance
Implements
Namespace: Amazon.CDK.AWS.AppMesh
Assembly: Amazon.CDK.Lib.dll
Syntax (csharp)
public class TlsValidationContextProperty : Object, CfnVirtualNode.ITlsValidationContextProperty
Syntax (vb)
Public Class TlsValidationContextProperty
Inherits Object
Implements CfnVirtualNode.ITlsValidationContextProperty
Remarks
ExampleMetadata: fixture=_generated
Examples
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
using Amazon.CDK.AWS.AppMesh;
var tlsValidationContextProperty = new TlsValidationContextProperty {
Trust = new TlsValidationContextTrustProperty {
Acm = new TlsValidationContextAcmTrustProperty {
CertificateAuthorityArns = new [] { "certificateAuthorityArns" }
},
File = new TlsValidationContextFileTrustProperty {
CertificateChain = "certificateChain"
},
Sds = new TlsValidationContextSdsTrustProperty {
SecretName = "secretName"
}
},
// the properties below are optional
SubjectAlternativeNames = new SubjectAlternativeNamesProperty {
Match = new SubjectAlternativeNameMatchersProperty {
Exact = new [] { "exact" }
}
}
};
Synopsis
Constructors
TlsValidationContextProperty() |
Properties
SubjectAlternativeNames | A reference to an object that represents the SANs for a Transport Layer Security (TLS) validation context. |
Trust | A reference to where to retrieve the trust chain when validating a peer’s Transport Layer Security (TLS) certificate. |
Constructors
TlsValidationContextProperty()
public TlsValidationContextProperty()
Properties
SubjectAlternativeNames
A reference to an object that represents the SANs for a Transport Layer Security (TLS) validation context.
public object SubjectAlternativeNames { get; set; }
Property Value
System.Object
Remarks
If you don't specify SANs on the terminating mesh endpoint, the Envoy proxy for that node doesn't verify the SAN on a peer client certificate. If you don't specify SANs on the originating mesh endpoint, the SAN on the certificate provided by the terminating endpoint must match the mesh endpoint service discovery configuration. Since SPIRE vended certificates have a SPIFFE ID as a name, you must set the SAN since the name doesn't match the service discovery name.
Trust
A reference to where to retrieve the trust chain when validating a peer’s Transport Layer Security (TLS) certificate.
public object Trust { get; set; }
Property Value
System.Object