{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://artifacts.apis.io/ibm-api-connect/json-schema/ibm-api-connect-tlsserver-profile-schema.json",
  "title": "TLSServerProfile",
  "x-generated": "2026-10-29",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/ibm-api-connect-organization-resources-api-openapi.yml#/components/schemas/TLSServerProfile",
  "type": "object",
  "additionalProperties": false,
  "properties": {
    "type": {
      "type": "string",
      "readOnly": true,
      "enum": [
        "tls_server_profile"
      ]
    },
    "api_version": {
      "type": "string",
      "readOnly": true,
      "enum": [
        "2.0.0"
      ]
    },
    "id": {
      "type": "string",
      "readOnly": true
    },
    "name": {
      "type": "string",
      "maxLength": 255
    },
    "version": {
      "type": "string",
      "maxLength": 255
    },
    "title": {
      "type": "string",
      "maxLength": 1023
    },
    "summary": {
      "type": "string",
      "maxLength": 65535
    },
    "protocols": {
      "type": "array",
      "items": {
        "type": "string",
        "enum": [
          "tls_v1.0",
          "tls_v1.1",
          "tls_v1.2",
          "tls_v1.3"
        ]
      }
    },
    "ciphers": {
      "type": [
        "array",
        "null"
      ],
      "items": {
        "type": "string",
        "enum": [
          "TLS_AES_256_GCM_SHA384",
          "TLS_CHACHA20_POLY1305_SHA256",
          "TLS_AES_128_GCM_SHA256",
          "TLS_AES_128_CCM_SHA256",
          "TLS_AES_128_CCM_8_SHA256",
          "ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
          "ECDHE_RSA_WITH_AES_256_GCM_SHA384",
          "ECDHE_ECDSA_WITH_AES_256_CBC_SHA384",
          "ECDHE_RSA_WITH_AES_256_CBC_SHA384",
          "ECDHE_ECDSA_WITH_AES_256_CBC_SHA",
          "ECDHE_RSA_WITH_AES_256_CBC_SHA",
          "DHE_DSS_WITH_AES_256_GCM_SHA384",
          "DHE_RSA_WITH_AES_256_GCM_SHA384",
          "DHE_RSA_WITH_AES_256_CBC_SHA256",
          "DHE_DSS_WITH_AES_256_CBC_SHA256",
          "DHE_RSA_WITH_AES_256_CBC_SHA",
          "DHE_DSS_WITH_AES_256_CBC_SHA",
          "RSA_WITH_AES_256_GCM_SHA384",
          "RSA_WITH_AES_256_CBC_SHA256",
          "RSA_WITH_AES_256_CBC_SHA",
          "ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
          "ECDHE_RSA_WITH_AES_128_GCM_SHA256",
          "ECDHE_ECDSA_WITH_AES_128_CBC_SHA256",
          "ECDHE_RSA_WITH_AES_128_CBC_SHA256",
          "ECDHE_ECDSA_WITH_AES_128_CBC_SHA",
          "ECDHE_RSA_WITH_AES_128_CBC_SHA",
          "DHE_DSS_WITH_AES_128_GCM_SHA256",
          "DHE_RSA_WITH_AES_128_GCM_SHA256",
          "DHE_RSA_WITH_AES_128_CBC_SHA256",
          "DHE_DSS_WITH_AES_128_CBC_SHA256",
          "DHE_RSA_WITH_AES_128_CBC_SHA",
          "DHE_DSS_WITH_AES_128_CBC_SHA",
          "RSA_WITH_AES_128_GCM_SHA256",
          "RSA_WITH_AES_128_CBC_SHA256",
          "RSA_WITH_AES_128_CBC_SHA",
          "ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA",
          "ECDHE_RSA_WITH_3DES_EDE_CBC_SHA",
          "DHE_RSA_WITH_3DES_EDE_CBC_SHA",
          "DHE_DSS_WITH_3DES_EDE_CBC_SHA",
          "RSA_WITH_3DES_EDE_CBC_SHA"
        ]
      }
    },
    "key_exchange_mechanisms": {
      "type": "array",
      "items": {
        "type": "string",
        "enum": [
          "MLKEM512",
          "MLKEM768",
          "X25519MLKEM768",
          "SecP256r1MLKEM768",
          "MLKEM1024",
          "SecP384r1MLKEM1024",
          "p256",
          "p384",
          "p521",
          "x25519",
          "x448",
          "ffdhe2048",
          "ffdhe3072",
          "ffdhe4096",
          "ffdhe6144",
          "ffdhe8192",
          "brainpoolP256",
          "brainpoolP384",
          "brainpoolP512"
        ]
      }
    },
    "elliptic_curve": {
      "type": [
        "array",
        "null"
      ],
      "items": {
        "type": "string",
        "enum": [
          "sect163k1",
          "sect163r1",
          "sect163r2",
          "sect193r1",
          "sect193r2",
          "sect233k1",
          "sect233r1",
          "sect239k1",
          "sect283k1",
          "sect283r1",
          "sect409k1",
          "sect409r1",
          "sect571k1",
          "sect571r1",
          "secp160k1",
          "secp160r1",
          "secp160r2",
          "secp192k1",
          "secp192r1",
          "secp224k1",
          "secp224r1",
          "secp256k1",
          "secp256r1",
          "secp384r1",
          "secp521r1",
          "brainpoolP256r1",
          "brainpoolP384r1",
          "brainpoolP512r1"
        ]
      }
    },
    "mutual_authentication": {
      "type": "string",
      "enum": [
        "require",
        "request",
        "none"
      ]
    },
    "limit_renegotiation": {
      "type": "boolean",
      "default": true
    },
    "keystore_url": {
      "type": "string",
      "format": "uri"
    },
    "key_name": {
      "type": [
        "string",
        "null"
      ],
      "description": "Selects a specific key+certificate pair from the keystore by name (for multi-key keystores). If not specified, uses the first/default key."
    },
    "truststore_url": {
      "type": [
        "string",
        "null"
      ],
      "format": "uri"
    },
    "cert_name": {
      "type": [
        "string",
        "null"
      ],
      "description": "Selects a specific certificate from the truststore by name. If not specified, all certificates in the truststore are used."
    },
    "gateway_service_urls": {
      "type": "array",
      "items": {
        "type": "string",
        "format": "uri"
      }
    },
    "metadata": {
      "type": "object",
      "additionalProperties": {
        "type": "string"
      }
    },
    "created_at": {
      "type": "string",
      "format": "date-time",
      "readOnly": true
    },
    "updated_at": {
      "type": "string",
      "format": "date-time",
      "readOnly": true
    },
    "url": {
      "type": "string",
      "readOnly": true,
      "format": "uri"
    }
  }
}