oci 2.9.0 → 2.10.0

data/lib/oci/load_balancer/models/ssl_cipher_suite_details.rb

@@ -0,0 +1,445 @@
+# Copyright (c) 2016, 2020, Oracle and/or its affiliates.  All rights reserved.
+# This software is dual-licensed to you under the Universal Permissive License (UPL) 1.0 as shown at https://oss.oracle.com/licenses/upl or Apache License 2.0 as shown at http://www.apache.org/licenses/LICENSE-2.0. You may choose either license.
+
+require 'date'
+
+# rubocop:disable Lint/UnneededCopDisableDirective, Metrics/LineLength
+module OCI
+  # The configuration details of an SSL cipher suite.
+  #
+  # The algorithms that compose a cipher suite help you secure Transport Layer Security (TLS) or Secure Socket Layer
+  # (SSL) network connections. A cipher suite defines the list of security algorithms your load balancer uses to
+  # negotiate with peers while sending and receiving information. The cipher suites you use affect the security
+  # level, performance, and compatibility of your data traffic.
+  #
+  # **Warning:** Oracle recommends that you avoid using any confidential information when you supply string values using the API.
+  #
+  # Oracle created the following predefined cipher suites that you can specify when you define a resource's
+  # [SSL configuration](https://docs.cloud.oracle.com/api/#/en/loadbalancer/20170115/datatypes/SSLConfigurationDetails). You can [create custom
+  # cipher suites](https://docs.cloud.oracle.com/api/#/en/loadbalancer/20170115/SSLCipherSuite/CreateSSLCipherSuite) if the predefined cipher
+  # suites do not meet your requirements.
+  #
+  #
+  # *  __oci-default-ssl-cipher-suite-v1__
+  #
+  #         \"DHE-RSA-AES128-GCM-SHA256\"
+  #         \"DHE-RSA-AES128-SHA256\"
+  #         \"DHE-RSA-AES256-GCM-SHA384\"
+  #         \"DHE-RSA-AES256-SHA256\"
+  #         \"ECDHE-RSA-AES128-GCM-SHA256\"
+  #         \"ECDHE-RSA-AES128-SHA256\"
+  #         \"ECDHE-RSA-AES256-GCM-SHA384\"
+  #         \"ECDHE-RSA-AES256-SHA384\"
+  #
+  # *  __oci-modern-ssl-cipher-suite-v1__
+  #
+  #         \"AES128-GCM-SHA256\"
+  #         \"AES128-SHA256\"
+  #         \"AES256-GCM-SHA384\"
+  #         \"AES256-SHA256\"
+  #         \"DHE-RSA-AES128-GCM-SHA256\"
+  #         \"DHE-RSA-AES128-SHA256\"
+  #         \"DHE-RSA-AES256-GCM-SHA384\"
+  #         \"DHE-RSA-AES256-SHA256\"
+  #         \"ECDHE-ECDSA-AES128-GCM-SHA256\"
+  #         \"ECDHE-ECDSA-AES128-SHA256\"
+  #         \"ECDHE-ECDSA-AES256-GCM-SHA384\"
+  #         \"ECDHE-ECDSA-AES256-SHA384\"
+  #         \"ECDHE-RSA-AES128-GCM-SHA256\"
+  #         \"ECDHE-RSA-AES128-SHA256\"
+  #         \"ECDHE-RSA-AES256-GCM-SHA384\"
+  #         \"ECDHE-RSA-AES256-SHA384\"
+  #
+  # *  __oci-compatible-ssl-cipher-suite-v1__
+  #
+  #         \"AES128-GCM-SHA256\"
+  #         \"AES128-SHA\"
+  #         \"AES128-SHA256\"
+  #         \"AES256-GCM-SHA384\"
+  #         \"AES256-SHA\"
+  #         \"AES256-SHA256\"
+  #         \"DHE-RSA-AES128-GCM-SHA256\"
+  #         \"DHE-RSA-AES128-SHA256\"
+  #         \"DHE-RSA-AES256-GCM-SHA384\"
+  #         \"DHE-RSA-AES256-SHA256\"
+  #         \"ECDHE-ECDSA-AES128-GCM-SHA256\"
+  #         \"ECDHE-ECDSA-AES128-SHA\"
+  #         \"ECDHE-ECDSA-AES128-SHA256\"
+  #         \"ECDHE-ECDSA-AES256-GCM-SHA384\"
+  #         \"ECDHE-ECDSA-AES256-SHA\"
+  #         \"ECDHE-ECDSA-AES256-SHA384\"
+  #         \"ECDHE-RSA-AES128-GCM-SHA256\"
+  #         \"ECDHE-RSA-AES128-SHA\"
+  #         \"ECDHE-RSA-AES128-SHA256\"
+  #         \"ECDHE-RSA-AES256-GCM-SHA384\"
+  #         \"ECDHE-RSA-AES256-SHA\"
+  #         \"ECDHE-RSA-AES256-SHA384\"
+  #
+  # *  __oci-wider-compatible-ssl-cipher-suite-v1__
+  #
+  #         \"AES128-GCM-SHA256\"
+  #         \"AES128-SHA\"
+  #         \"AES128-SHA256\"
+  #         \"AES256-GCM-SHA384\"
+  #         \"AES256-SHA\"
+  #         \"AES256-SHA256\"
+  #         \"CAMELLIA128-SHA\"
+  #         \"CAMELLIA256-SHA\"
+  #         \"DES-CBC3-SHA\"
+  #         \"DH-DSS-AES128-GCM-SHA256\"
+  #         \"DH-DSS-AES128-SHA\"
+  #         \"DH-DSS-AES128-SHA256\"
+  #         \"DH-DSS-AES256-GCM-SHA384\"
+  #         \"DH-DSS-AES256-SHA\"
+  #         \"DH-DSS-AES256-SHA256\"
+  #         \"DH-DSS-CAMELLIA128-SHA\"
+  #         \"DH-DSS-CAMELLIA256-SHA\"
+  #         \"DH-DSS-DES-CBC3-SHAv\"
+  #         \"DH-DSS-SEED-SHA\"
+  #         \"DH-RSA-AES128-GCM-SHA256\"
+  #         \"DH-RSA-AES128-SHA\"
+  #         \"DH-RSA-AES128-SHA256\"
+  #         \"DH-RSA-AES256-GCM-SHA384\"
+  #         \"DH-RSA-AES256-SHA\"
+  #         \"DH-RSA-AES256-SHA256\"
+  #         \"DH-RSA-CAMELLIA128-SHA\"
+  #         \"DH-RSA-CAMELLIA256-SHA\"
+  #         \"DH-RSA-DES-CBC3-SHA\"
+  #         \"DH-RSA-SEED-SHA\"
+  #         \"DHE-DSS-AES128-GCM-SHA256\"
+  #         \"DHE-DSS-AES128-SHA\"
+  #         \"DHE-DSS-AES128-SHA256\"
+  #         \"DHE-DSS-AES256-GCM-SHA384\"
+  #         \"DHE-DSS-AES256-SHA\"
+  #         \"DHE-DSS-AES256-SHA256\"
+  #         \"DHE-DSS-CAMELLIA128-SHA\"
+  #         \"DHE-DSS-CAMELLIA256-SHA\"
+  #         \"DHE-DSS-DES-CBC3-SHA\"
+  #         \"DHE-DSS-SEED-SHA\"
+  #         \"DHE-RSA-AES128-GCM-SHA256\"
+  #         \"DHE-RSA-AES128-SHA\"
+  #         \"DHE-RSA-AES128-SHA256\"
+  #         \"DHE-RSA-AES256-GCM-SHA384\"
+  #         \"DHE-RSA-AES256-SHA\"
+  #         \"DHE-RSA-AES256-SHA256\"
+  #         \"DHE-RSA-CAMELLIA128-SHA\"
+  #         \"DHE-RSA-CAMELLIA256-SHA\"
+  #         \"DHE-RSA-DES-CBC3-SHA\"
+  #         \"DHE-RSA-SEED-SHA\"
+  #         \"ECDH-ECDSA-AES128-GCM-SHA256\"
+  #         \"ECDH-ECDSA-AES128-SHA\"
+  #         \"ECDH-ECDSA-AES128-SHA256\"
+  #         \"ECDH-ECDSA-AES256-GCM-SHA384\"
+  #         \"ECDH-ECDSA-AES256-SHA\"
+  #         \"ECDH-ECDSA-AES256-SHA384\"
+  #         \"ECDH-ECDSA-DES-CBC3-SHA\"
+  #         \"ECDH-ECDSA-RC4-SHA\"
+  #         \"ECDH-RSA-AES128-GCM-SHA256\"
+  #         \"ECDH-RSA-AES128-SHA\"
+  #         \"ECDH-RSA-AES128-SHA256\"
+  #         \"ECDH-RSA-AES256-GCM-SHA384\"
+  #         \"ECDH-RSA-AES256-SHA\"
+  #         \"ECDH-RSA-AES256-SHA384\"
+  #         \"ECDH-RSA-DES-CBC3-SHA\"
+  #         \"ECDH-RSA-RC4-SHA\"
+  #         \"ECDHE-ECDSA-AES128-GCM-SHA256\"
+  #         \"ECDHE-ECDSA-AES128-SHA\"
+  #         \"ECDHE-ECDSA-AES128-SHA256\"
+  #         \"ECDHE-ECDSA-AES256-GCM-SHA384\"
+  #         \"ECDHE-ECDSA-AES256-SHA\"
+  #         \"ECDHE-ECDSA-AES256-SHA384\"
+  #         \"ECDHE-ECDSA-DES-CBC3-SHA\"
+  #         \"ECDHE-ECDSA-RC4-SHA\"
+  #         \"ECDHE-RSA-AES128-GCM-SHA256\"
+  #         \"ECDHE-RSA-AES128-SHA\"
+  #         \"ECDHE-RSA-AES128-SHA256\"
+  #         \"ECDHE-RSA-AES256-GCM-SHA384\"
+  #         \"ECDHE-RSA-AES256-SHA\"
+  #         \"ECDHE-RSA-AES256-SHA384\"
+  #         \"ECDHE-RSA-DES-CBC3-SHA\"
+  #         \"ECDHE-RSA-RC4-SHA\"
+  #         \"IDEA-CBC-SHA\"
+  #         \"KRB5-DES-CBC3-MD5\"
+  #         \"KRB5-DES-CBC3-SHA\"
+  #         \"KRB5-IDEA-CBC-MD5\"
+  #         \"KRB5-IDEA-CBC-SHA\"
+  #         \"KRB5-RC4-MD5\"
+  #         \"KRB5-RC4-SHA\"
+  #         \"PSK-3DES-EDE-CBC-SHA\"
+  #         \"PSK-AES128-CBC-SHA\"
+  #         \"PSK-AES256-CBC-SHA\"
+  #         \"PSK-RC4-SHA\"
+  #         \"RC4-MD5\"
+  #         \"RC4-SHA\"
+  #         \"SEED-SHA\"
+  #
+  class LoadBalancer::Models::SSLCipherSuiteDetails
+    # **[Required]** A friendly name for the SSL cipher suite. It must be unique and it cannot be changed.
+    #
+    # **Note:** The name of your user-defined cipher suite must not be the same as any of Oracle's predefined or
+    #           reserved SSL cipher suite names:
+    #
+    # * oci-default-ssl-cipher-suite-v1
+    # * oci-modern-ssl-cipher-suite-v1
+    # * oci-compatible-ssl-cipher-suite-v1
+    # * oci-wider-compatible-ssl-cipher-suite-v1
+    # * oci-customized-ssl-cipher-suite
+    #
+    # example: `example_cipher_suite`
+    #
+    # @return [String]
+    attr_accessor :name
+
+    # **[Required]** A list of SSL ciphers the load balancer must support for HTTPS or SSL connections.
+    #
+    # The following ciphers are valid values for this property:
+    #
+    # *  __TLSv1.2 ciphers__
+    #
+    #         \"AES128-GCM-SHA256\"
+    #         \"AES128-SHA256\"
+    #         \"AES256-GCM-SHA384\"
+    #         \"AES256-SHA256\"
+    #         \"DH-DSS-AES128-GCM-SHA256\"
+    #         \"DH-DSS-AES128-SHA256\"
+    #         \"DH-DSS-AES256-GCM-SHA384\"
+    #         \"DH-DSS-AES256-SHA256\"
+    #         \"DH-RSA-AES128-GCM-SHA256\"
+    #         \"DH-RSA-AES128-SHA256\"
+    #         \"DH-RSA-AES256-GCM-SHA384\"
+    #         \"DH-RSA-AES256-SHA256\"
+    #         \"DHE-DSS-AES128-GCM-SHA256\"
+    #         \"DHE-DSS-AES128-SHA256\"
+    #         \"DHE-DSS-AES256-GCM-SHA384\"
+    #         \"DHE-DSS-AES256-SHA256\"
+    #         \"DHE-RSA-AES128-GCM-SHA256\"
+    #         \"DHE-RSA-AES128-SHA256\"
+    #         \"DHE-RSA-AES256-GCM-SHA384\"
+    #         \"DHE-RSA-AES256-SHA256\"
+    #         \"ECDH-ECDSA-AES128-GCM-SHA256\"
+    #         \"ECDH-ECDSA-AES128-SHA256\"
+    #         \"ECDH-ECDSA-AES256-GCM-SHA384\"
+    #         \"ECDH-ECDSA-AES256-SHA384\"
+    #         \"ECDH-RSA-AES128-GCM-SHA256\"
+    #         \"ECDH-RSA-AES128-SHA256\"
+    #         \"ECDH-RSA-AES256-GCM-SHA384\"
+    #         \"ECDH-RSA-AES256-SHA384\"
+    #         \"ECDHE-ECDSA-AES128-GCM-SHA256\"
+    #         \"ECDHE-ECDSA-AES128-SHA256\"
+    #         \"ECDHE-ECDSA-AES256-GCM-SHA384\"
+    #         \"ECDHE-ECDSA-AES256-SHA384\"
+    #         \"ECDHE-RSA-AES128-GCM-SHA256\"
+    #         \"ECDHE-RSA-AES128-SHA256\"
+    #         \"ECDHE-RSA-AES256-GCM-SHA384\"
+    #         \"ECDHE-RSA-AES256-SHA384\"
+    #
+    # *  __TLSv1 ciphers also supported by TLSv1.2__
+    #
+    #         \"AES128-SHA\"
+    #         \"AES256-SHA\"
+    #         \"CAMELLIA128-SHA\"
+    #         \"CAMELLIA256-SHA\"
+    #         \"DES-CBC3-SHA\"
+    #         \"DH-DSS-AES128-SHA\"
+    #         \"DH-DSS-AES256-SHA\"
+    #         \"DH-DSS-CAMELLIA128-SHA\"
+    #         \"DH-DSS-CAMELLIA256-SHA\"
+    #         \"DH-DSS-DES-CBC3-SHAv\"
+    #         \"DH-DSS-SEED-SHA\"
+    #         \"DH-RSA-AES128-SHA\"
+    #         \"DH-RSA-AES256-SHA\"
+    #         \"DH-RSA-CAMELLIA128-SHA\"
+    #         \"DH-RSA-CAMELLIA256-SHA\"
+    #         \"DH-RSA-DES-CBC3-SHA\"
+    #         \"DH-RSA-SEED-SHA\"
+    #         \"DHE-DSS-AES128-SHA\"
+    #         \"DHE-DSS-AES256-SHA\"
+    #         \"DHE-DSS-CAMELLIA128-SHA\"
+    #         \"DHE-DSS-CAMELLIA256-SHA\"
+    #         \"DHE-DSS-DES-CBC3-SHA\"
+    #         \"DHE-DSS-SEED-SHA\"
+    #         \"DHE-RSA-AES128-SHA\"
+    #         \"DHE-RSA-AES256-SHA\"
+    #         \"DHE-RSA-CAMELLIA128-SHA\"
+    #         \"DHE-RSA-CAMELLIA256-SHA\"
+    #         \"DHE-RSA-DES-CBC3-SHA\"
+    #         \"DHE-RSA-SEED-SHA\"
+    #         \"ECDH-ECDSA-AES128-SHA\"
+    #         \"ECDH-ECDSA-AES256-SHA\"
+    #         \"ECDH-ECDSA-DES-CBC3-SHA\"
+    #         \"ECDH-ECDSA-RC4-SHA\"
+    #         \"ECDH-RSA-AES128-SHA\"
+    #         \"ECDH-RSA-AES256-SHA\"
+    #         \"ECDH-RSA-DES-CBC3-SHA\"
+    #         \"ECDH-RSA-RC4-SHA\"
+    #         \"ECDHE-ECDSA-AES128-SHA\"
+    #         \"ECDHE-ECDSA-AES256-SHA\"
+    #         \"ECDHE-ECDSA-DES-CBC3-SHA\"
+    #         \"ECDHE-ECDSA-RC4-SHA\"
+    #         \"ECDHE-RSA-AES128-SHA\"
+    #         \"ECDHE-RSA-AES256-SHA\"
+    #         \"ECDHE-RSA-DES-CBC3-SHA\"
+    #         \"ECDHE-RSA-RC4-SHA\"
+    #         \"IDEA-CBC-SHA\"
+    #         \"KRB5-DES-CBC3-MD5\"
+    #         \"KRB5-DES-CBC3-SHA\"
+    #         \"KRB5-IDEA-CBC-MD5\"
+    #         \"KRB5-IDEA-CBC-SHA\"
+    #         \"KRB5-RC4-MD5\"
+    #         \"KRB5-RC4-SHA\"
+    #         \"PSK-3DES-EDE-CBC-SHA\"
+    #         \"PSK-AES128-CBC-SHA\"
+    #         \"PSK-AES256-CBC-SHA\"
+    #         \"PSK-RC4-SHA\"
+    #         \"RC4-MD5\"
+    #         \"RC4-SHA\"
+    #         \"SEED-SHA\"
+    #
+    # example: `[\"ECDHE-RSA-AES256-GCM-SHA384\",\"ECDHE-ECDSA-AES256-GCM-SHA384\",\"ECDHE-RSA-AES128-GCM-SHA256\"]`
+    #
+    # @return [Array<String>]
+    attr_accessor :ciphers
+
+    # Attribute mapping from ruby-style variable name to JSON key.
+    def self.attribute_map
+      {
+        # rubocop:disable Style/SymbolLiteral
+        'name': :'name',
+        'ciphers': :'ciphers'
+        # rubocop:enable Style/SymbolLiteral
+      }
+    end
+
+    # Attribute type mapping.
+    def self.swagger_types
+      {
+        # rubocop:disable Style/SymbolLiteral
+        'name': :'String',
+        'ciphers': :'Array<String>'
+        # rubocop:enable Style/SymbolLiteral
+      }
+    end
+
+    # rubocop:disable Metrics/CyclomaticComplexity, Metrics/AbcSize, Metrics/PerceivedComplexity
+    # rubocop:disable Metrics/MethodLength, Layout/EmptyLines, Style/SymbolLiteral
+
+
+    # Initializes the object
+    # @param [Hash] attributes Model attributes in the form of hash
+    # @option attributes [String] :name The value to assign to the {#name} property
+    # @option attributes [Array<String>] :ciphers The value to assign to the {#ciphers} property
+    def initialize(attributes = {})
+      return unless attributes.is_a?(Hash)
+
+      # convert string to symbol for hash key
+      attributes = attributes.each_with_object({}) { |(k, v), h| h[k.to_sym] = v }
+
+      self.name = attributes[:'name'] if attributes[:'name']
+
+      self.ciphers = attributes[:'ciphers'] if attributes[:'ciphers']
+    end
+    # rubocop:enable Metrics/CyclomaticComplexity, Metrics/AbcSize, Metrics/PerceivedComplexity
+    # rubocop:enable Metrics/MethodLength, Layout/EmptyLines, Style/SymbolLiteral
+
+    # rubocop:disable Metrics/CyclomaticComplexity, Metrics/AbcSize, Metrics/PerceivedComplexity, Layout/EmptyLines
+
+
+    # Checks equality by comparing each attribute.
+    # @param [Object] other the other object to be compared
+    def ==(other)
+      return true if equal?(other)
+
+      self.class == other.class &&
+        name == other.name &&
+        ciphers == other.ciphers
+    end
+    # rubocop:enable Metrics/CyclomaticComplexity, Metrics/AbcSize, Metrics/PerceivedComplexity, Layout/EmptyLines
+
+    # @see the `==` method
+    # @param [Object] other the other object to be compared
+    def eql?(other)
+      self == other
+    end
+
+    # rubocop:disable Metrics/AbcSize, Layout/EmptyLines
+
+
+    # Calculates hash code according to all attributes.
+    # @return [Fixnum] Hash code
+    def hash
+      [name, ciphers].hash
+    end
+    # rubocop:enable Metrics/AbcSize, Layout/EmptyLines
+
+    # rubocop:disable Metrics/AbcSize, Layout/EmptyLines
+
+
+    # Builds the object from hash
+    # @param [Hash] attributes Model attributes in the form of hash
+    # @return [Object] Returns the model itself
+    def build_from_hash(attributes)
+      return nil unless attributes.is_a?(Hash)
+
+      self.class.swagger_types.each_pair do |key, type|
+        if type =~ /^Array<(.*)>/i
+          # check to ensure the input is an array given that the the attribute
+          # is documented as an array but the input is not
+          if attributes[self.class.attribute_map[key]].is_a?(Array)
+            public_method("#{key}=").call(
+              attributes[self.class.attribute_map[key]]
+                .map { |v| OCI::Internal::Util.convert_to_type(Regexp.last_match(1), v) }
+            )
+          end
+        elsif !attributes[self.class.attribute_map[key]].nil?
+          public_method("#{key}=").call(
+            OCI::Internal::Util.convert_to_type(type, attributes[self.class.attribute_map[key]])
+          )
+        end
+        # or else data not found in attributes(hash), not an issue as the data can be optional
+      end
+
+      self
+    end
+    # rubocop:enable Metrics/AbcSize, Layout/EmptyLines
+
+    # Returns the string representation of the object
+    # @return [String] String presentation of the object
+    def to_s
+      to_hash.to_s
+    end
+
+    # Returns the object in the form of hash
+    # @return [Hash] Returns the object in the form of hash
+    def to_hash
+      hash = {}
+      self.class.attribute_map.each_pair do |attr, param|
+        value = public_method(attr).call
+        next if value.nil? && !instance_variable_defined?("@#{attr}")
+
+        hash[param] = _to_hash(value)
+      end
+      hash
+    end
+
+    private
+
+    # Outputs non-array value in the form of hash
+    # For object, use to_hash. Otherwise, just return the value
+    # @param [Object] value Any valid value
+    # @return [Hash] Returns the value in the form of hash
+    def _to_hash(value)
+      if value.is_a?(Array)
+        value.compact.map { |v| _to_hash(v) }
+      elsif value.is_a?(Hash)
+        {}.tap do |hash|
+          value.each { |k, v| hash[k] = _to_hash(v) }
+        end
+      elsif value.respond_to? :to_hash
+        value.to_hash
+      else
+        value
+      end
+    end
+  end
+end
+# rubocop:enable Lint/UnneededCopDisableDirective, Metrics/LineLength

data/lib/oci/load_balancer/models/ssl_configuration.rb

@@ -2,6 +2,7 @@
 # This software is dual-licensed to you under the Universal Permissive License (UPL) 1.0 as shown at https://oss.oracle.com/licenses/upl or Apache License 2.0 as shown at http://www.apache.org/licenses/LICENSE-2.0. You may choose either license.
 
 require 'date'
+require 'logger'
 
 # rubocop:disable Lint/UnneededCopDisableDirective, Metrics/LineLength
 module OCI
@@ -12,6 +13,26 @@ module OCI
   # **Warning:** Oracle recommends that you avoid using any confidential information when you supply string values using the API.
   #
   class LoadBalancer::Models::SSLConfiguration
+    SERVER_ORDER_PREFERENCE_ENUM = [
+      SERVER_ORDER_PREFERENCE_ENABLED = 'ENABLED'.freeze,
+      SERVER_ORDER_PREFERENCE_DISABLED = 'DISABLED'.freeze,
+      SERVER_ORDER_PREFERENCE_UNKNOWN_ENUM_VALUE = 'UNKNOWN_ENUM_VALUE'.freeze
+    ].freeze
+
+    # **[Required]** The maximum depth for peer certificate chain verification.
+    #
+    # Example: `3`
+    #
+    # @return [Integer]
+    attr_accessor :verify_depth
+
+    # **[Required]** Whether the load balancer listener should verify peer certificates.
+    #
+    # Example: `true`
+    #
+    # @return [BOOLEAN]
+    attr_accessor :verify_peer_certificate
+
     # **[Required]** A friendly name for the certificate bundle. It must be unique and it cannot be changed.
     # Valid certificate bundle names include only alphanumeric characters, dashes, and underscores.
     # Certificate bundle names cannot contain spaces. Avoid entering confidential information.
@@ -21,27 +42,82 @@ module OCI
     # @return [String]
     attr_accessor :certificate_name
 
-    # **[Required]** Whether the load balancer listener should verify peer certificates.
+    # When this attribute is set to ENABLED, the system gives preference to the server ciphers over the client
+    # ciphers.
     #
-    # Example: `true`
+    # **Note:** This configuration is applicable only when the load balancer is acting as an SSL/HTTPS server. This
+    #           field is ignored when the `SSLConfiguration` object is associated with a backend set.
     #
-    # @return [BOOLEAN]
-    attr_accessor :verify_peer_certificate
+    # @return [String]
+    attr_reader :server_order_preference
 
-    # **[Required]** The maximum depth for peer certificate chain verification.
+    # The name of the cipher suite to use for HTTPS or SSL connections.
     #
-    # Example: `3`
+    # If this field is not specified, the default is `oci-default-ssl-cipher-suite-v1`.
     #
-    # @return [Integer]
-    attr_accessor :verify_depth
+    # **Notes:**
+    #
+    # *  You must ensure compatibility between the specified SSL protocols and the ciphers configured in the cipher
+    #    suite. Clients cannot perform an SSL handshake if there is an incompatible configuration.
+    # *  You must ensure compatibility between the ciphers configured in the cipher suite and the configured
+    #    certificates. For example, RSA-based ciphers require RSA certificates and ECDSA-based ciphers require ECDSA
+    #    certificates.
+    # *  If the cipher configuration is not modified after load balancer creation, the `GET` operation returns
+    #    `oci-default-ssl-cipher-suite-v1` as the value of this field in the SSL configuration for existing listeners
+    #    that predate this feature.
+    # *  If the cipher configuration was modified using Oracle operations after load balancer creation, the `GET`
+    #    operation returns `oci-customized-ssl-cipher-suite` as the value of this field in the SSL configuration for
+    #    existing listeners that predate this feature.
+    # *  The `GET` operation returns `oci-wider-compatible-ssl-cipher-suite-v1` as the value of this field in the SSL
+    #    configuration for existing backend sets that predate this feature.
+    # *  If the `GET` operation on a listener returns `oci-customized-ssl-cipher-suite` as the value of this field,
+    #    you must specify an appropriate predefined or custom cipher suite name when updating the resource.
+    # *  The `oci-customized-ssl-cipher-suite` Oracle reserved cipher suite name is not accepted as valid input for
+    #    this field.
+    #
+    # example: `example_cipher_suite`
+    #
+    # @return [String]
+    attr_accessor :cipher_suite_name
+
+    # A list of SSL protocols the load balancer must support for HTTPS or SSL connections.
+    #
+    # The load balancer uses SSL protocols to establish a secure connection between a client and a server. A secure
+    # connection ensures that all data passed between the client and the server is private.
+    #
+    # The Load Balancing service supports the following protocols:
+    #
+    # *  TLSv1
+    # *  TLSv1.1
+    # *  TLSv1.2
+    #
+    # If this field is not specified, TLSv1.2 is the default.
+    #
+    # **Warning:** All SSL listeners created on a given port must use the same set of SSL protocols.
+    #
+    # **Notes:**
+    #
+    # *  The handshake to establish an SSL connection fails if the client supports none of the specified protocols.
+    # *  You must ensure compatibility between the specified SSL protocols and the ciphers configured in the cipher
+    #    suite.
+    # *  For all existing load balancer listeners and backend sets that predate this feature, the `GET` operation
+    #    displays a list of SSL protocols currently used by those resources.
+    #
+    # example: `[\"TLSv1.1\", \"TLSv1.2\"]`
+    #
+    # @return [Array<String>]
+    attr_accessor :protocols
 
     # Attribute mapping from ruby-style variable name to JSON key.
     def self.attribute_map
       {
         # rubocop:disable Style/SymbolLiteral
-        'certificate_name': :'certificateName',
+        'verify_depth': :'verifyDepth',
         'verify_peer_certificate': :'verifyPeerCertificate',
-        'verify_depth': :'verifyDepth'
+        'certificate_name': :'certificateName',
+        'server_order_preference': :'serverOrderPreference',
+        'cipher_suite_name': :'cipherSuiteName',
+        'protocols': :'protocols'
         # rubocop:enable Style/SymbolLiteral
       }
     end
@@ -50,9 +126,12 @@ module OCI
     def self.swagger_types
       {
         # rubocop:disable Style/SymbolLiteral
-        'certificate_name': :'String',
+        'verify_depth': :'Integer',
         'verify_peer_certificate': :'BOOLEAN',
-        'verify_depth': :'Integer'
+        'certificate_name': :'String',
+        'server_order_preference': :'String',
+        'cipher_suite_name': :'String',
+        'protocols': :'Array<String>'
         # rubocop:enable Style/SymbolLiteral
       }
     end
@@ -63,20 +142,23 @@ module OCI
 
     # Initializes the object
     # @param [Hash] attributes Model attributes in the form of hash
-    # @option attributes [String] :certificate_name The value to assign to the {#certificate_name} property
-    # @option attributes [BOOLEAN] :verify_peer_certificate The value to assign to the {#verify_peer_certificate} property
     # @option attributes [Integer] :verify_depth The value to assign to the {#verify_depth} property
+    # @option attributes [BOOLEAN] :verify_peer_certificate The value to assign to the {#verify_peer_certificate} property
+    # @option attributes [String] :certificate_name The value to assign to the {#certificate_name} property
+    # @option attributes [String] :server_order_preference The value to assign to the {#server_order_preference} property
+    # @option attributes [String] :cipher_suite_name The value to assign to the {#cipher_suite_name} property
+    # @option attributes [Array<String>] :protocols The value to assign to the {#protocols} property
     def initialize(attributes = {})
       return unless attributes.is_a?(Hash)
 
       # convert string to symbol for hash key
       attributes = attributes.each_with_object({}) { |(k, v), h| h[k.to_sym] = v }
 
-      self.certificate_name = attributes[:'certificateName'] if attributes[:'certificateName']
+      self.verify_depth = attributes[:'verifyDepth'] if attributes[:'verifyDepth']
 
-      raise 'You cannot provide both :certificateName and :certificate_name' if attributes.key?(:'certificateName') && attributes.key?(:'certificate_name')
+      raise 'You cannot provide both :verifyDepth and :verify_depth' if attributes.key?(:'verifyDepth') && attributes.key?(:'verify_depth')
 
-      self.certificate_name = attributes[:'certificate_name'] if attributes[:'certificate_name']
+      self.verify_depth = attributes[:'verify_depth'] if attributes[:'verify_depth']
 
       self.verify_peer_certificate = attributes[:'verifyPeerCertificate'] unless attributes[:'verifyPeerCertificate'].nil?
       self.verify_peer_certificate = false if verify_peer_certificate.nil? && !attributes.key?(:'verifyPeerCertificate') # rubocop:disable Style/StringLiterals
@@ -86,15 +168,46 @@ module OCI
       self.verify_peer_certificate = attributes[:'verify_peer_certificate'] unless attributes[:'verify_peer_certificate'].nil?
       self.verify_peer_certificate = false if verify_peer_certificate.nil? && !attributes.key?(:'verifyPeerCertificate') && !attributes.key?(:'verify_peer_certificate') # rubocop:disable Style/StringLiterals
 
-      self.verify_depth = attributes[:'verifyDepth'] if attributes[:'verifyDepth']
+      self.certificate_name = attributes[:'certificateName'] if attributes[:'certificateName']
 
-      raise 'You cannot provide both :verifyDepth and :verify_depth' if attributes.key?(:'verifyDepth') && attributes.key?(:'verify_depth')
+      raise 'You cannot provide both :certificateName and :certificate_name' if attributes.key?(:'certificateName') && attributes.key?(:'certificate_name')
 
-      self.verify_depth = attributes[:'verify_depth'] if attributes[:'verify_depth']
+      self.certificate_name = attributes[:'certificate_name'] if attributes[:'certificate_name']
+
+      self.server_order_preference = attributes[:'serverOrderPreference'] if attributes[:'serverOrderPreference']
+      self.server_order_preference = "ENABLED" if server_order_preference.nil? && !attributes.key?(:'serverOrderPreference') # rubocop:disable Style/StringLiterals
+
+      raise 'You cannot provide both :serverOrderPreference and :server_order_preference' if attributes.key?(:'serverOrderPreference') && attributes.key?(:'server_order_preference')
+
+      self.server_order_preference = attributes[:'server_order_preference'] if attributes[:'server_order_preference']
+      self.server_order_preference = "ENABLED" if server_order_preference.nil? && !attributes.key?(:'serverOrderPreference') && !attributes.key?(:'server_order_preference') # rubocop:disable Style/StringLiterals
+
+      self.cipher_suite_name = attributes[:'cipherSuiteName'] if attributes[:'cipherSuiteName']
+      self.cipher_suite_name = "oci-default-ssl-cipher-suite-v1" if cipher_suite_name.nil? && !attributes.key?(:'cipherSuiteName') # rubocop:disable Style/StringLiterals
+
+      raise 'You cannot provide both :cipherSuiteName and :cipher_suite_name' if attributes.key?(:'cipherSuiteName') && attributes.key?(:'cipher_suite_name')
+
+      self.cipher_suite_name = attributes[:'cipher_suite_name'] if attributes[:'cipher_suite_name']
+      self.cipher_suite_name = "oci-default-ssl-cipher-suite-v1" if cipher_suite_name.nil? && !attributes.key?(:'cipherSuiteName') && !attributes.key?(:'cipher_suite_name') # rubocop:disable Style/StringLiterals
+
+      self.protocols = attributes[:'protocols'] if attributes[:'protocols']
     end
     # rubocop:enable Metrics/CyclomaticComplexity, Metrics/AbcSize, Metrics/PerceivedComplexity
     # rubocop:enable Metrics/MethodLength, Layout/EmptyLines, Style/SymbolLiteral
 
+    # Custom attribute writer method checking allowed values (enum).
+    # @param [Object] server_order_preference Object to be assigned
+    def server_order_preference=(server_order_preference)
+      # rubocop:disable Style/ConditionalAssignment
+      if server_order_preference && !SERVER_ORDER_PREFERENCE_ENUM.include?(server_order_preference)
+        OCI.logger.debug("Unknown value for 'server_order_preference' [" + server_order_preference + "]. Mapping to 'SERVER_ORDER_PREFERENCE_UNKNOWN_ENUM_VALUE'") if OCI.logger
+        @server_order_preference = SERVER_ORDER_PREFERENCE_UNKNOWN_ENUM_VALUE
+      else
+        @server_order_preference = server_order_preference
+      end
+      # rubocop:enable Style/ConditionalAssignment
+    end
+
     # rubocop:disable Metrics/CyclomaticComplexity, Metrics/AbcSize, Metrics/PerceivedComplexity, Layout/EmptyLines
 
 
@@ -104,9 +217,12 @@ module OCI
       return true if equal?(other)
 
       self.class == other.class &&
-        certificate_name == other.certificate_name &&
+        verify_depth == other.verify_depth &&
         verify_peer_certificate == other.verify_peer_certificate &&
-        verify_depth == other.verify_depth
+        certificate_name == other.certificate_name &&
+        server_order_preference == other.server_order_preference &&
+        cipher_suite_name == other.cipher_suite_name &&
+        protocols == other.protocols
     end
     # rubocop:enable Metrics/CyclomaticComplexity, Metrics/AbcSize, Metrics/PerceivedComplexity, Layout/EmptyLines
 
@@ -122,7 +238,7 @@ module OCI
     # Calculates hash code according to all attributes.
     # @return [Fixnum] Hash code
     def hash
-      [certificate_name, verify_peer_certificate, verify_depth].hash
+      [verify_depth, verify_peer_certificate, certificate_name, server_order_preference, cipher_suite_name, protocols].hash
     end
     # rubocop:enable Metrics/AbcSize, Layout/EmptyLines