Skip to content

Commit e9d7822

Browse files
author
Hemant Imudianda
committed
Adding mutual auth api definitions.
1 parent 1dfce8a commit e9d7822

File tree

2 files changed

+157
-0
lines changed

2 files changed

+157
-0
lines changed

‎specification/network/resource-manager/Microsoft.Network/stable/2020-06-01/applicationGateway.json‎

Lines changed: 124 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1361,6 +1361,15 @@
13611361
},
13621362
"description": "Application Gateway Ssl policy."
13631363
},
1364+
"ApplicationGatewayClientAuthConfiguration": {
1365+
"properties": {
1366+
"verifyClientCertIssuerDN": {
1367+
"type": "boolean",
1368+
"description": "Verify client certificate issuer name on the application gateway."
1369+
}
1370+
},
1371+
"description": "Application Gateway Client Authentication Configuration."
1372+
},
13641373
"ApplicationGatewayIPConfigurationPropertiesFormat": {
13651374
"properties": {
13661375
"subnet": {
@@ -1494,6 +1503,49 @@
14941503
],
14951504
"description": "Trusted Root certificates of an application gateway."
14961505
},
1506+
"ApplicationGatewayTrustedClientCertificatePropertiesFormat": {
1507+
"properties": {
1508+
"data": {
1509+
"type": "string",
1510+
"description": "Certificate public data."
1511+
},
1512+
"provisioningState": {
1513+
"readOnly": true,
1514+
"$ref": "./network.json#/definitions/ProvisioningState",
1515+
"description": "The provisioning state of the trusted client certificate resource."
1516+
}
1517+
},
1518+
"description": "Trusted Client certificates properties of an application gateway."
1519+
},
1520+
"ApplicationGatewayTrustedClientCertificate": {
1521+
"properties": {
1522+
"properties": {
1523+
"x-ms-client-flatten": true,
1524+
"$ref": "#/definitions/ApplicationGatewayTrustedClientCertificatePropertiesFormat",
1525+
"description": "Properties of the application gateway trusted client certificate."
1526+
},
1527+
"name": {
1528+
"type": "string",
1529+
"description": "Name of the trusted client certificate that is unique within an Application Gateway."
1530+
},
1531+
"etag": {
1532+
"readOnly": true,
1533+
"type": "string",
1534+
"description": "A unique read-only string that changes whenever the resource is updated."
1535+
},
1536+
"type": {
1537+
"readOnly": true,
1538+
"type": "string",
1539+
"description": "Type of the resource."
1540+
}
1541+
},
1542+
"allOf": [
1543+
{
1544+
"$ref": "./network.json#/definitions/SubResource"
1545+
}
1546+
],
1547+
"description": "Trusted Client certificates of an application gateway."
1548+
},
14971549
"ApplicationGatewaySslCertificatePropertiesFormat": {
14981550
"properties": {
14991551
"data": {
@@ -1827,6 +1879,60 @@
18271879
],
18281880
"description": "Backend address pool settings of an application gateway."
18291881
},
1882+
"ApplicationGatewaySslProfilePropertiesFormat": {
1883+
"properties": {
1884+
"trustedClientCertificates": {
1885+
"type": "array",
1886+
"items": {
1887+
"$ref": "./network.json#/definitions/SubResource"
1888+
},
1889+
"description": "Array of references to application gateway trusted client certificates."
1890+
},
1891+
"sslPolicy": {
1892+
"$ref": "#/definitions/ApplicationGatewaySslPolicy",
1893+
"description": "SSL policy of the application gateway resource."
1894+
},
1895+
"clientAuthConfiguration": {
1896+
"$ref": "#/definitions/ApplicationGatewayClientAuthConfiguration",
1897+
"description": "Client authentication configuration of the application gateway resource."
1898+
},
1899+
"provisioningState": {
1900+
"readOnly": true,
1901+
"$ref": "./network.json#/definitions/ProvisioningState",
1902+
"description": "The provisioning state of the HTTP listener resource."
1903+
}
1904+
},
1905+
"description": "Properties of SSL profile of an application gateway."
1906+
},
1907+
"ApplicationGatewaySslProfile": {
1908+
"properties": {
1909+
"properties": {
1910+
"x-ms-client-flatten": true,
1911+
"$ref": "#/definitions/ApplicationGatewaySslProfilePropertiesFormat",
1912+
"description": "Properties of the application gateway SSL profile."
1913+
},
1914+
"name": {
1915+
"type": "string",
1916+
"description": "Name of the SSL profile that is unique within an Application Gateway."
1917+
},
1918+
"etag": {
1919+
"readOnly": true,
1920+
"type": "string",
1921+
"description": "A unique read-only string that changes whenever the resource is updated."
1922+
},
1923+
"type": {
1924+
"readOnly": true,
1925+
"type": "string",
1926+
"description": "Type of the resource."
1927+
}
1928+
},
1929+
"allOf": [
1930+
{
1931+
"$ref": "./network.json#/definitions/SubResource"
1932+
}
1933+
],
1934+
"description": "SSL profile of an application gateway."
1935+
},
18301936
"ApplicationGatewayHttpListenerPropertiesFormat": {
18311937
"properties": {
18321938
"frontendIPConfiguration": {
@@ -1849,6 +1955,10 @@
18491955
"$ref": "./network.json#/definitions/SubResource",
18501956
"description": "SSL certificate resource of an application gateway."
18511957
},
1958+
"sslProfile": {
1959+
"$ref": "./network.json#/definitions/SubResource",
1960+
"description": "SSL profile resource of the application gateway."
1961+
},
18521962
"requireServerNameIndication": {
18531963
"type": "boolean",
18541964
"description": "Applicable only if protocol is https. Enables SNI for multi-hosting."
@@ -2662,6 +2772,13 @@
26622772
},
26632773
"description": "Trusted Root certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)."
26642774
},
2775+
"trustedClientCertificates": {
2776+
"type": "array",
2777+
"items": {
2778+
"$ref": "#/definitions/ApplicationGatewayTrustedClientCertificate"
2779+
},
2780+
"description": "Trusted Client certificates of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)."
2781+
},
26652782
"sslCertificates": {
26662783
"type": "array",
26672784
"items": {
@@ -2711,6 +2828,13 @@
27112828
},
27122829
"description": "Http listeners of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)."
27132830
},
2831+
"sslProfiles": {
2832+
"type": "array",
2833+
"items": {
2834+
"$ref": "#/definitions/ApplicationGatewaySslProfile"
2835+
},
2836+
"description": "SSL profiles of the application gateway resource. For default limits, see [Application Gateway limits](https://docs.microsoft.com/azure/azure-subscription-service-limits#application-gateway-limits)."
2837+
},
27142838
"urlPathMaps": {
27152839
"type": "array",
27162840
"items": {

‎specification/network/resource-manager/Microsoft.Network/stable/2020-06-01/examples/ApplicationGatewayCreate.json‎

Lines changed: 33 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -57,6 +57,14 @@
5757
}
5858
}
5959
],
60+
"trustedClientCertificates": [
61+
{
62+
"name": "clientcert",
63+
"properties": {
64+
"data": "****"
65+
}
66+
}
67+
],
6068
"frontendIPConfigurations": [
6169
{
6270
"name": "appgwfip",
@@ -107,6 +115,28 @@
107115
}
108116
}
109117
],
118+
"sslProfiles": [
119+
{
120+
"name": "sslProfile1",
121+
"properties": {
122+
"sslPolicy": {
123+
"policyType": "Custom",
124+
"minProtocolVersion": "TLSv1_1",
125+
"cipherSuites": [
126+
"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256"
127+
]
128+
},
129+
"clientAuthConfiguration": {
130+
"verifyClientCertIssuerDN": true
131+
},
132+
"trustedClientCertificates": [
133+
{
134+
"id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/applicationGateways/appgw/trustedClientCertificates/clientcert"
135+
}
136+
]
137+
}
138+
}
139+
],
110140
"httpListeners": [
111141
{
112142
"name": "appgwhl",
@@ -121,6 +151,9 @@
121151
"sslCertificate": {
122152
"id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/applicationGateways/appgw/sslCertificates/sslcert"
123153
},
154+
"sslProfile": {
155+
"id": "/subscriptions/subid/resourceGroups/rg1/providers/Microsoft.Network/applicationGateways/appgw/sslProfiles/sslProfile1"
156+
},
124157
"requireServerNameIndication": false
125158
}
126159
},

0 commit comments

Comments
 (0)