Initial commit
This commit is contained in:
962
MIBS/cisco/CISCOSB-SSL
Normal file
962
MIBS/cisco/CISCOSB-SSL
Normal file
@@ -0,0 +1,962 @@
|
||||
CISCOSB-SSL DEFINITIONS ::= BEGIN
|
||||
|
||||
-- Title: CISCOSB Ssl Private Extension
|
||||
-- Version: 7.35
|
||||
-- Date: 20 Jan 2004
|
||||
|
||||
IMPORTS
|
||||
switch001 FROM CISCOSB-MIB
|
||||
Unsigned32, IpAddress,
|
||||
MODULE-IDENTITY, OBJECT-TYPE FROM SNMPv2-SMI
|
||||
TruthValue, RowStatus, DisplayString,
|
||||
TEXTUAL-CONVENTION FROM SNMPv2-TC;
|
||||
|
||||
rlSsl MODULE-IDENTITY
|
||||
LAST-UPDATED "200309210001Z"
|
||||
ORGANIZATION "Cisco Systems, Inc."
|
||||
|
||||
CONTACT-INFO
|
||||
"Postal: 170 West Tasman Drive
|
||||
San Jose , CA 95134-1706
|
||||
USA
|
||||
|
||||
|
||||
Website: Cisco Small Business Support Community <http://www.cisco.com/go/smallbizsupport>"
|
||||
|
||||
DESCRIPTION
|
||||
"The private MIB module definition for SSL."
|
||||
REVISION "200309210000Z"
|
||||
DESCRIPTION
|
||||
"Added this MODULE-IDENTITY clause."
|
||||
::= { switch001 100 }
|
||||
|
||||
rlSslCertificateGenerationTable OBJECT-TYPE
|
||||
SYNTAX SEQUENCE OF RlSslCertificateGenerationEntry
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This table is used for :
|
||||
1. generating keys and self signed certificate - saved in flash and RAM
|
||||
(not in configuration file)
|
||||
2. generating certificate requests - saved in RAM, can be read by
|
||||
rlSslCertificateExportTable
|
||||
3. generating self signed certificate - saved in flash and RAM (not in
|
||||
configuraion file)
|
||||
By setting rlSslCertificateGenerationAction to the appropriate
|
||||
value this action takes place. The other fields of this table are used for
|
||||
each of this actions"
|
||||
::= { rlSsl 1 }
|
||||
|
||||
rlSslCertificateGenerationEntry OBJECT-TYPE
|
||||
SYNTAX RlSslCertificateGenerationEntry
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
" The row definition for this table."
|
||||
INDEX { rlSslCertificateGenerationIndex }
|
||||
::= { rlSslCertificateGenerationTable 1 }
|
||||
|
||||
RlSslCertificateGenerationEntry ::= SEQUENCE {
|
||||
rlSslCertificateGenerationIndex INTEGER,
|
||||
rlSslCertificateGenerationId INTEGER,
|
||||
rlSslCertificateGenerationCountryName DisplayString,
|
||||
rlSslCertificateGenerationStateOrProvinceName DisplayString,
|
||||
rlSslCertificateGenerationLocalityName DisplayString,
|
||||
rlSslCertificateGenerationOrganizationName DisplayString,
|
||||
rlSslCertificateGenerationOrganizationUnitName DisplayString,
|
||||
rlSslCertificateGenerationCommonName DisplayString,
|
||||
rlSslCertificateGenerationValidDays INTEGER,
|
||||
rlSslCertificateGenerationRsaKeyLength INTEGER,
|
||||
rlSslCertificateGenerationPassphrase DisplayString,
|
||||
rlSslCertificateGenerationAction INTEGER,
|
||||
rlSslCertificateGenerationEcKeyCurve INTEGER
|
||||
}
|
||||
|
||||
rlSslCertificateGenerationIndex OBJECT-TYPE
|
||||
SYNTAX INTEGER
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This index is always set to 1 no matter for which certificate or
|
||||
certificate request the action refers to."
|
||||
::= { rlSslCertificateGenerationEntry 1 }
|
||||
|
||||
rlSslCertificateGenerationId OBJECT-TYPE
|
||||
SYNTAX INTEGER
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The device can hold a number of keys/certificates/certificate requests.
|
||||
These certificates are always numbered from 1 to N (maximum number of
|
||||
certificates in device). This field decides to which
|
||||
keys/certificates/certificate requests the action refers."
|
||||
::= { rlSslCertificateGenerationEntry 2 }
|
||||
|
||||
|
||||
rlSslCertificateGenerationCountryName OBJECT-TYPE
|
||||
SYNTAX DisplayString (SIZE(2))
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Value of country name field that will appear when a new certificate
|
||||
request or self signed certificate is generated."
|
||||
::= { rlSslCertificateGenerationEntry 3 }
|
||||
|
||||
rlSslCertificateGenerationStateOrProvinceName OBJECT-TYPE
|
||||
SYNTAX DisplayString (SIZE(1..64))
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Value of state or province name field that will appear when a new
|
||||
certificate or self signed certificate is generated."
|
||||
::= { rlSslCertificateGenerationEntry 4 }
|
||||
|
||||
|
||||
rlSslCertificateGenerationLocalityName OBJECT-TYPE
|
||||
SYNTAX DisplayString (SIZE(1..64))
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Value of locality field that will appear when a new certificate or
|
||||
self signed certificate is generated."
|
||||
::= { rlSslCertificateGenerationEntry 5 }
|
||||
|
||||
|
||||
rlSslCertificateGenerationOrganizationName OBJECT-TYPE
|
||||
SYNTAX DisplayString (SIZE(1..64))
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Value of organization field that will appear when a new certificate or
|
||||
self signed certificate is generated."
|
||||
::= { rlSslCertificateGenerationEntry 6 }
|
||||
|
||||
rlSslCertificateGenerationOrganizationUnitName OBJECT-TYPE
|
||||
SYNTAX DisplayString (SIZE(1..64))
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Value of organization field that will appear when a new certificate or
|
||||
self signed certificate is generated."
|
||||
::= { rlSslCertificateGenerationEntry 7 }
|
||||
|
||||
rlSslCertificateGenerationCommonName OBJECT-TYPE
|
||||
SYNTAX DisplayString (SIZE(1..64))
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Value of common name field that will appear when a new certificate or
|
||||
self signed certificate is generated."
|
||||
::= { rlSslCertificateGenerationEntry 8 }
|
||||
|
||||
rlSslCertificateGenerationValidDays OBJECT-TYPE
|
||||
SYNTAX INTEGER
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"When generating self signed certificate this field sets the valid fields.
|
||||
'Valid from' is current GMT and 'valid to' current GMT + the value of
|
||||
this field."
|
||||
::= { rlSslCertificateGenerationEntry 9 }
|
||||
|
||||
rlSslCertificateGenerationRsaKeyLength OBJECT-TYPE
|
||||
SYNTAX INTEGER (512..3072)
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Setting the RSA key size that will be created when a new key is generated -
|
||||
generateRsaKeyAndSelfSignedCertificate"
|
||||
::= { rlSslCertificateGenerationEntry 10 }
|
||||
|
||||
rlSslCertificateGenerationPassphrase OBJECT-TYPE
|
||||
SYNTAX DisplayString
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"When a RSA key is generated (generateRsaKeyAndSelfSignedCertificate)
|
||||
this passphrase is saved in flash and when the time comes and the
|
||||
certificate and the key are exported in PKCS12 format this passphrase
|
||||
is used to encrypt it. If the passphrase is empty the key and
|
||||
certificate can not be exported. There is no method of obtaining this
|
||||
passphrase once a key was generated."
|
||||
::= { rlSslCertificateGenerationEntry 11 }
|
||||
|
||||
rlSslCertificateGenerationAction OBJECT-TYPE
|
||||
SYNTAX INTEGER {
|
||||
generateRsaKeyAndSelfSignedCertificate(1),
|
||||
generateSelfSignedCertificate(2),
|
||||
generatePkcs12(3),
|
||||
generateCertificateRequest(4),
|
||||
generateEcKeyAndSelfSignedCertificate(5)
|
||||
}
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Setting to a regenerateCertificate causes a new certificate to be
|
||||
generated and to be used for all new sessions."
|
||||
::= { rlSslCertificateGenerationEntry 12 }
|
||||
|
||||
rlSslCertificateGenerationEcKeyCurve OBJECT-TYPE
|
||||
SYNTAX INTEGER (1..1000)
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Setting the EC key curve that will be created when a new key is generated -
|
||||
generateEcKeyAndSelfSignedCertificate"
|
||||
::= { rlSslCertificateGenerationEntry 13 }
|
||||
|
||||
rlSslCertificateExportTable OBJECT-TYPE
|
||||
SYNTAX SEQUENCE OF RlSslCertificateExportEntry
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This table is used for viewing saved data from RAM and flash."
|
||||
::= { rlSsl 2 }
|
||||
|
||||
rlSslCertificateExportEntry OBJECT-TYPE
|
||||
SYNTAX RlSslCertificateExportEntry
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
" The row definition for this table."
|
||||
INDEX { rlSslCertificateExportId,
|
||||
rlSslCertificateExportType,
|
||||
rlSslCertificateExportFragmentId }
|
||||
::= { rlSslCertificateExportTable 1 }
|
||||
|
||||
RlSslCertificateExportEntry ::= SEQUENCE {
|
||||
rlSslCertificateExportId INTEGER,
|
||||
rlSslCertificateExportType INTEGER,
|
||||
rlSslCertificateExportFragmentId INTEGER,
|
||||
rlSslCertificateExportFragmentText OCTET STRING
|
||||
}
|
||||
|
||||
rlSslCertificateExportId OBJECT-TYPE
|
||||
SYNTAX INTEGER
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Identifies the index of this certficate / certificate request the table holds."
|
||||
::= { rlSslCertificateExportEntry 1 }
|
||||
|
||||
rlSslCertificateExportType OBJECT-TYPE
|
||||
SYNTAX INTEGER {
|
||||
certificateRequestPemFormat (1),
|
||||
certificatePemFormat(2),
|
||||
certificateOpenSslFormat(3),
|
||||
certificateAndKeyPkcs12(4)
|
||||
}
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Identifies the type of data the current entry shows."
|
||||
::= { rlSslCertificateExportEntry 2 }
|
||||
|
||||
rlSslCertificateExportFragmentId OBJECT-TYPE
|
||||
SYNTAX INTEGER
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Identifies the index of this fragment in the CA certificate."
|
||||
::= { rlSslCertificateExportEntry 3 }
|
||||
|
||||
rlSslCertificateExportFragmentText OBJECT-TYPE
|
||||
SYNTAX OCTET STRING
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"A part of the readable text entry for the certificate request."
|
||||
::= { rlSslCertificateExportEntry 4 }
|
||||
|
||||
|
||||
rlSslCertificateSave OBJECT-TYPE
|
||||
SYNTAX INTEGER
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Saves data from rlSslCertificateImportTable to RAM and CDB. When
|
||||
an external certificate should be copied to the device first we copy
|
||||
it to rlSslCertificateImportTable and then this scalar is set to the
|
||||
certificate id that we want to save -
|
||||
1. All entries in rlSslCertificateImportTable that have this id and
|
||||
their format is equal to the current value of rlSslCertificateSaveFormat
|
||||
are concatenated.
|
||||
2. If the imported certificate format is .. - section 1 result
|
||||
is validated against the key with the same index. If validation fails
|
||||
for any reason - the certificate is not saved and the setting this
|
||||
scalar fails.]
|
||||
This scalar is for certificate 1 only... for certificate 2 use
|
||||
rlSslCertificateSave2 "
|
||||
::= { rlSsl 3 }
|
||||
|
||||
rlSslCertificateSaveFormat OBJECT-TYPE
|
||||
SYNTAX INTEGER{
|
||||
x509 (1),
|
||||
pkcs12(2)
|
||||
}
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"."
|
||||
::= { rlSsl 4 }
|
||||
|
||||
rlSslImportedPKCS12CertificatePassphrase OBJECT-TYPE
|
||||
SYNTAX DisplayString (SIZE(8..96))
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"."
|
||||
::= { rlSsl 5 }
|
||||
|
||||
|
||||
rlSslCertificateImportTable OBJECT-TYPE
|
||||
SYNTAX SEQUENCE OF RlSslCertificateImportEntry
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This table is used for copying an external certificate to the device -
|
||||
see rlSslCertificateSave"
|
||||
::= { rlSsl 6 }
|
||||
|
||||
rlSslCertificateImportEntry OBJECT-TYPE
|
||||
SYNTAX RlSslCertificateImportEntry
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
" The row definition for this table."
|
||||
INDEX { rlSslCertificateImportId,
|
||||
rlSslCertificateImportFormat,
|
||||
rlSslCertificateImportFragmentId}
|
||||
::= { rlSslCertificateImportTable 1 }
|
||||
|
||||
RlSslCertificateImportEntry ::= SEQUENCE {
|
||||
rlSslCertificateImportId INTEGER,
|
||||
rlSslCertificateImportFormat INTEGER,
|
||||
rlSslCertificateImportFragmentId INTEGER,
|
||||
rlSslCertificateImportFragmentText OCTET STRING,
|
||||
rlSslCertificateImportFragmentStatus RowStatus
|
||||
}
|
||||
|
||||
rlSslCertificateImportId OBJECT-TYPE
|
||||
SYNTAX INTEGER
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The certificate ID."
|
||||
::= { rlSslCertificateImportEntry 1 }
|
||||
|
||||
rlSslCertificateImportFormat OBJECT-TYPE
|
||||
SYNTAX INTEGER {
|
||||
x509 (1),
|
||||
pkcs12(2)
|
||||
}
|
||||
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"."
|
||||
::= { rlSslCertificateImportEntry 2 }
|
||||
|
||||
|
||||
rlSslCertificateImportFragmentId OBJECT-TYPE
|
||||
SYNTAX INTEGER
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Identifies the index of this fragment in the certificate."
|
||||
::= { rlSslCertificateImportEntry 3 }
|
||||
|
||||
|
||||
rlSslCertificateImportFragmentText OBJECT-TYPE
|
||||
SYNTAX OCTET STRING
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"A part of the readable text entry for the certificate."
|
||||
::= { rlSslCertificateImportEntry 4 }
|
||||
|
||||
rlSslCertificateImportFragmentStatus OBJECT-TYPE
|
||||
SYNTAX RowStatus
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
""
|
||||
::= { rlSslCertificateImportEntry 5 }
|
||||
|
||||
|
||||
rlSslSSLv2Enable OBJECT-TYPE
|
||||
SYNTAX INTEGER { enabled(1), disabled(2) }
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"if enabled then SSLv2 will be supported , if disabled SSLv2 won't be supported.
|
||||
only SSLV3 and TSL1.
|
||||
Note: disabling SSLv2 is more secure."
|
||||
::= { rlSsl 7 }
|
||||
|
||||
RlSslPublicKeyAlgorithm ::= TEXTUAL-CONVENTION
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This textual convention describes the various possible public key
|
||||
algorithms. The key algorithm is used to select the PK to be generated
|
||||
and is also used when viewing the public keys."
|
||||
|
||||
SYNTAX INTEGER {
|
||||
rsa(1),
|
||||
dsa(2),
|
||||
ec(3),
|
||||
ecdsa(4)
|
||||
}
|
||||
|
||||
|
||||
rlSslImportExportSelfKeyTable OBJECT-TYPE
|
||||
SYNTAX SEQUENCE OF RlSslImportExportSelfKeyEntry
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This table can be used for 2 purposes:
|
||||
1) Importing public/private key pair to serve as the device key when acting
|
||||
as SSL server. This is done by setting entries to this table, according to
|
||||
the specified format. When the last entry (footer) is set, the whole key
|
||||
pair is checked and if valid, stored in CDB.
|
||||
2) Exporting the device SSL server public/private key. This can be done by
|
||||
performing GetNext operations on this table."
|
||||
::= { rlSsl 8 }
|
||||
|
||||
rlSslImportExportSelfKeyEntry OBJECT-TYPE
|
||||
SYNTAX RlSslImportExportSelfKeyEntry
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
" The row definition for this table."
|
||||
INDEX { rlSslImportExportSelfKeyFormat,
|
||||
rlSslImportExportSelfKeyIndex,
|
||||
rlSslImportExportSelfKeyFragmentId}
|
||||
::= { rlSslImportExportSelfKeyTable 1 }
|
||||
|
||||
RlSslImportExportSelfKeyEntry ::= SEQUENCE {
|
||||
rlSslImportExportSelfKeyFormat INTEGER,
|
||||
rlSslImportExportSelfKeyIndex INTEGER,
|
||||
rlSslImportExportSelfKeyFragmentId INTEGER,
|
||||
rlSslImportExportSelfKeyAlgorithm RlSslPublicKeyAlgorithm,
|
||||
rlSslImportExportSelfKeyFragmentText OCTET STRING
|
||||
}
|
||||
|
||||
|
||||
rlSslImportExportSelfKeyFormat OBJECT-TYPE
|
||||
SYNTAX INTEGER {
|
||||
uuencoded-format(1)
|
||||
}
|
||||
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Specifies the format of public/key pair. The following formats are
|
||||
supported for import/export:
|
||||
1) uuencoded_format - in this format both private and public key are in
|
||||
uu-encoded format, and are seperated from one another by header and footer.
|
||||
An example of the concateneation of all fragments in this format is:
|
||||
-----BEGIN RSA PRIVATE KEY-----
|
||||
tDaNkZZoCxXfkLLsLDlZ6T9H8U4Gz637eRV7BYBpapkidAxY1UG0/qgfKLPkbId4wzht6ArV9bE4fMtX
|
||||
wSMOxL3q31pOmUdVhjbWYcgZQBDy1DjFSbuIEdP85c96B9bBE2nPv90mSvb/6j8R2NItT/KJeiYMtLtI
|
||||
N3m6/zESKJGIrX0jP1RFDjVZSS5chSAFgB0egsLZEyOQn7jAqpX/x/easD2J6F/OjPXlJ9Hff2tMb3NU
|
||||
QYyBoWH2J9IxhWB6Vo66R9Y04JGR18uL/rV2sMCtpg5ppkVTEpNTp9qE1yXocR2NmzUfNFap+GJ4IHj8
|
||||
CzkVfmJM/kEWaJsYgHbAgLyRg4QVyelfobv1B71aQ+u1z9KGu/QajkWdR04OQfsGOL1CvU2LGYDcRjfH
|
||||
jv+jl/UkDRRjoD9kt2WvouT+OL6esvKl0OJBqWbGNXg9TWv/VLtJIwgUno+MLaJuOM4Fh44+wpnqUXwQ
|
||||
TFtBFc8pzt5BoOwbv9gXpicTkq4/+GhwXWXxSVFebKhnHAvKSLT+Ba7K7ZeR8EIIxbXdDNFOiS45R2KI
|
||||
jxxXLXK44u6KGl5MygCKXUOFlJ+Zhgrq6ZH17z/RVJQ2CWqb5Ekn9GY3kH9QZ3mb4MDPfriWi2lHGXHY
|
||||
JmJd4SLQhpBdnOS5tu84QmyU3dNbAdzghDsR+dEY/6g7Cn0kcVkeHNZ0H+mCZik5f6XBD8eplkk43bdR
|
||||
FrkwTeAjwurGcKwdiKkR4DlfSq3DKssVBucTqUpqsKqPXLwTIL44rWKhEPXgGPB2XDG0VLvIRKkAgEGI
|
||||
LNTwOm091Ro=
|
||||
-----END RSA PRIVATE KEY-----
|
||||
|
||||
-----BEGIN RSA PUBLIC KEY-----
|
||||
MIGHAoGBAOeIC9gRg3YaEGGMp3C00qNwLINAEDZV/J4BWM5WnWwCWZyHXDs2XiEmFu0ZONAD4gcT2f2f
|
||||
NNfCBPye39VVuOkKQuSV0MLLX5800LZ4y1BNcPzPZHpnGaCzl7iAjhfj9MolzAh5VRjeiYt0t1um4dm+
|
||||
q9A4BtfpJqDYxCW9uxd/AgEj
|
||||
-----END RSA PUBLIC KEY-----
|
||||
"
|
||||
::= { rlSslImportExportSelfKeyEntry 1 }
|
||||
|
||||
rlSslImportExportSelfKeyIndex OBJECT-TYPE
|
||||
SYNTAX INTEGER
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Identifies the SSL server key index (there can be more than one key)."
|
||||
::= { rlSslImportExportSelfKeyEntry 2 }
|
||||
|
||||
rlSslImportExportSelfKeyFragmentId OBJECT-TYPE
|
||||
SYNTAX INTEGER
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Identifies the index of this fragment in the key pair input/output."
|
||||
::= { rlSslImportExportSelfKeyEntry 3 }
|
||||
|
||||
rlSslImportExportSelfKeyAlgorithm OBJECT-TYPE
|
||||
SYNTAX RlSslPublicKeyAlgorithm
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Identifies the type of key pair."
|
||||
::= { rlSslImportExportSelfKeyEntry 4 }
|
||||
|
||||
rlSslImportExportSelfKeyFragmentText OBJECT-TYPE
|
||||
SYNTAX OCTET STRING
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"A part of the readable text entry for the key pair input/output."
|
||||
::= { rlSslImportExportSelfKeyEntry 5 }
|
||||
|
||||
|
||||
--
|
||||
--rlSslImportExportSelfKeyStatus OBJECT-TYPE
|
||||
-- SYNTAX RowStatus
|
||||
-- MAX-ACCESS read-write
|
||||
-- STATUS current
|
||||
-- DESCRIPTION
|
||||
-- ""
|
||||
-- ::= { rlSslImportExportSelfKeyEntry 6 }
|
||||
--
|
||||
|
||||
|
||||
rlSslCertificateSave2 OBJECT-TYPE
|
||||
SYNTAX INTEGER
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Saves data from rlSslCertificateImportTable to RAM and CDB. When
|
||||
an external certificate should be copied to the device first we copy
|
||||
it to rlSslCertificateImportTable and then this scalar is set to the
|
||||
certificate id that we want to save -
|
||||
1. All entries in rlSslCertificateImportTable that have this id and
|
||||
their format is equal to the current value of rlSslCertificateSaveFormat
|
||||
are concatenated.
|
||||
2. If the imported certificate format is .. - section 1 result
|
||||
is validated against the key with the same index. If validation fails
|
||||
for any reason - the certificate is not saved and the setting this
|
||||
scalar fails.]
|
||||
This scalar is for certificate 2 only... for certificate 1 use
|
||||
rlSslCertificateSave "
|
||||
::= { rlSsl 9 }
|
||||
|
||||
rlSslisCertificate1Default OBJECT-TYPE
|
||||
SYNTAX TruthValue
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"if set to true then this is the default key , will be configured
|
||||
when auto generation is done , will set to try , all other cases will
|
||||
be set to false.
|
||||
"
|
||||
::= { rlSsl 10 }
|
||||
|
||||
rlSslisCertificate2Default OBJECT-TYPE
|
||||
SYNTAX TruthValue
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"if set to true then this is the default key , will be configured
|
||||
when auto generation is done , will set to try , all other cases will
|
||||
be set to false.
|
||||
"
|
||||
::= { rlSsl 11 }
|
||||
|
||||
|
||||
-- MIB TABLE rlCaCertificateInstallEntry
|
||||
|
||||
RlCaCertificateInstallType ::= TEXTUAL-CONVENTION
|
||||
STATUS current
|
||||
DESCRIPTION "Ca Certificate type enumeration."
|
||||
SYNTAX INTEGER {
|
||||
signer(1),
|
||||
static(2),
|
||||
dynamic(3)
|
||||
}
|
||||
|
||||
RlCaCertificateDisplayNonValidReason ::= TEXTUAL-CONVENTION
|
||||
STATUS current
|
||||
DESCRIPTION "Ca Certificate NON valid reason enumeration."
|
||||
SYNTAX INTEGER {
|
||||
noReason(0),
|
||||
premature(1),
|
||||
expired(2),
|
||||
revoked(3),
|
||||
timeNotSet(4),
|
||||
unknown(5)
|
||||
}
|
||||
|
||||
rlCaCertificateInstallTable OBJECT-TYPE
|
||||
SYNTAX SEQUENCE OF RlCaCertificateInstallEntry
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This table is used for installing a CA certificate to the device"
|
||||
::= { rlSsl 12 }
|
||||
|
||||
rlCaCertificateInstallEntry OBJECT-TYPE
|
||||
SYNTAX RlCaCertificateInstallEntry
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
" The row definition for this table."
|
||||
INDEX { rlCaCertificateInstallType,
|
||||
rlCaCertificateInstallOwner,
|
||||
rlCaCertificateInstallName,
|
||||
rlCaCertificateInstallFragmentId}
|
||||
::= { rlCaCertificateInstallTable 1 }
|
||||
|
||||
RlCaCertificateInstallEntry ::= SEQUENCE {
|
||||
rlCaCertificateInstallType RlCaCertificateInstallType,
|
||||
rlCaCertificateInstallOwner DisplayString,
|
||||
rlCaCertificateInstallName DisplayString,
|
||||
rlCaCertificateInstallFragmentId INTEGER,
|
||||
rlCaCertificateInstallFragmentPEMText OCTET STRING,
|
||||
rlCaCertificateInstallFragmentStatus RowStatus,
|
||||
rlCaCertificateInstallIsLastFragment TruthValue
|
||||
}
|
||||
|
||||
rlCaCertificateInstallType OBJECT-TYPE
|
||||
SYNTAX RlCaCertificateInstallType
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Ca Certificate type"
|
||||
::= { rlCaCertificateInstallEntry 1 }
|
||||
|
||||
rlCaCertificateInstallOwner OBJECT-TYPE
|
||||
SYNTAX DisplayString
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The CA certificate Owner - application name."
|
||||
::= { rlCaCertificateInstallEntry 2 }
|
||||
|
||||
rlCaCertificateInstallName OBJECT-TYPE
|
||||
SYNTAX DisplayString
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The CA certificate Name."
|
||||
::= { rlCaCertificateInstallEntry 3 }
|
||||
|
||||
rlCaCertificateInstallFragmentId OBJECT-TYPE
|
||||
SYNTAX INTEGER
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Identifies the index of this fragment in the CA certificate."
|
||||
::= { rlCaCertificateInstallEntry 4 }
|
||||
|
||||
|
||||
rlCaCertificateInstallFragmentPEMText OBJECT-TYPE
|
||||
SYNTAX OCTET STRING
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"A part of the readable text entry for the CA certificate."
|
||||
::= { rlCaCertificateInstallEntry 5 }
|
||||
|
||||
|
||||
rlCaCertificateInstallFragmentStatus OBJECT-TYPE
|
||||
SYNTAX RowStatus
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
""
|
||||
::= { rlCaCertificateInstallEntry 6 }
|
||||
|
||||
rlCaCertificateInstallIsLastFragment OBJECT-TYPE
|
||||
SYNTAX TruthValue
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Has a true value in case of passing a last fragment"
|
||||
::= { rlCaCertificateInstallEntry 7 }
|
||||
|
||||
-- MIB TABLE rlCaCertificateDisplayEntry
|
||||
|
||||
rlCaCertificateDisplayTable OBJECT-TYPE
|
||||
SYNTAX SEQUENCE OF RlCaCertificateDisplayEntry
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This table is used for displaying a CA certificate to the device"
|
||||
::= { rlSsl 13 }
|
||||
|
||||
rlCaCertificateDisplayEntry OBJECT-TYPE
|
||||
SYNTAX RlCaCertificateDisplayEntry
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
" The row definition for this table."
|
||||
INDEX { rlCaCertificateDisplayType,
|
||||
rlCaCertificateDisplayOwner,
|
||||
rlCaCertificateDisplayName}
|
||||
::= { rlCaCertificateDisplayTable 1 }
|
||||
|
||||
RlCaCertificateDisplayEntry ::= SEQUENCE {
|
||||
rlCaCertificateDisplayType RlCaCertificateInstallType,
|
||||
rlCaCertificateDisplayOwner DisplayString,
|
||||
rlCaCertificateDisplayName DisplayString,
|
||||
rlCaCertificateDisplayVersion DisplayString,
|
||||
rlCaCertificateDisplaySerialNumber OCTET STRING,
|
||||
rlCaCertificateDisplayIssuerName DisplayString,
|
||||
rlCaCertificateDisplaySubjectName DisplayString,
|
||||
rlCaCertificateDisplayNotBefore DisplayString,
|
||||
rlCaCertificateDisplayNotAfter DisplayString,
|
||||
rlCaCertificateDisplayValid TruthValue,
|
||||
rlCaCertificateDisplayNonValidReason RlCaCertificateDisplayNonValidReason,
|
||||
rlCaCertificateDisplaySignatureAlgorithm DisplayString,
|
||||
rlCaCertificateDisplayPublicKeyAlgorithm DisplayString,
|
||||
rlCaCertificateDisplayFingerprintAlgorithm DisplayString,
|
||||
rlCaCertificateDisplayFingerprint OCTET STRING,
|
||||
rlCaCertificateDisplayPublicKeySize INTEGER
|
||||
}
|
||||
|
||||
rlCaCertificateDisplayType OBJECT-TYPE
|
||||
SYNTAX RlCaCertificateInstallType
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Ca Certificate type"
|
||||
::= { rlCaCertificateDisplayEntry 1 }
|
||||
|
||||
rlCaCertificateDisplayOwner OBJECT-TYPE
|
||||
SYNTAX DisplayString
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The CA certificate Owner - application name."
|
||||
::= { rlCaCertificateDisplayEntry 2 }
|
||||
|
||||
rlCaCertificateDisplayName OBJECT-TYPE
|
||||
SYNTAX DisplayString
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The CA certificate Name."
|
||||
::= { rlCaCertificateDisplayEntry 3 }
|
||||
|
||||
rlCaCertificateDisplayVersion OBJECT-TYPE
|
||||
SYNTAX DisplayString
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The CA certificate Version."
|
||||
::= { rlCaCertificateDisplayEntry 4 }
|
||||
|
||||
rlCaCertificateDisplaySerialNumber OBJECT-TYPE
|
||||
SYNTAX OCTET STRING
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The CA certificate Serial Number."
|
||||
::= { rlCaCertificateDisplayEntry 5 }
|
||||
|
||||
rlCaCertificateDisplayIssuerName OBJECT-TYPE
|
||||
SYNTAX DisplayString
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The CA certificate Issuer Name."
|
||||
::= { rlCaCertificateDisplayEntry 6 }
|
||||
|
||||
rlCaCertificateDisplaySubjectName OBJECT-TYPE
|
||||
SYNTAX DisplayString
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The CA certificate Subject Name."
|
||||
::= { rlCaCertificateDisplayEntry 7 }
|
||||
|
||||
rlCaCertificateDisplayNotBefore OBJECT-TYPE
|
||||
SYNTAX DisplayString
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The CA certificate Not before time."
|
||||
::= { rlCaCertificateDisplayEntry 8 }
|
||||
|
||||
rlCaCertificateDisplayNotAfter OBJECT-TYPE
|
||||
SYNTAX DisplayString
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The CA certificate Not after time."
|
||||
::= { rlCaCertificateDisplayEntry 9 }
|
||||
|
||||
rlCaCertificateDisplayValid OBJECT-TYPE
|
||||
SYNTAX TruthValue
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"true - Certificate is VALID, dates validity and not revoked
|
||||
false - Certificate is INVALID, dates validity is faled or revoked"
|
||||
DEFVAL { true }
|
||||
::= { rlCaCertificateDisplayEntry 10 }
|
||||
|
||||
rlCaCertificateDisplayNonValidReason OBJECT-TYPE
|
||||
SYNTAX RlCaCertificateDisplayNonValidReason
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Ca Certificate reason for non validity"
|
||||
::= { rlCaCertificateDisplayEntry 11 }
|
||||
|
||||
rlCaCertificateDisplaySignatureAlgorithm OBJECT-TYPE
|
||||
SYNTAX DisplayString
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The CA certificate Signature Algorithm."
|
||||
::= { rlCaCertificateDisplayEntry 12 }
|
||||
|
||||
rlCaCertificateDisplayPublicKeyAlgorithm OBJECT-TYPE
|
||||
SYNTAX DisplayString
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The CA certificate PublicKey Algorithm."
|
||||
::= { rlCaCertificateDisplayEntry 13 }
|
||||
|
||||
rlCaCertificateDisplayFingerprintAlgorithm OBJECT-TYPE
|
||||
SYNTAX DisplayString
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The CA certificate Fingerprint Algorithm."
|
||||
::= { rlCaCertificateDisplayEntry 14 }
|
||||
|
||||
rlCaCertificateDisplayFingerprint OBJECT-TYPE
|
||||
SYNTAX OCTET STRING
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The CA certificate Fingerprint."
|
||||
::= { rlCaCertificateDisplayEntry 15 }
|
||||
|
||||
rlCaCertificateDisplayPublicKeySize OBJECT-TYPE
|
||||
SYNTAX INTEGER
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The CA certificate PublicKey size."
|
||||
::= { rlCaCertificateDisplayEntry 16 }
|
||||
|
||||
|
||||
-- MIB TABLE rlCaCertificateRevocationEntry
|
||||
|
||||
rlCaCertificateRevocationTable OBJECT-TYPE
|
||||
SYNTAX SEQUENCE OF RlCaCertificateRevocationEntry
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This table is used for revocation a CA certificate to the device"
|
||||
::= { rlSsl 14 }
|
||||
|
||||
rlCaCertificateRevocationEntry OBJECT-TYPE
|
||||
SYNTAX RlCaCertificateRevocationEntry
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
" The row definition for this table."
|
||||
INDEX { rlCaCertificateRevocationIssuerName,
|
||||
rlCaCertificateRevocationSerialNumber}
|
||||
::= { rlCaCertificateRevocationTable 1 }
|
||||
|
||||
RlCaCertificateRevocationEntry ::= SEQUENCE {
|
||||
rlCaCertificateRevocationIssuerName DisplayString,
|
||||
rlCaCertificateRevocationSerialNumber OCTET STRING,
|
||||
rlCaCertificateRevocationRowStatus RowStatus
|
||||
}
|
||||
|
||||
rlCaCertificateRevocationIssuerName OBJECT-TYPE
|
||||
SYNTAX DisplayString
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Ca Certificate Issuer Name"
|
||||
::= { rlCaCertificateRevocationEntry 1 }
|
||||
|
||||
rlCaCertificateRevocationSerialNumber OBJECT-TYPE
|
||||
SYNTAX OCTET STRING (SIZE(1..20))
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"The CA certificate Serial Number."
|
||||
::= { rlCaCertificateRevocationEntry 2 }
|
||||
|
||||
rlCaCertificateRevocationRowStatus OBJECT-TYPE
|
||||
SYNTAX RowStatus
|
||||
MAX-ACCESS read-write
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
""
|
||||
::= { rlCaCertificateRevocationEntry 3 }
|
||||
|
||||
-- MIB TABLE rlCaCertificateDisplayExtEntry
|
||||
|
||||
RlCaCertificateDisplayExtType ::= TEXTUAL-CONVENTION
|
||||
STATUS current
|
||||
DESCRIPTION "CA Certificate property type enumeration."
|
||||
SYNTAX INTEGER {
|
||||
publicKey(0),
|
||||
signature(1)
|
||||
}
|
||||
|
||||
rlCaCertificateDisplayExtTable OBJECT-TYPE
|
||||
SYNTAX SEQUENCE OF RlCaCertificateDisplayExtEntry
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"This table is used for displaying certain information of a CA certificate"
|
||||
::= { rlSsl 15 }
|
||||
|
||||
rlCaCertificateDisplayExtEntry OBJECT-TYPE
|
||||
SYNTAX RlCaCertificateDisplayExtEntry
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
" The row definition for this table."
|
||||
INDEX { rlCaCertificateDisplayType,
|
||||
rlCaCertificateDisplayOwner,
|
||||
rlCaCertificateDisplayName,
|
||||
rlCaCetrificateDisplayExtType,
|
||||
rlCaCertificateDisplayExtFragmentId}
|
||||
::= { rlCaCertificateDisplayExtTable 1 }
|
||||
|
||||
RlCaCertificateDisplayExtEntry ::= SEQUENCE {
|
||||
rlCaCetrificateDisplayExtType RlCaCertificateDisplayExtType,
|
||||
rlCaCertificateDisplayExtFragmentId INTEGER,
|
||||
rlCaCertificateDisplayExtFragmentData OCTET STRING
|
||||
}
|
||||
|
||||
rlCaCetrificateDisplayExtType OBJECT-TYPE
|
||||
SYNTAX RlCaCertificateDisplayExtType
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"CA Certificate property type"
|
||||
::= { rlCaCertificateDisplayExtEntry 1 }
|
||||
|
||||
rlCaCertificateDisplayExtFragmentId OBJECT-TYPE
|
||||
SYNTAX INTEGER
|
||||
MAX-ACCESS not-accessible
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"Identifies the index of this fragment in the CA certificate property."
|
||||
::= { rlCaCertificateDisplayExtEntry 2 }
|
||||
|
||||
rlCaCertificateDisplayExtFragmentData OBJECT-TYPE
|
||||
SYNTAX OCTET STRING
|
||||
MAX-ACCESS read-only
|
||||
STATUS current
|
||||
DESCRIPTION
|
||||
"A fragment of the property to display from a CA certificate."
|
||||
::= { rlCaCertificateDisplayExtEntry 3 }
|
||||
|
||||
END
|
||||
|
||||
Reference in New Issue
Block a user