1. Packages
  2. Avi Provider
  3. API Docs
  4. Sslprofile
avi 31.1.1 published on Monday, Apr 14, 2025 by vmware

avi.Sslprofile

Explore with Pulumi AI

<!–

Copyright 2021 VMware, Inc.
SPDX-License-Identifier: Mozilla Public License 2.0

–>

layout: “avi”

page_title: “Avi: avi.Sslprofile” sidebar_current: “docs-avi-resource-sslprofile” description: |- Creates and manages Avi SSLProfile.

avi.Sslprofile

The SSLProfile resource allows the creation and management of Avi SSLProfile

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as avi from "@pulumi/avi";

const foo = new avi.Sslprofile("foo", {tenantRef: "/api/tenant/?name=admin"});
Copy
import pulumi
import pulumi_avi as avi

foo = avi.Sslprofile("foo", tenant_ref="/api/tenant/?name=admin")
Copy
package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/avi/v31/avi"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := avi.NewSslprofile(ctx, "foo", &avi.SslprofileArgs{
			TenantRef: pulumi.String("/api/tenant/?name=admin"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Avi = Pulumi.Avi;

return await Deployment.RunAsync(() => 
{
    var foo = new Avi.Sslprofile("foo", new()
    {
        TenantRef = "/api/tenant/?name=admin",
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.avi.Sslprofile;
import com.pulumi.avi.SslprofileArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var foo = new Sslprofile("foo", SslprofileArgs.builder()
            .tenantRef("/api/tenant/?name=admin")
            .build());

    }
}
Copy
resources:
  foo:
    type: avi:Sslprofile
    properties:
      tenantRef: /api/tenant/?name=admin
Copy

Create Sslprofile Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new Sslprofile(name: string, args: SslprofileArgs, opts?: CustomResourceOptions);
@overload
def Sslprofile(resource_name: str,
               args: SslprofileArgs,
               opts: Optional[ResourceOptions] = None)

@overload
def Sslprofile(resource_name: str,
               opts: Optional[ResourceOptions] = None,
               accepted_versions: Optional[Sequence[SslprofileAcceptedVersionArgs]] = None,
               is_federated: Optional[str] = None,
               name: Optional[str] = None,
               ciphersuites: Optional[str] = None,
               configpb_attributes: Optional[Sequence[SslprofileConfigpbAttributeArgs]] = None,
               description: Optional[str] = None,
               dhparam: Optional[str] = None,
               ec_named_curve: Optional[str] = None,
               enable_early_data: Optional[str] = None,
               enable_ssl_session_reuse: Optional[str] = None,
               prefer_client_cipher_ordering: Optional[str] = None,
               cipher_enums: Optional[Sequence[str]] = None,
               markers: Optional[Sequence[SslprofileMarkerArgs]] = None,
               accepted_ciphers: Optional[str] = None,
               send_close_notify: Optional[str] = None,
               signature_algorithm: Optional[str] = None,
               ssl_ratings: Optional[Sequence[SslprofileSslRatingArgs]] = None,
               ssl_session_timeout: Optional[str] = None,
               sslprofile_id: Optional[str] = None,
               tags: Optional[Sequence[SslprofileTagArgs]] = None,
               tenant_ref: Optional[str] = None,
               type: Optional[str] = None,
               uuid: Optional[str] = None)
func NewSslprofile(ctx *Context, name string, args SslprofileArgs, opts ...ResourceOption) (*Sslprofile, error)
public Sslprofile(string name, SslprofileArgs args, CustomResourceOptions? opts = null)
public Sslprofile(String name, SslprofileArgs args)
public Sslprofile(String name, SslprofileArgs args, CustomResourceOptions options)
type: avi:Sslprofile
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. SslprofileArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. SslprofileArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. SslprofileArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. SslprofileArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. SslprofileArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var sslprofileResource = new Avi.Sslprofile("sslprofileResource", new()
{
    AcceptedVersions = new[]
    {
        new Avi.Inputs.SslprofileAcceptedVersionArgs
        {
            Type = "string",
        },
    },
    IsFederated = "string",
    Name = "string",
    Ciphersuites = "string",
    ConfigpbAttributes = new[]
    {
        new Avi.Inputs.SslprofileConfigpbAttributeArgs
        {
            Version = "string",
        },
    },
    Description = "string",
    Dhparam = "string",
    EcNamedCurve = "string",
    EnableEarlyData = "string",
    EnableSslSessionReuse = "string",
    PreferClientCipherOrdering = "string",
    CipherEnums = new[]
    {
        "string",
    },
    Markers = new[]
    {
        new Avi.Inputs.SslprofileMarkerArgs
        {
            Key = "string",
            Values = new[]
            {
                "string",
            },
        },
    },
    AcceptedCiphers = "string",
    SendCloseNotify = "string",
    SignatureAlgorithm = "string",
    SslRatings = new[]
    {
        new Avi.Inputs.SslprofileSslRatingArgs
        {
            CompatibilityRating = "string",
            PerformanceRating = "string",
            SecurityScore = "string",
        },
    },
    SslSessionTimeout = "string",
    SslprofileId = "string",
    Tags = new[]
    {
        new Avi.Inputs.SslprofileTagArgs
        {
            Value = "string",
            Type = "string",
        },
    },
    TenantRef = "string",
    Type = "string",
    Uuid = "string",
});
Copy
example, err := avi.NewSslprofile(ctx, "sslprofileResource", &avi.SslprofileArgs{
	AcceptedVersions: avi.SslprofileAcceptedVersionArray{
		&avi.SslprofileAcceptedVersionArgs{
			Type: pulumi.String("string"),
		},
	},
	IsFederated:  pulumi.String("string"),
	Name:         pulumi.String("string"),
	Ciphersuites: pulumi.String("string"),
	ConfigpbAttributes: avi.SslprofileConfigpbAttributeArray{
		&avi.SslprofileConfigpbAttributeArgs{
			Version: pulumi.String("string"),
		},
	},
	Description:                pulumi.String("string"),
	Dhparam:                    pulumi.String("string"),
	EcNamedCurve:               pulumi.String("string"),
	EnableEarlyData:            pulumi.String("string"),
	EnableSslSessionReuse:      pulumi.String("string"),
	PreferClientCipherOrdering: pulumi.String("string"),
	CipherEnums: pulumi.StringArray{
		pulumi.String("string"),
	},
	Markers: avi.SslprofileMarkerArray{
		&avi.SslprofileMarkerArgs{
			Key: pulumi.String("string"),
			Values: pulumi.StringArray{
				pulumi.String("string"),
			},
		},
	},
	AcceptedCiphers:    pulumi.String("string"),
	SendCloseNotify:    pulumi.String("string"),
	SignatureAlgorithm: pulumi.String("string"),
	SslRatings: avi.SslprofileSslRatingArray{
		&avi.SslprofileSslRatingArgs{
			CompatibilityRating: pulumi.String("string"),
			PerformanceRating:   pulumi.String("string"),
			SecurityScore:       pulumi.String("string"),
		},
	},
	SslSessionTimeout: pulumi.String("string"),
	SslprofileId:      pulumi.String("string"),
	Tags: avi.SslprofileTagArray{
		&avi.SslprofileTagArgs{
			Value: pulumi.String("string"),
			Type:  pulumi.String("string"),
		},
	},
	TenantRef: pulumi.String("string"),
	Type:      pulumi.String("string"),
	Uuid:      pulumi.String("string"),
})
Copy
var sslprofileResource = new Sslprofile("sslprofileResource", SslprofileArgs.builder()
    .acceptedVersions(SslprofileAcceptedVersionArgs.builder()
        .type("string")
        .build())
    .isFederated("string")
    .name("string")
    .ciphersuites("string")
    .configpbAttributes(SslprofileConfigpbAttributeArgs.builder()
        .version("string")
        .build())
    .description("string")
    .dhparam("string")
    .ecNamedCurve("string")
    .enableEarlyData("string")
    .enableSslSessionReuse("string")
    .preferClientCipherOrdering("string")
    .cipherEnums("string")
    .markers(SslprofileMarkerArgs.builder()
        .key("string")
        .values("string")
        .build())
    .acceptedCiphers("string")
    .sendCloseNotify("string")
    .signatureAlgorithm("string")
    .sslRatings(SslprofileSslRatingArgs.builder()
        .compatibilityRating("string")
        .performanceRating("string")
        .securityScore("string")
        .build())
    .sslSessionTimeout("string")
    .sslprofileId("string")
    .tags(SslprofileTagArgs.builder()
        .value("string")
        .type("string")
        .build())
    .tenantRef("string")
    .type("string")
    .uuid("string")
    .build());
Copy
sslprofile_resource = avi.Sslprofile("sslprofileResource",
    accepted_versions=[{
        "type": "string",
    }],
    is_federated="string",
    name="string",
    ciphersuites="string",
    configpb_attributes=[{
        "version": "string",
    }],
    description="string",
    dhparam="string",
    ec_named_curve="string",
    enable_early_data="string",
    enable_ssl_session_reuse="string",
    prefer_client_cipher_ordering="string",
    cipher_enums=["string"],
    markers=[{
        "key": "string",
        "values": ["string"],
    }],
    accepted_ciphers="string",
    send_close_notify="string",
    signature_algorithm="string",
    ssl_ratings=[{
        "compatibility_rating": "string",
        "performance_rating": "string",
        "security_score": "string",
    }],
    ssl_session_timeout="string",
    sslprofile_id="string",
    tags=[{
        "value": "string",
        "type": "string",
    }],
    tenant_ref="string",
    type="string",
    uuid="string")
Copy
const sslprofileResource = new avi.Sslprofile("sslprofileResource", {
    acceptedVersions: [{
        type: "string",
    }],
    isFederated: "string",
    name: "string",
    ciphersuites: "string",
    configpbAttributes: [{
        version: "string",
    }],
    description: "string",
    dhparam: "string",
    ecNamedCurve: "string",
    enableEarlyData: "string",
    enableSslSessionReuse: "string",
    preferClientCipherOrdering: "string",
    cipherEnums: ["string"],
    markers: [{
        key: "string",
        values: ["string"],
    }],
    acceptedCiphers: "string",
    sendCloseNotify: "string",
    signatureAlgorithm: "string",
    sslRatings: [{
        compatibilityRating: "string",
        performanceRating: "string",
        securityScore: "string",
    }],
    sslSessionTimeout: "string",
    sslprofileId: "string",
    tags: [{
        value: "string",
        type: "string",
    }],
    tenantRef: "string",
    type: "string",
    uuid: "string",
});
Copy
type: avi:Sslprofile
properties:
    acceptedCiphers: string
    acceptedVersions:
        - type: string
    cipherEnums:
        - string
    ciphersuites: string
    configpbAttributes:
        - version: string
    description: string
    dhparam: string
    ecNamedCurve: string
    enableEarlyData: string
    enableSslSessionReuse: string
    isFederated: string
    markers:
        - key: string
          values:
            - string
    name: string
    preferClientCipherOrdering: string
    sendCloseNotify: string
    signatureAlgorithm: string
    sslRatings:
        - compatibilityRating: string
          performanceRating: string
          securityScore: string
    sslSessionTimeout: string
    sslprofileId: string
    tags:
        - type: string
          value: string
    tenantRef: string
    type: string
    uuid: string
Copy

Sslprofile Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The Sslprofile resource accepts the following input properties:

AcceptedVersions This property is required. List<SslprofileAcceptedVersion>
Set of versions accepted by the server. Minimum of 1 items required. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
AcceptedCiphers string
Ciphers suites represented as defined by https //www.openssl.org/docs/man1.1.1/man1/ciphers.html. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
CipherEnums List<string>
Enum options - tls_ecdhe_ecdsa_with_aes_128_gcm_sha256, tls_ecdhe_ecdsa_with_aes_256_gcm_sha384, tls_ecdhe_rsa_with_aes_128_gcm_sha256, tls_ecdhe_rsa_with_aes_256_gcm_sha384, tls_ecdhe_ecdsa_with_aes_128_cbc_sha256, tls_ecdhe_ecdsa_with_aes_256_cbc_sha384, tls_ecdhe_rsa_with_aes_128_cbc_sha256, tls_ecdhe_rsa_with_aes_256_cbc_sha384, tls_rsa_with_aes_128_gcm_sha256, tls_rsa_with_aes_256_gcm_sha384, tls_rsa_with_aes_128_cbc_sha256, tls_rsa_with_aes_256_cbc_sha256, tls_ecdhe_ecdsa_with_aes_128_cbc_sha, tls_ecdhe_ecdsa_with_aes_256_cbc_sha, tls_ecdhe_rsa_with_aes_128_cbc_sha, tls_ecdhe_rsa_with_aes_256_cbc_sha, tls_rsa_with_aes_128_cbc_sha, tls_rsa_with_aes_256_cbc_sha, tls_rsa_with_3des_ede_cbc_sha, tls_aes_256_gcm_sha384... Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha), basic (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha) edition.
Ciphersuites string
Tls 1.3 ciphers suites represented as defined by u(https //www.openssl.org/docs/man1.1.1/man1/ciphers.html). Field introduced in 18.2.6. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition. Special default for essentials edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, basic edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, enterprise edition is tls_aes_256_gcm_sha384-tls_chacha20_poly1305_sha256-tls_aes_128_gcm_sha256.
ConfigpbAttributes List<SslprofileConfigpbAttribute>
Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
Description string
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
Dhparam string
Dh parameters used in ssl. At this time, it is not configurable and is set to 2048 bits. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
EcNamedCurve string
Elliptic curve cryptography namedcurves (tls supported groups)represented as defined by rfc 8422-section 5.1.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_curves.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
EnableEarlyData string
Enable early data processing for tls1.3 connections. Field introduced in 18.2.6. Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- false), basic (allowed values- false) edition.
EnableSslSessionReuse string
Enable ssl session re-use. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
IsFederated string
It specifies whether the object has to be replicated to the gslb followers. Field introduced in 22.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
Markers List<SslprofileMarker>
List of labels to be used for granular rbac. Field introduced in 20.1.5. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
Name string
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
PreferClientCipherOrdering string
Prefer the ssl cipher ordering presented by the client during the ssl handshake over the one specified in the ssl profile. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
SendCloseNotify string
Send 'close notify' alert message for a clean shutdown of the ssl connection. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
SignatureAlgorithm string
Signature algorithms represented as defined by rfc5246-section 7.4.1.4.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_client_sigalgs_list.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
SslRatings List<SslprofileSslRating>
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
SslSessionTimeout string
The amount of time in seconds before an ssl session expires. Unit is sec. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
SslprofileId string
Tags List<SslprofileTag>
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
TenantRef string
It is a reference to an object of type tenant. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
Type string
Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
Uuid string
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
AcceptedVersions This property is required. []SslprofileAcceptedVersionArgs
Set of versions accepted by the server. Minimum of 1 items required. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
AcceptedCiphers string
Ciphers suites represented as defined by https //www.openssl.org/docs/man1.1.1/man1/ciphers.html. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
CipherEnums []string
Enum options - tls_ecdhe_ecdsa_with_aes_128_gcm_sha256, tls_ecdhe_ecdsa_with_aes_256_gcm_sha384, tls_ecdhe_rsa_with_aes_128_gcm_sha256, tls_ecdhe_rsa_with_aes_256_gcm_sha384, tls_ecdhe_ecdsa_with_aes_128_cbc_sha256, tls_ecdhe_ecdsa_with_aes_256_cbc_sha384, tls_ecdhe_rsa_with_aes_128_cbc_sha256, tls_ecdhe_rsa_with_aes_256_cbc_sha384, tls_rsa_with_aes_128_gcm_sha256, tls_rsa_with_aes_256_gcm_sha384, tls_rsa_with_aes_128_cbc_sha256, tls_rsa_with_aes_256_cbc_sha256, tls_ecdhe_ecdsa_with_aes_128_cbc_sha, tls_ecdhe_ecdsa_with_aes_256_cbc_sha, tls_ecdhe_rsa_with_aes_128_cbc_sha, tls_ecdhe_rsa_with_aes_256_cbc_sha, tls_rsa_with_aes_128_cbc_sha, tls_rsa_with_aes_256_cbc_sha, tls_rsa_with_3des_ede_cbc_sha, tls_aes_256_gcm_sha384... Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha), basic (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha) edition.
Ciphersuites string
Tls 1.3 ciphers suites represented as defined by u(https //www.openssl.org/docs/man1.1.1/man1/ciphers.html). Field introduced in 18.2.6. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition. Special default for essentials edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, basic edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, enterprise edition is tls_aes_256_gcm_sha384-tls_chacha20_poly1305_sha256-tls_aes_128_gcm_sha256.
ConfigpbAttributes []SslprofileConfigpbAttributeArgs
Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
Description string
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
Dhparam string
Dh parameters used in ssl. At this time, it is not configurable and is set to 2048 bits. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
EcNamedCurve string
Elliptic curve cryptography namedcurves (tls supported groups)represented as defined by rfc 8422-section 5.1.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_curves.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
EnableEarlyData string
Enable early data processing for tls1.3 connections. Field introduced in 18.2.6. Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- false), basic (allowed values- false) edition.
EnableSslSessionReuse string
Enable ssl session re-use. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
IsFederated string
It specifies whether the object has to be replicated to the gslb followers. Field introduced in 22.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
Markers []SslprofileMarkerArgs
List of labels to be used for granular rbac. Field introduced in 20.1.5. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
Name string
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
PreferClientCipherOrdering string
Prefer the ssl cipher ordering presented by the client during the ssl handshake over the one specified in the ssl profile. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
SendCloseNotify string
Send 'close notify' alert message for a clean shutdown of the ssl connection. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
SignatureAlgorithm string
Signature algorithms represented as defined by rfc5246-section 7.4.1.4.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_client_sigalgs_list.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
SslRatings []SslprofileSslRatingArgs
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
SslSessionTimeout string
The amount of time in seconds before an ssl session expires. Unit is sec. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
SslprofileId string
Tags []SslprofileTagArgs
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
TenantRef string
It is a reference to an object of type tenant. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
Type string
Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
Uuid string
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
acceptedVersions This property is required. List<SslprofileAcceptedVersion>
Set of versions accepted by the server. Minimum of 1 items required. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
acceptedCiphers String
Ciphers suites represented as defined by https //www.openssl.org/docs/man1.1.1/man1/ciphers.html. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
cipherEnums List<String>
Enum options - tls_ecdhe_ecdsa_with_aes_128_gcm_sha256, tls_ecdhe_ecdsa_with_aes_256_gcm_sha384, tls_ecdhe_rsa_with_aes_128_gcm_sha256, tls_ecdhe_rsa_with_aes_256_gcm_sha384, tls_ecdhe_ecdsa_with_aes_128_cbc_sha256, tls_ecdhe_ecdsa_with_aes_256_cbc_sha384, tls_ecdhe_rsa_with_aes_128_cbc_sha256, tls_ecdhe_rsa_with_aes_256_cbc_sha384, tls_rsa_with_aes_128_gcm_sha256, tls_rsa_with_aes_256_gcm_sha384, tls_rsa_with_aes_128_cbc_sha256, tls_rsa_with_aes_256_cbc_sha256, tls_ecdhe_ecdsa_with_aes_128_cbc_sha, tls_ecdhe_ecdsa_with_aes_256_cbc_sha, tls_ecdhe_rsa_with_aes_128_cbc_sha, tls_ecdhe_rsa_with_aes_256_cbc_sha, tls_rsa_with_aes_128_cbc_sha, tls_rsa_with_aes_256_cbc_sha, tls_rsa_with_3des_ede_cbc_sha, tls_aes_256_gcm_sha384... Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha), basic (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha) edition.
ciphersuites String
Tls 1.3 ciphers suites represented as defined by u(https //www.openssl.org/docs/man1.1.1/man1/ciphers.html). Field introduced in 18.2.6. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition. Special default for essentials edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, basic edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, enterprise edition is tls_aes_256_gcm_sha384-tls_chacha20_poly1305_sha256-tls_aes_128_gcm_sha256.
configpbAttributes List<SslprofileConfigpbAttribute>
Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
description String
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
dhparam String
Dh parameters used in ssl. At this time, it is not configurable and is set to 2048 bits. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
ecNamedCurve String
Elliptic curve cryptography namedcurves (tls supported groups)represented as defined by rfc 8422-section 5.1.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_curves.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
enableEarlyData String
Enable early data processing for tls1.3 connections. Field introduced in 18.2.6. Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- false), basic (allowed values- false) edition.
enableSslSessionReuse String
Enable ssl session re-use. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
isFederated String
It specifies whether the object has to be replicated to the gslb followers. Field introduced in 22.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
markers List<SslprofileMarker>
List of labels to be used for granular rbac. Field introduced in 20.1.5. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
name String
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
preferClientCipherOrdering String
Prefer the ssl cipher ordering presented by the client during the ssl handshake over the one specified in the ssl profile. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
sendCloseNotify String
Send 'close notify' alert message for a clean shutdown of the ssl connection. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
signatureAlgorithm String
Signature algorithms represented as defined by rfc5246-section 7.4.1.4.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_client_sigalgs_list.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
sslRatings List<SslprofileSslRating>
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
sslSessionTimeout String
The amount of time in seconds before an ssl session expires. Unit is sec. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
sslprofileId String
tags List<SslprofileTag>
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
tenantRef String
It is a reference to an object of type tenant. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
type String
Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
uuid String
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
acceptedVersions This property is required. SslprofileAcceptedVersion[]
Set of versions accepted by the server. Minimum of 1 items required. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
acceptedCiphers string
Ciphers suites represented as defined by https //www.openssl.org/docs/man1.1.1/man1/ciphers.html. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
cipherEnums string[]
Enum options - tls_ecdhe_ecdsa_with_aes_128_gcm_sha256, tls_ecdhe_ecdsa_with_aes_256_gcm_sha384, tls_ecdhe_rsa_with_aes_128_gcm_sha256, tls_ecdhe_rsa_with_aes_256_gcm_sha384, tls_ecdhe_ecdsa_with_aes_128_cbc_sha256, tls_ecdhe_ecdsa_with_aes_256_cbc_sha384, tls_ecdhe_rsa_with_aes_128_cbc_sha256, tls_ecdhe_rsa_with_aes_256_cbc_sha384, tls_rsa_with_aes_128_gcm_sha256, tls_rsa_with_aes_256_gcm_sha384, tls_rsa_with_aes_128_cbc_sha256, tls_rsa_with_aes_256_cbc_sha256, tls_ecdhe_ecdsa_with_aes_128_cbc_sha, tls_ecdhe_ecdsa_with_aes_256_cbc_sha, tls_ecdhe_rsa_with_aes_128_cbc_sha, tls_ecdhe_rsa_with_aes_256_cbc_sha, tls_rsa_with_aes_128_cbc_sha, tls_rsa_with_aes_256_cbc_sha, tls_rsa_with_3des_ede_cbc_sha, tls_aes_256_gcm_sha384... Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha), basic (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha) edition.
ciphersuites string
Tls 1.3 ciphers suites represented as defined by u(https //www.openssl.org/docs/man1.1.1/man1/ciphers.html). Field introduced in 18.2.6. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition. Special default for essentials edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, basic edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, enterprise edition is tls_aes_256_gcm_sha384-tls_chacha20_poly1305_sha256-tls_aes_128_gcm_sha256.
configpbAttributes SslprofileConfigpbAttribute[]
Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
description string
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
dhparam string
Dh parameters used in ssl. At this time, it is not configurable and is set to 2048 bits. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
ecNamedCurve string
Elliptic curve cryptography namedcurves (tls supported groups)represented as defined by rfc 8422-section 5.1.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_curves.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
enableEarlyData string
Enable early data processing for tls1.3 connections. Field introduced in 18.2.6. Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- false), basic (allowed values- false) edition.
enableSslSessionReuse string
Enable ssl session re-use. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
isFederated string
It specifies whether the object has to be replicated to the gslb followers. Field introduced in 22.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
markers SslprofileMarker[]
List of labels to be used for granular rbac. Field introduced in 20.1.5. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
name string
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
preferClientCipherOrdering string
Prefer the ssl cipher ordering presented by the client during the ssl handshake over the one specified in the ssl profile. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
sendCloseNotify string
Send 'close notify' alert message for a clean shutdown of the ssl connection. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
signatureAlgorithm string
Signature algorithms represented as defined by rfc5246-section 7.4.1.4.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_client_sigalgs_list.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
sslRatings SslprofileSslRating[]
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
sslSessionTimeout string
The amount of time in seconds before an ssl session expires. Unit is sec. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
sslprofileId string
tags SslprofileTag[]
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
tenantRef string
It is a reference to an object of type tenant. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
type string
Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
uuid string
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
accepted_versions This property is required. Sequence[SslprofileAcceptedVersionArgs]
Set of versions accepted by the server. Minimum of 1 items required. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
accepted_ciphers str
Ciphers suites represented as defined by https //www.openssl.org/docs/man1.1.1/man1/ciphers.html. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
cipher_enums Sequence[str]
Enum options - tls_ecdhe_ecdsa_with_aes_128_gcm_sha256, tls_ecdhe_ecdsa_with_aes_256_gcm_sha384, tls_ecdhe_rsa_with_aes_128_gcm_sha256, tls_ecdhe_rsa_with_aes_256_gcm_sha384, tls_ecdhe_ecdsa_with_aes_128_cbc_sha256, tls_ecdhe_ecdsa_with_aes_256_cbc_sha384, tls_ecdhe_rsa_with_aes_128_cbc_sha256, tls_ecdhe_rsa_with_aes_256_cbc_sha384, tls_rsa_with_aes_128_gcm_sha256, tls_rsa_with_aes_256_gcm_sha384, tls_rsa_with_aes_128_cbc_sha256, tls_rsa_with_aes_256_cbc_sha256, tls_ecdhe_ecdsa_with_aes_128_cbc_sha, tls_ecdhe_ecdsa_with_aes_256_cbc_sha, tls_ecdhe_rsa_with_aes_128_cbc_sha, tls_ecdhe_rsa_with_aes_256_cbc_sha, tls_rsa_with_aes_128_cbc_sha, tls_rsa_with_aes_256_cbc_sha, tls_rsa_with_3des_ede_cbc_sha, tls_aes_256_gcm_sha384... Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha), basic (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha) edition.
ciphersuites str
Tls 1.3 ciphers suites represented as defined by u(https //www.openssl.org/docs/man1.1.1/man1/ciphers.html). Field introduced in 18.2.6. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition. Special default for essentials edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, basic edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, enterprise edition is tls_aes_256_gcm_sha384-tls_chacha20_poly1305_sha256-tls_aes_128_gcm_sha256.
configpb_attributes Sequence[SslprofileConfigpbAttributeArgs]
Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
description str
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
dhparam str
Dh parameters used in ssl. At this time, it is not configurable and is set to 2048 bits. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
ec_named_curve str
Elliptic curve cryptography namedcurves (tls supported groups)represented as defined by rfc 8422-section 5.1.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_curves.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
enable_early_data str
Enable early data processing for tls1.3 connections. Field introduced in 18.2.6. Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- false), basic (allowed values- false) edition.
enable_ssl_session_reuse str
Enable ssl session re-use. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
is_federated str
It specifies whether the object has to be replicated to the gslb followers. Field introduced in 22.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
markers Sequence[SslprofileMarkerArgs]
List of labels to be used for granular rbac. Field introduced in 20.1.5. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
name str
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
prefer_client_cipher_ordering str
Prefer the ssl cipher ordering presented by the client during the ssl handshake over the one specified in the ssl profile. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
send_close_notify str
Send 'close notify' alert message for a clean shutdown of the ssl connection. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
signature_algorithm str
Signature algorithms represented as defined by rfc5246-section 7.4.1.4.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_client_sigalgs_list.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
ssl_ratings Sequence[SslprofileSslRatingArgs]
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
ssl_session_timeout str
The amount of time in seconds before an ssl session expires. Unit is sec. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
sslprofile_id str
tags Sequence[SslprofileTagArgs]
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
tenant_ref str
It is a reference to an object of type tenant. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
type str
Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
uuid str
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
acceptedVersions This property is required. List<Property Map>
Set of versions accepted by the server. Minimum of 1 items required. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
acceptedCiphers String
Ciphers suites represented as defined by https //www.openssl.org/docs/man1.1.1/man1/ciphers.html. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
cipherEnums List<String>
Enum options - tls_ecdhe_ecdsa_with_aes_128_gcm_sha256, tls_ecdhe_ecdsa_with_aes_256_gcm_sha384, tls_ecdhe_rsa_with_aes_128_gcm_sha256, tls_ecdhe_rsa_with_aes_256_gcm_sha384, tls_ecdhe_ecdsa_with_aes_128_cbc_sha256, tls_ecdhe_ecdsa_with_aes_256_cbc_sha384, tls_ecdhe_rsa_with_aes_128_cbc_sha256, tls_ecdhe_rsa_with_aes_256_cbc_sha384, tls_rsa_with_aes_128_gcm_sha256, tls_rsa_with_aes_256_gcm_sha384, tls_rsa_with_aes_128_cbc_sha256, tls_rsa_with_aes_256_cbc_sha256, tls_ecdhe_ecdsa_with_aes_128_cbc_sha, tls_ecdhe_ecdsa_with_aes_256_cbc_sha, tls_ecdhe_rsa_with_aes_128_cbc_sha, tls_ecdhe_rsa_with_aes_256_cbc_sha, tls_rsa_with_aes_128_cbc_sha, tls_rsa_with_aes_256_cbc_sha, tls_rsa_with_3des_ede_cbc_sha, tls_aes_256_gcm_sha384... Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha), basic (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha) edition.
ciphersuites String
Tls 1.3 ciphers suites represented as defined by u(https //www.openssl.org/docs/man1.1.1/man1/ciphers.html). Field introduced in 18.2.6. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition. Special default for essentials edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, basic edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, enterprise edition is tls_aes_256_gcm_sha384-tls_chacha20_poly1305_sha256-tls_aes_128_gcm_sha256.
configpbAttributes List<Property Map>
Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
description String
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
dhparam String
Dh parameters used in ssl. At this time, it is not configurable and is set to 2048 bits. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
ecNamedCurve String
Elliptic curve cryptography namedcurves (tls supported groups)represented as defined by rfc 8422-section 5.1.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_curves.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
enableEarlyData String
Enable early data processing for tls1.3 connections. Field introduced in 18.2.6. Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- false), basic (allowed values- false) edition.
enableSslSessionReuse String
Enable ssl session re-use. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
isFederated String
It specifies whether the object has to be replicated to the gslb followers. Field introduced in 22.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
markers List<Property Map>
List of labels to be used for granular rbac. Field introduced in 20.1.5. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
name String
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
preferClientCipherOrdering String
Prefer the ssl cipher ordering presented by the client during the ssl handshake over the one specified in the ssl profile. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
sendCloseNotify String
Send 'close notify' alert message for a clean shutdown of the ssl connection. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
signatureAlgorithm String
Signature algorithms represented as defined by rfc5246-section 7.4.1.4.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_client_sigalgs_list.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
sslRatings List<Property Map>
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
sslSessionTimeout String
The amount of time in seconds before an ssl session expires. Unit is sec. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
sslprofileId String
tags List<Property Map>
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
tenantRef String
It is a reference to an object of type tenant. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
type String
Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
uuid String
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.

Outputs

All input properties are implicitly available as output properties. Additionally, the Sslprofile resource produces the following output properties:

Id string
The provider-assigned unique ID for this managed resource.
Id string
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.
id string
The provider-assigned unique ID for this managed resource.
id str
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.

Look up Existing Sslprofile Resource

Get an existing Sslprofile resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: SslprofileState, opts?: CustomResourceOptions): Sslprofile
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        accepted_ciphers: Optional[str] = None,
        accepted_versions: Optional[Sequence[SslprofileAcceptedVersionArgs]] = None,
        cipher_enums: Optional[Sequence[str]] = None,
        ciphersuites: Optional[str] = None,
        configpb_attributes: Optional[Sequence[SslprofileConfigpbAttributeArgs]] = None,
        description: Optional[str] = None,
        dhparam: Optional[str] = None,
        ec_named_curve: Optional[str] = None,
        enable_early_data: Optional[str] = None,
        enable_ssl_session_reuse: Optional[str] = None,
        is_federated: Optional[str] = None,
        markers: Optional[Sequence[SslprofileMarkerArgs]] = None,
        name: Optional[str] = None,
        prefer_client_cipher_ordering: Optional[str] = None,
        send_close_notify: Optional[str] = None,
        signature_algorithm: Optional[str] = None,
        ssl_ratings: Optional[Sequence[SslprofileSslRatingArgs]] = None,
        ssl_session_timeout: Optional[str] = None,
        sslprofile_id: Optional[str] = None,
        tags: Optional[Sequence[SslprofileTagArgs]] = None,
        tenant_ref: Optional[str] = None,
        type: Optional[str] = None,
        uuid: Optional[str] = None) -> Sslprofile
func GetSslprofile(ctx *Context, name string, id IDInput, state *SslprofileState, opts ...ResourceOption) (*Sslprofile, error)
public static Sslprofile Get(string name, Input<string> id, SslprofileState? state, CustomResourceOptions? opts = null)
public static Sslprofile get(String name, Output<String> id, SslprofileState state, CustomResourceOptions options)
resources:  _:    type: avi:Sslprofile    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
AcceptedCiphers string
Ciphers suites represented as defined by https //www.openssl.org/docs/man1.1.1/man1/ciphers.html. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
AcceptedVersions List<SslprofileAcceptedVersion>
Set of versions accepted by the server. Minimum of 1 items required. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
CipherEnums List<string>
Enum options - tls_ecdhe_ecdsa_with_aes_128_gcm_sha256, tls_ecdhe_ecdsa_with_aes_256_gcm_sha384, tls_ecdhe_rsa_with_aes_128_gcm_sha256, tls_ecdhe_rsa_with_aes_256_gcm_sha384, tls_ecdhe_ecdsa_with_aes_128_cbc_sha256, tls_ecdhe_ecdsa_with_aes_256_cbc_sha384, tls_ecdhe_rsa_with_aes_128_cbc_sha256, tls_ecdhe_rsa_with_aes_256_cbc_sha384, tls_rsa_with_aes_128_gcm_sha256, tls_rsa_with_aes_256_gcm_sha384, tls_rsa_with_aes_128_cbc_sha256, tls_rsa_with_aes_256_cbc_sha256, tls_ecdhe_ecdsa_with_aes_128_cbc_sha, tls_ecdhe_ecdsa_with_aes_256_cbc_sha, tls_ecdhe_rsa_with_aes_128_cbc_sha, tls_ecdhe_rsa_with_aes_256_cbc_sha, tls_rsa_with_aes_128_cbc_sha, tls_rsa_with_aes_256_cbc_sha, tls_rsa_with_3des_ede_cbc_sha, tls_aes_256_gcm_sha384... Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha), basic (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha) edition.
Ciphersuites string
Tls 1.3 ciphers suites represented as defined by u(https //www.openssl.org/docs/man1.1.1/man1/ciphers.html). Field introduced in 18.2.6. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition. Special default for essentials edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, basic edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, enterprise edition is tls_aes_256_gcm_sha384-tls_chacha20_poly1305_sha256-tls_aes_128_gcm_sha256.
ConfigpbAttributes List<SslprofileConfigpbAttribute>
Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
Description string
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
Dhparam string
Dh parameters used in ssl. At this time, it is not configurable and is set to 2048 bits. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
EcNamedCurve string
Elliptic curve cryptography namedcurves (tls supported groups)represented as defined by rfc 8422-section 5.1.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_curves.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
EnableEarlyData string
Enable early data processing for tls1.3 connections. Field introduced in 18.2.6. Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- false), basic (allowed values- false) edition.
EnableSslSessionReuse string
Enable ssl session re-use. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
IsFederated string
It specifies whether the object has to be replicated to the gslb followers. Field introduced in 22.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
Markers List<SslprofileMarker>
List of labels to be used for granular rbac. Field introduced in 20.1.5. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
Name string
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
PreferClientCipherOrdering string
Prefer the ssl cipher ordering presented by the client during the ssl handshake over the one specified in the ssl profile. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
SendCloseNotify string
Send 'close notify' alert message for a clean shutdown of the ssl connection. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
SignatureAlgorithm string
Signature algorithms represented as defined by rfc5246-section 7.4.1.4.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_client_sigalgs_list.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
SslRatings List<SslprofileSslRating>
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
SslSessionTimeout string
The amount of time in seconds before an ssl session expires. Unit is sec. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
SslprofileId string
Tags List<SslprofileTag>
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
TenantRef string
It is a reference to an object of type tenant. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
Type string
Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
Uuid string
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
AcceptedCiphers string
Ciphers suites represented as defined by https //www.openssl.org/docs/man1.1.1/man1/ciphers.html. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
AcceptedVersions []SslprofileAcceptedVersionArgs
Set of versions accepted by the server. Minimum of 1 items required. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
CipherEnums []string
Enum options - tls_ecdhe_ecdsa_with_aes_128_gcm_sha256, tls_ecdhe_ecdsa_with_aes_256_gcm_sha384, tls_ecdhe_rsa_with_aes_128_gcm_sha256, tls_ecdhe_rsa_with_aes_256_gcm_sha384, tls_ecdhe_ecdsa_with_aes_128_cbc_sha256, tls_ecdhe_ecdsa_with_aes_256_cbc_sha384, tls_ecdhe_rsa_with_aes_128_cbc_sha256, tls_ecdhe_rsa_with_aes_256_cbc_sha384, tls_rsa_with_aes_128_gcm_sha256, tls_rsa_with_aes_256_gcm_sha384, tls_rsa_with_aes_128_cbc_sha256, tls_rsa_with_aes_256_cbc_sha256, tls_ecdhe_ecdsa_with_aes_128_cbc_sha, tls_ecdhe_ecdsa_with_aes_256_cbc_sha, tls_ecdhe_rsa_with_aes_128_cbc_sha, tls_ecdhe_rsa_with_aes_256_cbc_sha, tls_rsa_with_aes_128_cbc_sha, tls_rsa_with_aes_256_cbc_sha, tls_rsa_with_3des_ede_cbc_sha, tls_aes_256_gcm_sha384... Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha), basic (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha) edition.
Ciphersuites string
Tls 1.3 ciphers suites represented as defined by u(https //www.openssl.org/docs/man1.1.1/man1/ciphers.html). Field introduced in 18.2.6. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition. Special default for essentials edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, basic edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, enterprise edition is tls_aes_256_gcm_sha384-tls_chacha20_poly1305_sha256-tls_aes_128_gcm_sha256.
ConfigpbAttributes []SslprofileConfigpbAttributeArgs
Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
Description string
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
Dhparam string
Dh parameters used in ssl. At this time, it is not configurable and is set to 2048 bits. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
EcNamedCurve string
Elliptic curve cryptography namedcurves (tls supported groups)represented as defined by rfc 8422-section 5.1.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_curves.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
EnableEarlyData string
Enable early data processing for tls1.3 connections. Field introduced in 18.2.6. Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- false), basic (allowed values- false) edition.
EnableSslSessionReuse string
Enable ssl session re-use. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
IsFederated string
It specifies whether the object has to be replicated to the gslb followers. Field introduced in 22.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
Markers []SslprofileMarkerArgs
List of labels to be used for granular rbac. Field introduced in 20.1.5. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
Name string
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
PreferClientCipherOrdering string
Prefer the ssl cipher ordering presented by the client during the ssl handshake over the one specified in the ssl profile. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
SendCloseNotify string
Send 'close notify' alert message for a clean shutdown of the ssl connection. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
SignatureAlgorithm string
Signature algorithms represented as defined by rfc5246-section 7.4.1.4.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_client_sigalgs_list.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
SslRatings []SslprofileSslRatingArgs
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
SslSessionTimeout string
The amount of time in seconds before an ssl session expires. Unit is sec. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
SslprofileId string
Tags []SslprofileTagArgs
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
TenantRef string
It is a reference to an object of type tenant. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
Type string
Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
Uuid string
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
acceptedCiphers String
Ciphers suites represented as defined by https //www.openssl.org/docs/man1.1.1/man1/ciphers.html. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
acceptedVersions List<SslprofileAcceptedVersion>
Set of versions accepted by the server. Minimum of 1 items required. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
cipherEnums List<String>
Enum options - tls_ecdhe_ecdsa_with_aes_128_gcm_sha256, tls_ecdhe_ecdsa_with_aes_256_gcm_sha384, tls_ecdhe_rsa_with_aes_128_gcm_sha256, tls_ecdhe_rsa_with_aes_256_gcm_sha384, tls_ecdhe_ecdsa_with_aes_128_cbc_sha256, tls_ecdhe_ecdsa_with_aes_256_cbc_sha384, tls_ecdhe_rsa_with_aes_128_cbc_sha256, tls_ecdhe_rsa_with_aes_256_cbc_sha384, tls_rsa_with_aes_128_gcm_sha256, tls_rsa_with_aes_256_gcm_sha384, tls_rsa_with_aes_128_cbc_sha256, tls_rsa_with_aes_256_cbc_sha256, tls_ecdhe_ecdsa_with_aes_128_cbc_sha, tls_ecdhe_ecdsa_with_aes_256_cbc_sha, tls_ecdhe_rsa_with_aes_128_cbc_sha, tls_ecdhe_rsa_with_aes_256_cbc_sha, tls_rsa_with_aes_128_cbc_sha, tls_rsa_with_aes_256_cbc_sha, tls_rsa_with_3des_ede_cbc_sha, tls_aes_256_gcm_sha384... Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha), basic (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha) edition.
ciphersuites String
Tls 1.3 ciphers suites represented as defined by u(https //www.openssl.org/docs/man1.1.1/man1/ciphers.html). Field introduced in 18.2.6. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition. Special default for essentials edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, basic edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, enterprise edition is tls_aes_256_gcm_sha384-tls_chacha20_poly1305_sha256-tls_aes_128_gcm_sha256.
configpbAttributes List<SslprofileConfigpbAttribute>
Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
description String
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
dhparam String
Dh parameters used in ssl. At this time, it is not configurable and is set to 2048 bits. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
ecNamedCurve String
Elliptic curve cryptography namedcurves (tls supported groups)represented as defined by rfc 8422-section 5.1.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_curves.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
enableEarlyData String
Enable early data processing for tls1.3 connections. Field introduced in 18.2.6. Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- false), basic (allowed values- false) edition.
enableSslSessionReuse String
Enable ssl session re-use. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
isFederated String
It specifies whether the object has to be replicated to the gslb followers. Field introduced in 22.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
markers List<SslprofileMarker>
List of labels to be used for granular rbac. Field introduced in 20.1.5. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
name String
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
preferClientCipherOrdering String
Prefer the ssl cipher ordering presented by the client during the ssl handshake over the one specified in the ssl profile. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
sendCloseNotify String
Send 'close notify' alert message for a clean shutdown of the ssl connection. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
signatureAlgorithm String
Signature algorithms represented as defined by rfc5246-section 7.4.1.4.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_client_sigalgs_list.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
sslRatings List<SslprofileSslRating>
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
sslSessionTimeout String
The amount of time in seconds before an ssl session expires. Unit is sec. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
sslprofileId String
tags List<SslprofileTag>
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
tenantRef String
It is a reference to an object of type tenant. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
type String
Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
uuid String
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
acceptedCiphers string
Ciphers suites represented as defined by https //www.openssl.org/docs/man1.1.1/man1/ciphers.html. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
acceptedVersions SslprofileAcceptedVersion[]
Set of versions accepted by the server. Minimum of 1 items required. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
cipherEnums string[]
Enum options - tls_ecdhe_ecdsa_with_aes_128_gcm_sha256, tls_ecdhe_ecdsa_with_aes_256_gcm_sha384, tls_ecdhe_rsa_with_aes_128_gcm_sha256, tls_ecdhe_rsa_with_aes_256_gcm_sha384, tls_ecdhe_ecdsa_with_aes_128_cbc_sha256, tls_ecdhe_ecdsa_with_aes_256_cbc_sha384, tls_ecdhe_rsa_with_aes_128_cbc_sha256, tls_ecdhe_rsa_with_aes_256_cbc_sha384, tls_rsa_with_aes_128_gcm_sha256, tls_rsa_with_aes_256_gcm_sha384, tls_rsa_with_aes_128_cbc_sha256, tls_rsa_with_aes_256_cbc_sha256, tls_ecdhe_ecdsa_with_aes_128_cbc_sha, tls_ecdhe_ecdsa_with_aes_256_cbc_sha, tls_ecdhe_rsa_with_aes_128_cbc_sha, tls_ecdhe_rsa_with_aes_256_cbc_sha, tls_rsa_with_aes_128_cbc_sha, tls_rsa_with_aes_256_cbc_sha, tls_rsa_with_3des_ede_cbc_sha, tls_aes_256_gcm_sha384... Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha), basic (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha) edition.
ciphersuites string
Tls 1.3 ciphers suites represented as defined by u(https //www.openssl.org/docs/man1.1.1/man1/ciphers.html). Field introduced in 18.2.6. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition. Special default for essentials edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, basic edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, enterprise edition is tls_aes_256_gcm_sha384-tls_chacha20_poly1305_sha256-tls_aes_128_gcm_sha256.
configpbAttributes SslprofileConfigpbAttribute[]
Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
description string
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
dhparam string
Dh parameters used in ssl. At this time, it is not configurable and is set to 2048 bits. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
ecNamedCurve string
Elliptic curve cryptography namedcurves (tls supported groups)represented as defined by rfc 8422-section 5.1.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_curves.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
enableEarlyData string
Enable early data processing for tls1.3 connections. Field introduced in 18.2.6. Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- false), basic (allowed values- false) edition.
enableSslSessionReuse string
Enable ssl session re-use. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
isFederated string
It specifies whether the object has to be replicated to the gslb followers. Field introduced in 22.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
markers SslprofileMarker[]
List of labels to be used for granular rbac. Field introduced in 20.1.5. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
name string
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
preferClientCipherOrdering string
Prefer the ssl cipher ordering presented by the client during the ssl handshake over the one specified in the ssl profile. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
sendCloseNotify string
Send 'close notify' alert message for a clean shutdown of the ssl connection. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
signatureAlgorithm string
Signature algorithms represented as defined by rfc5246-section 7.4.1.4.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_client_sigalgs_list.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
sslRatings SslprofileSslRating[]
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
sslSessionTimeout string
The amount of time in seconds before an ssl session expires. Unit is sec. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
sslprofileId string
tags SslprofileTag[]
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
tenantRef string
It is a reference to an object of type tenant. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
type string
Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
uuid string
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
accepted_ciphers str
Ciphers suites represented as defined by https //www.openssl.org/docs/man1.1.1/man1/ciphers.html. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
accepted_versions Sequence[SslprofileAcceptedVersionArgs]
Set of versions accepted by the server. Minimum of 1 items required. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
cipher_enums Sequence[str]
Enum options - tls_ecdhe_ecdsa_with_aes_128_gcm_sha256, tls_ecdhe_ecdsa_with_aes_256_gcm_sha384, tls_ecdhe_rsa_with_aes_128_gcm_sha256, tls_ecdhe_rsa_with_aes_256_gcm_sha384, tls_ecdhe_ecdsa_with_aes_128_cbc_sha256, tls_ecdhe_ecdsa_with_aes_256_cbc_sha384, tls_ecdhe_rsa_with_aes_128_cbc_sha256, tls_ecdhe_rsa_with_aes_256_cbc_sha384, tls_rsa_with_aes_128_gcm_sha256, tls_rsa_with_aes_256_gcm_sha384, tls_rsa_with_aes_128_cbc_sha256, tls_rsa_with_aes_256_cbc_sha256, tls_ecdhe_ecdsa_with_aes_128_cbc_sha, tls_ecdhe_ecdsa_with_aes_256_cbc_sha, tls_ecdhe_rsa_with_aes_128_cbc_sha, tls_ecdhe_rsa_with_aes_256_cbc_sha, tls_rsa_with_aes_128_cbc_sha, tls_rsa_with_aes_256_cbc_sha, tls_rsa_with_3des_ede_cbc_sha, tls_aes_256_gcm_sha384... Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha), basic (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha) edition.
ciphersuites str
Tls 1.3 ciphers suites represented as defined by u(https //www.openssl.org/docs/man1.1.1/man1/ciphers.html). Field introduced in 18.2.6. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition. Special default for essentials edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, basic edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, enterprise edition is tls_aes_256_gcm_sha384-tls_chacha20_poly1305_sha256-tls_aes_128_gcm_sha256.
configpb_attributes Sequence[SslprofileConfigpbAttributeArgs]
Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
description str
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
dhparam str
Dh parameters used in ssl. At this time, it is not configurable and is set to 2048 bits. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
ec_named_curve str
Elliptic curve cryptography namedcurves (tls supported groups)represented as defined by rfc 8422-section 5.1.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_curves.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
enable_early_data str
Enable early data processing for tls1.3 connections. Field introduced in 18.2.6. Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- false), basic (allowed values- false) edition.
enable_ssl_session_reuse str
Enable ssl session re-use. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
is_federated str
It specifies whether the object has to be replicated to the gslb followers. Field introduced in 22.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
markers Sequence[SslprofileMarkerArgs]
List of labels to be used for granular rbac. Field introduced in 20.1.5. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
name str
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
prefer_client_cipher_ordering str
Prefer the ssl cipher ordering presented by the client during the ssl handshake over the one specified in the ssl profile. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
send_close_notify str
Send 'close notify' alert message for a clean shutdown of the ssl connection. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
signature_algorithm str
Signature algorithms represented as defined by rfc5246-section 7.4.1.4.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_client_sigalgs_list.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
ssl_ratings Sequence[SslprofileSslRatingArgs]
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
ssl_session_timeout str
The amount of time in seconds before an ssl session expires. Unit is sec. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
sslprofile_id str
tags Sequence[SslprofileTagArgs]
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
tenant_ref str
It is a reference to an object of type tenant. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
type str
Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
uuid str
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
acceptedCiphers String
Ciphers suites represented as defined by https //www.openssl.org/docs/man1.1.1/man1/ciphers.html. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
acceptedVersions List<Property Map>
Set of versions accepted by the server. Minimum of 1 items required. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
cipherEnums List<String>
Enum options - tls_ecdhe_ecdsa_with_aes_128_gcm_sha256, tls_ecdhe_ecdsa_with_aes_256_gcm_sha384, tls_ecdhe_rsa_with_aes_128_gcm_sha256, tls_ecdhe_rsa_with_aes_256_gcm_sha384, tls_ecdhe_ecdsa_with_aes_128_cbc_sha256, tls_ecdhe_ecdsa_with_aes_256_cbc_sha384, tls_ecdhe_rsa_with_aes_128_cbc_sha256, tls_ecdhe_rsa_with_aes_256_cbc_sha384, tls_rsa_with_aes_128_gcm_sha256, tls_rsa_with_aes_256_gcm_sha384, tls_rsa_with_aes_128_cbc_sha256, tls_rsa_with_aes_256_cbc_sha256, tls_ecdhe_ecdsa_with_aes_128_cbc_sha, tls_ecdhe_ecdsa_with_aes_256_cbc_sha, tls_ecdhe_rsa_with_aes_128_cbc_sha, tls_ecdhe_rsa_with_aes_256_cbc_sha, tls_rsa_with_aes_128_cbc_sha, tls_rsa_with_aes_256_cbc_sha, tls_rsa_with_3des_ede_cbc_sha, tls_aes_256_gcm_sha384... Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha), basic (allowed values- tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_cbc_sha256,tls_ecdhe_ecdsa_with_aes_256_cbc_sha384,tls_ecdhe_rsa_with_aes_128_cbc_sha256,tls_ecdhe_rsa_with_aes_256_cbc_sha384,tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_cbc_sha256,tls_rsa_with_aes_256_cbc_sha256,tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_128_cbc_sha,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_3des_ede_cbc_sha) edition.
ciphersuites String
Tls 1.3 ciphers suites represented as defined by u(https //www.openssl.org/docs/man1.1.1/man1/ciphers.html). Field introduced in 18.2.6. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition. Special default for essentials edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, basic edition is tls_aes_256_gcm_sha384-tls_aes_128_gcm_sha256, enterprise edition is tls_aes_256_gcm_sha384-tls_chacha20_poly1305_sha256-tls_aes_128_gcm_sha256.
configpbAttributes List<Property Map>
Protobuf versioning for config pbs. Field introduced in 21.1.1. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
description String
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
dhparam String
Dh parameters used in ssl. At this time, it is not configurable and is set to 2048 bits. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
ecNamedCurve String
Elliptic curve cryptography namedcurves (tls supported groups)represented as defined by rfc 8422-section 5.1.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_curves.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
enableEarlyData String
Enable early data processing for tls1.3 connections. Field introduced in 18.2.6. Allowed with any value in enterprise, enterprise with cloud services edition. Allowed in essentials (allowed values- false), basic (allowed values- false) edition.
enableSslSessionReuse String
Enable ssl session re-use. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
isFederated String
It specifies whether the object has to be replicated to the gslb followers. Field introduced in 22.1.3. Allowed with any value in enterprise, enterprise with cloud services edition.
markers List<Property Map>
List of labels to be used for granular rbac. Field introduced in 20.1.5. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
name String
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
preferClientCipherOrdering String
Prefer the ssl cipher ordering presented by the client during the ssl handshake over the one specified in the ssl profile. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
sendCloseNotify String
Send 'close notify' alert message for a clean shutdown of the ssl connection. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
signatureAlgorithm String
Signature algorithms represented as defined by rfc5246-section 7.4.1.4.1 andhttps //www.openssl.org/docs/man1.1.0/man3/ssl_ctx_set1_client_sigalgs_list.html. Field introduced in 21.1.1. Allowed with any value in enterprise, enterprise with cloud services edition.
sslRatings List<Property Map>
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
sslSessionTimeout String
The amount of time in seconds before an ssl session expires. Unit is sec. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
sslprofileId String
tags List<Property Map>
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
tenantRef String
It is a reference to an object of type tenant. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
type String
Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
uuid String
Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.

Supporting Types

SslprofileAcceptedVersion
, SslprofileAcceptedVersionArgs

Type This property is required. string
Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
Type This property is required. string
Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
type This property is required. String
Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
type This property is required. string
Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
type This property is required. str
Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
type This property is required. String
Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.

SslprofileConfigpbAttribute
, SslprofileConfigpbAttributeArgs

Version string
Version string
version String
version string
version String

SslprofileMarker
, SslprofileMarkerArgs

Key This property is required. string
Values List<string>
Key This property is required. string
Values []string
key This property is required. String
values List<String>
key This property is required. string
values string[]
key This property is required. str
values Sequence[str]
key This property is required. String
values List<String>

SslprofileSslRating
, SslprofileSslRatingArgs

SslprofileTag
, SslprofileTagArgs

Value This property is required. string
Type string
Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
Value This property is required. string
Type string
Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
value This property is required. String
type String
Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
value This property is required. string
type string
Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
value This property is required. str
type str
Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.
value This property is required. String
type String
Ssl profile type. Enum options - SSL_PROFILE_TYPE_APPLICATION, SSL_PROFILE_TYPE_SYSTEM. Field introduced in 17.2.8. Allowed with any value in enterprise, essentials, basic, enterprise with cloud services edition.

Package Details

Repository
avi vmware/terraform-provider-avi
License
Notes
This Pulumi package is based on the avi Terraform Provider.