MIBs Depot

CISCOSB-SSL

Registered at
1.3.6.1.4.1.9.6.1.101.100
Last updated
2003-09-21 00:00
Organization
Cisco Systems, Inc.
Revisions
2003-09-21 00:00
Namespace
cisco
Source file
CISCOSB-SSL
Digest
sha256:8ef20cc6bf869312affc897824f364de0af483713d9577dc10f77d1d86cac3de

Description

The private MIB module definition for SSL.

Contact

Postal: 170 West Tasman Drive San Jose , CA 95134-1706 USA Website: Cisco Small Business Support Community <http://www.cisco.com/go/smallbizsupport>

Imports

FromSymbols
CISCOSB-MIBswitch001
SNMPv2-CONFMODULE-COMPLIANCE, NOTIFICATION-GROUP
SNMPv2-SMIIpAddress, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, Unsigned32, iso
SNMPv2-TCDisplayString, RowStatus, TEXTUAL-CONVENTION, TruthValue

Imported by

Nothing in this corpus imports this module.

Load order

Every file a consumer needs in order to load this module, dependencies first.

CISCOSB-MIB
CISCOSB-SSL
SNMPv2-CONF
SNMPv2-SMI
SNMPv2-TC

Textual conventions

NameOIDSyntaxAccessStatus
RlCaCertificateDisplayExtType
TEXTUAL-CONVENTION
CA Certificate property type enumeration.
current
RlCaCertificateDisplayNonValidReason
TEXTUAL-CONVENTION
Ca Certificate NON valid reason enumeration.
current
RlCaCertificateInstallType
TEXTUAL-CONVENTION
Ca Certificate type enumeration.
current
RlSslPublicKeyAlgorithm
TEXTUAL-CONVENTION
This textual convention describes the various possible public key algorithms. The key algorithm is used to select the PK to be generated and is also used when viewing the public keys.
current

Objects

NameOIDSyntaxAccessStatus
rlSslCertificateGenerationTable
OBJECT-TYPE
This table is used for : 1. generating keys and self signed certificate - saved in flash and RAM (not in configuration file) 2. generating certificate requests - saved in RAM, can be read by rlSslCertificateExportTable 3. generating self signed certificate - saved in flash and RAM (not in configuraion file) By setting rlSslCertificateGenerationAction to the appropriate value this action takes place. The other fields of this table are used for each of this actions
1.3.6.1.4.1.9.6.1.101.100.1not-accessiblecurrent
rlSslCertificateGenerationEntry
OBJECT-TYPE
The row definition for this table.
1.3.6.1.4.1.9.6.1.101.100.1.1not-accessiblecurrent
rlSslCertificateGenerationIndex
OBJECT-TYPE
This index is always set to 1 no matter for which certificate or certificate request the action refers to.
1.3.6.1.4.1.9.6.1.101.100.1.1.1INTEGERread-writecurrent
rlSslCertificateGenerationId
OBJECT-TYPE
The device can hold a number of keys/certificates/certificate requests. These certificates are always numbered from 1 to N (maximum number of certificates in device). This field decides to which keys/certificates/certificate requests the action refers.
1.3.6.1.4.1.9.6.1.101.100.1.1.2INTEGERread-writecurrent
rlSslCertificateGenerationCountryName
OBJECT-TYPE
Value of country name field that will appear when a new certificate request or self signed certificate is generated.
1.3.6.1.4.1.9.6.1.101.100.1.1.3DisplayString (SIZE(2))read-writecurrent
rlSslCertificateGenerationStateOrProvinceName
OBJECT-TYPE
Value of state or province name field that will appear when a new certificate or self signed certificate is generated.
1.3.6.1.4.1.9.6.1.101.100.1.1.4DisplayString (SIZE(1..64))read-writecurrent
rlSslCertificateGenerationLocalityName
OBJECT-TYPE
Value of locality field that will appear when a new certificate or self signed certificate is generated.
1.3.6.1.4.1.9.6.1.101.100.1.1.5DisplayString (SIZE(1..64))read-writecurrent
rlSslCertificateGenerationOrganizationName
OBJECT-TYPE
Value of organization field that will appear when a new certificate or self signed certificate is generated.
1.3.6.1.4.1.9.6.1.101.100.1.1.6DisplayString (SIZE(1..64))read-writecurrent
rlSslCertificateGenerationOrganizationUnitName
OBJECT-TYPE
Value of organization field that will appear when a new certificate or self signed certificate is generated.
1.3.6.1.4.1.9.6.1.101.100.1.1.7DisplayString (SIZE(1..64))read-writecurrent
rlSslCertificateGenerationCommonName
OBJECT-TYPE
Value of common name field that will appear when a new certificate or self signed certificate is generated.
1.3.6.1.4.1.9.6.1.101.100.1.1.8DisplayString (SIZE(1..64))read-writecurrent
rlSslCertificateGenerationValidDays
OBJECT-TYPE
When generating self signed certificate this field sets the valid fields. 'Valid from' is current GMT and 'valid to' current GMT + the value of this field.
1.3.6.1.4.1.9.6.1.101.100.1.1.9INTEGERread-writecurrent
rlSslCertificateGenerationRsaKeyLength
OBJECT-TYPE
Setting the RSA key size that will be created when a new key is generated - generateRsaKeyAndSelfSignedCertificate
1.3.6.1.4.1.9.6.1.101.100.1.1.10INTEGER (512..3072)read-writecurrent
rlSslCertificateGenerationPassphrase
OBJECT-TYPE
When a RSA key is generated (generateRsaKeyAndSelfSignedCertificate) this passphrase is saved in flash and when the time comes and the certificate and the key are exported in PKCS12 format this passphrase is used to encrypt it. If the passphrase is empty the key and certificate can not be exported. There is no method of obtaining this passphrase once a key was generated.
1.3.6.1.4.1.9.6.1.101.100.1.1.11DisplayStringread-writecurrent
rlSslCertificateGenerationAction
OBJECT-TYPE
Setting to a regenerateCertificate causes a new certificate to be generated and to be used for all new sessions.
1.3.6.1.4.1.9.6.1.101.100.1.1.12INTEGER {generateRsaKeyAndSelfSignedCertificate(1), generateSelfSignedCertificate(2), generatePkcs12(3), generateCertificateRequest(4), generateEcKeyAndSelfSignedCertificate(5)}read-writecurrent
rlSslCertificateGenerationEcKeyCurve
OBJECT-TYPE
Setting the EC key curve that will be created when a new key is generated - generateEcKeyAndSelfSignedCertificate
1.3.6.1.4.1.9.6.1.101.100.1.1.13INTEGER (1..1000)read-writecurrent
rlSslCertificateExportTable
OBJECT-TYPE
This table is used for viewing saved data from RAM and flash.
1.3.6.1.4.1.9.6.1.101.100.2not-accessiblecurrent
rlSslCertificateExportEntry
OBJECT-TYPE
The row definition for this table.
1.3.6.1.4.1.9.6.1.101.100.2.1not-accessiblecurrent
rlSslCertificateExportId
OBJECT-TYPE
Identifies the index of this certficate / certificate request the table holds.
1.3.6.1.4.1.9.6.1.101.100.2.1.1INTEGERread-onlycurrent
rlSslCertificateExportType
OBJECT-TYPE
Identifies the type of data the current entry shows.
1.3.6.1.4.1.9.6.1.101.100.2.1.2INTEGER {certificateRequestPemFormat(1), certificatePemFormat(2), certificateOpenSslFormat(3), certificateAndKeyPkcs12(4)}read-onlycurrent
rlSslCertificateExportFragmentId
OBJECT-TYPE
Identifies the index of this fragment in the CA certificate.
1.3.6.1.4.1.9.6.1.101.100.2.1.3INTEGERread-onlycurrent
rlSslCertificateExportFragmentText
OBJECT-TYPE
A part of the readable text entry for the certificate request.
1.3.6.1.4.1.9.6.1.101.100.2.1.4OCTET STRINGread-onlycurrent
rlSslCertificateSave
OBJECT-TYPE
Saves data from rlSslCertificateImportTable to RAM and CDB. When an external certificate should be copied to the device first we copy it to rlSslCertificateImportTable and then this scalar is set to the certificate id that we want to save - 1. All entries in rlSslCertificateImportTable that have this id and their format is equal to the current value of rlSslCertificateSaveFormat are concatenated. 2. If the imported certificate format is .. - section 1 result is validated against the key with the same index. If validation fails for any reason - the certificate is not saved and the setting this scalar fails.] This scalar is for certificate 1 only... for certificate 2 use rlSslCertificateSave2
1.3.6.1.4.1.9.6.1.101.100.3INTEGERread-writecurrent
rlSslCertificateSaveFormat
OBJECT-TYPE
.
1.3.6.1.4.1.9.6.1.101.100.4INTEGER {x509(1), pkcs12(2)}read-writecurrent
rlSslImportedPKCS12CertificatePassphrase
OBJECT-TYPE
.
1.3.6.1.4.1.9.6.1.101.100.5DisplayString (SIZE(8..96))read-writecurrent
rlSslCertificateImportTable
OBJECT-TYPE
This table is used for copying an external certificate to the device - see rlSslCertificateSave
1.3.6.1.4.1.9.6.1.101.100.6not-accessiblecurrent
rlSslCertificateImportEntry
OBJECT-TYPE
The row definition for this table.
1.3.6.1.4.1.9.6.1.101.100.6.1not-accessiblecurrent
rlSslCertificateImportId
OBJECT-TYPE
The certificate ID.
1.3.6.1.4.1.9.6.1.101.100.6.1.1INTEGERread-writecurrent
rlSslCertificateImportFormat
OBJECT-TYPE
.
1.3.6.1.4.1.9.6.1.101.100.6.1.2INTEGER {x509(1), pkcs12(2)}read-writecurrent
rlSslCertificateImportFragmentId
OBJECT-TYPE
Identifies the index of this fragment in the certificate.
1.3.6.1.4.1.9.6.1.101.100.6.1.3INTEGERread-writecurrent
rlSslCertificateImportFragmentText
OBJECT-TYPE
A part of the readable text entry for the certificate.
1.3.6.1.4.1.9.6.1.101.100.6.1.4OCTET STRINGread-writecurrent
rlSslCertificateImportFragmentStatus
OBJECT-TYPE
1.3.6.1.4.1.9.6.1.101.100.6.1.5RowStatusread-writecurrent
rlSslSSLv2Enable
OBJECT-TYPE
if enabled then SSLv2 will be supported , if disabled SSLv2 won't be supported. only SSLV3 and TSL1. Note: disabling SSLv2 is more secure.
1.3.6.1.4.1.9.6.1.101.100.7INTEGER {enabled(1), disabled(2)}read-writecurrent
rlSslImportExportSelfKeyTable
OBJECT-TYPE
This table can be used for 2 purposes: 1) Importing public/private key pair to serve as the device key when acting as SSL server. This is done by setting entries to this table, according to the specified format. When the last entry (footer) is set, the whole key pair is checked and if valid, stored in CDB. 2) Exporting the device SSL server public/private key. This can be done by performing GetNext operations on this table.
1.3.6.1.4.1.9.6.1.101.100.8not-accessiblecurrent
rlSslImportExportSelfKeyEntry
OBJECT-TYPE
The row definition for this table.
1.3.6.1.4.1.9.6.1.101.100.8.1not-accessiblecurrent
rlSslImportExportSelfKeyFormat
OBJECT-TYPE
Specifies the format of public/key pair. The following formats are supported for import/export: 1) uuencoded_format - in this format both private and public key are in uu-encoded format, and are seperated from one another by header and footer. An example of the concateneation of all fragments in this format is: -----BEGIN RSA PRIVATE KEY----- tDaNkZZoCxXfkLLsLDlZ6T9H8U4Gz637eRV7BYBpapkidAxY1UG0/qgfKLPkbId4wzht6ArV9bE4fMtX wSMOxL3q31pOmUdVhjbWYcgZQBDy1DjFSbuIEdP85c96B9bBE2nPv90mSvb/6j8R2NItT/KJeiYMtLtI N3m6/zESKJGIrX0jP1RFDjVZSS5chSAFgB0egsLZEyOQn7jAqpX/x/easD2J6F/OjPXlJ9Hff2tMb3NU QYyBoWH2J9IxhWB6Vo66R9Y04JGR18uL/rV2sMCtpg5ppkVTEpNTp9qE1yXocR2NmzUfNFap+GJ4IHj8 CzkVfmJM/kEWaJsYgHbAgLyRg4QVyelfobv1B71aQ+u1z9KGu/QajkWdR04OQfsGOL1CvU2LGYDcRjfH jv+jl/UkDRRjoD9kt2WvouT+OL6esvKl0OJBqWbGNXg9TWv/VLtJIwgUno+MLaJuOM4Fh44+wpnqUXwQ TFtBFc8pzt5BoOwbv9gXpicTkq4/+GhwXWXxSVFebKhnHAvKSLT+Ba7K7ZeR8EIIxbXdDNFOiS45R2KI jxxXLXK44u6KGl5MygCKXUOFlJ+Zhgrq6ZH17z/RVJQ2CWqb5Ekn9GY3kH9QZ3mb4MDPfriWi2lHGXHY JmJd4SLQhpBdnOS5tu84QmyU3dNbAdzghDsR+dEY/6g7Cn0kcVkeHNZ0H+mCZik5f6XBD8eplkk43bdR FrkwTeAjwurGcKwdiKkR4DlfSq3DKssVBucTqUpqsKqPXLwTIL44rWKhEPXgGPB2XDG0VLvIRKkAgEGI LNTwOm091Ro= -----END RSA PRIVATE KEY----- -----BEGIN RSA PUBLIC KEY----- MIGHAoGBAOeIC9gRg3YaEGGMp3C00qNwLINAEDZV/J4BWM5WnWwCWZyHXDs2XiEmFu0ZONAD4gcT2f2f NNfCBPye39VVuOkKQuSV0MLLX5800LZ4y1BNcPzPZHpnGaCzl7iAjhfj9MolzAh5VRjeiYt0t1um4dm+ q9A4BtfpJqDYxCW9uxd/AgEj -----END RSA PUBLIC KEY-----
1.3.6.1.4.1.9.6.1.101.100.8.1.1INTEGER {uuencoded-format(1)}not-accessiblecurrent
rlSslImportExportSelfKeyIndex
OBJECT-TYPE
Identifies the SSL server key index (there can be more than one key).
1.3.6.1.4.1.9.6.1.101.100.8.1.2INTEGERnot-accessiblecurrent
rlSslImportExportSelfKeyFragmentId
OBJECT-TYPE
Identifies the index of this fragment in the key pair input/output.
1.3.6.1.4.1.9.6.1.101.100.8.1.3INTEGERnot-accessiblecurrent
rlSslImportExportSelfKeyAlgorithm
OBJECT-TYPE
Identifies the type of key pair.
1.3.6.1.4.1.9.6.1.101.100.8.1.4RlSslPublicKeyAlgorithmread-writecurrent
rlSslImportExportSelfKeyFragmentText
OBJECT-TYPE
A part of the readable text entry for the key pair input/output.
1.3.6.1.4.1.9.6.1.101.100.8.1.5OCTET STRINGread-writecurrent
rlSslCertificateSave2
OBJECT-TYPE
Saves data from rlSslCertificateImportTable to RAM and CDB. When an external certificate should be copied to the device first we copy it to rlSslCertificateImportTable and then this scalar is set to the certificate id that we want to save - 1. All entries in rlSslCertificateImportTable that have this id and their format is equal to the current value of rlSslCertificateSaveFormat are concatenated. 2. If the imported certificate format is .. - section 1 result is validated against the key with the same index. If validation fails for any reason - the certificate is not saved and the setting this scalar fails.] This scalar is for certificate 2 only... for certificate 1 use rlSslCertificateSave
1.3.6.1.4.1.9.6.1.101.100.9INTEGERread-writecurrent
rlSslisCertificate1Default
OBJECT-TYPE
if set to true then this is the default key , will be configured when auto generation is done , will set to try , all other cases will be set to false.
1.3.6.1.4.1.9.6.1.101.100.10TruthValueread-writecurrent
rlSslisCertificate2Default
OBJECT-TYPE
if set to true then this is the default key , will be configured when auto generation is done , will set to try , all other cases will be set to false.
1.3.6.1.4.1.9.6.1.101.100.11TruthValueread-writecurrent
rlCaCertificateInstallTable
OBJECT-TYPE
This table is used for installing a CA certificate to the device
1.3.6.1.4.1.9.6.1.101.100.12not-accessiblecurrent
rlCaCertificateInstallEntry
OBJECT-TYPE
The row definition for this table.
1.3.6.1.4.1.9.6.1.101.100.12.1not-accessiblecurrent
rlCaCertificateInstallType
OBJECT-TYPE
Ca Certificate type
1.3.6.1.4.1.9.6.1.101.100.12.1.1RlCaCertificateInstallTyperead-writecurrent
rlCaCertificateInstallOwner
OBJECT-TYPE
The CA certificate Owner - application name.
1.3.6.1.4.1.9.6.1.101.100.12.1.2DisplayStringread-writecurrent
rlCaCertificateInstallName
OBJECT-TYPE
The CA certificate Name.
1.3.6.1.4.1.9.6.1.101.100.12.1.3DisplayStringread-writecurrent
rlCaCertificateInstallFragmentId
OBJECT-TYPE
Identifies the index of this fragment in the CA certificate.
1.3.6.1.4.1.9.6.1.101.100.12.1.4INTEGERread-writecurrent
rlCaCertificateInstallFragmentPEMText
OBJECT-TYPE
A part of the readable text entry for the CA certificate.
1.3.6.1.4.1.9.6.1.101.100.12.1.5OCTET STRINGread-writecurrent
rlCaCertificateInstallFragmentStatus
OBJECT-TYPE
1.3.6.1.4.1.9.6.1.101.100.12.1.6RowStatusread-writecurrent
rlCaCertificateInstallIsLastFragment
OBJECT-TYPE
Has a true value in case of passing a last fragment
1.3.6.1.4.1.9.6.1.101.100.12.1.7TruthValueread-writecurrent
rlCaCertificateDisplayTable
OBJECT-TYPE
This table is used for displaying a CA certificate to the device
1.3.6.1.4.1.9.6.1.101.100.13not-accessiblecurrent
rlCaCertificateDisplayEntry
OBJECT-TYPE
The row definition for this table.
1.3.6.1.4.1.9.6.1.101.100.13.1not-accessiblecurrent
rlCaCertificateDisplayType
OBJECT-TYPE
Ca Certificate type
1.3.6.1.4.1.9.6.1.101.100.13.1.1RlCaCertificateInstallTypenot-accessiblecurrent
rlCaCertificateDisplayOwner
OBJECT-TYPE
The CA certificate Owner - application name.
1.3.6.1.4.1.9.6.1.101.100.13.1.2DisplayStringnot-accessiblecurrent
rlCaCertificateDisplayName
OBJECT-TYPE
The CA certificate Name.
1.3.6.1.4.1.9.6.1.101.100.13.1.3DisplayStringnot-accessiblecurrent
rlCaCertificateDisplayVersion
OBJECT-TYPE
The CA certificate Version.
1.3.6.1.4.1.9.6.1.101.100.13.1.4DisplayStringread-onlycurrent
rlCaCertificateDisplaySerialNumber
OBJECT-TYPE
The CA certificate Serial Number.
1.3.6.1.4.1.9.6.1.101.100.13.1.5OCTET STRINGread-onlycurrent
rlCaCertificateDisplayIssuerName
OBJECT-TYPE
The CA certificate Issuer Name.
1.3.6.1.4.1.9.6.1.101.100.13.1.6DisplayStringread-onlycurrent
rlCaCertificateDisplaySubjectName
OBJECT-TYPE
The CA certificate Subject Name.
1.3.6.1.4.1.9.6.1.101.100.13.1.7DisplayStringread-onlycurrent
rlCaCertificateDisplayNotBefore
OBJECT-TYPE
The CA certificate Not before time.
1.3.6.1.4.1.9.6.1.101.100.13.1.8DisplayStringread-onlycurrent
rlCaCertificateDisplayNotAfter
OBJECT-TYPE
The CA certificate Not after time.
1.3.6.1.4.1.9.6.1.101.100.13.1.9DisplayStringread-onlycurrent
rlCaCertificateDisplayValid
OBJECT-TYPE
true - Certificate is VALID, dates validity and not revoked false - Certificate is INVALID, dates validity is faled or revoked
1.3.6.1.4.1.9.6.1.101.100.13.1.10TruthValueread-onlycurrent
rlCaCertificateDisplayNonValidReason
OBJECT-TYPE
Ca Certificate reason for non validity
1.3.6.1.4.1.9.6.1.101.100.13.1.11RlCaCertificateDisplayNonValidReasonread-onlycurrent
rlCaCertificateDisplaySignatureAlgorithm
OBJECT-TYPE
The CA certificate Signature Algorithm.
1.3.6.1.4.1.9.6.1.101.100.13.1.12DisplayStringread-onlycurrent
rlCaCertificateDisplayPublicKeyAlgorithm
OBJECT-TYPE
The CA certificate PublicKey Algorithm.
1.3.6.1.4.1.9.6.1.101.100.13.1.13DisplayStringread-onlycurrent
rlCaCertificateDisplayFingerprintAlgorithm
OBJECT-TYPE
The CA certificate Fingerprint Algorithm.
1.3.6.1.4.1.9.6.1.101.100.13.1.14DisplayStringread-onlycurrent
rlCaCertificateDisplayFingerprint
OBJECT-TYPE
The CA certificate Fingerprint.
1.3.6.1.4.1.9.6.1.101.100.13.1.15OCTET STRINGread-onlycurrent
rlCaCertificateDisplayPublicKeySize
OBJECT-TYPE
The CA certificate PublicKey size.
1.3.6.1.4.1.9.6.1.101.100.13.1.16INTEGERread-onlycurrent
rlCaCertificateRevocationTable
OBJECT-TYPE
This table is used for revocation a CA certificate to the device
1.3.6.1.4.1.9.6.1.101.100.14not-accessiblecurrent
rlCaCertificateRevocationEntry
OBJECT-TYPE
The row definition for this table.
1.3.6.1.4.1.9.6.1.101.100.14.1not-accessiblecurrent
rlCaCertificateRevocationIssuerName
OBJECT-TYPE
Ca Certificate Issuer Name
1.3.6.1.4.1.9.6.1.101.100.14.1.1DisplayStringread-writecurrent
rlCaCertificateRevocationSerialNumber
OBJECT-TYPE
The CA certificate Serial Number.
1.3.6.1.4.1.9.6.1.101.100.14.1.2OCTET STRING (SIZE(1..20))read-writecurrent
rlCaCertificateRevocationRowStatus
OBJECT-TYPE
1.3.6.1.4.1.9.6.1.101.100.14.1.3RowStatusread-writecurrent
rlCaCertificateDisplayExtTable
OBJECT-TYPE
This table is used for displaying certain information of a CA certificate
1.3.6.1.4.1.9.6.1.101.100.15not-accessiblecurrent
rlCaCertificateDisplayExtEntry
OBJECT-TYPE
The row definition for this table.
1.3.6.1.4.1.9.6.1.101.100.15.1not-accessiblecurrent
rlCaCetrificateDisplayExtType
OBJECT-TYPE
CA Certificate property type
1.3.6.1.4.1.9.6.1.101.100.15.1.1RlCaCertificateDisplayExtTypenot-accessiblecurrent
rlCaCertificateDisplayExtFragmentId
OBJECT-TYPE
Identifies the index of this fragment in the CA certificate property.
1.3.6.1.4.1.9.6.1.101.100.15.1.2INTEGERnot-accessiblecurrent
rlCaCertificateDisplayExtFragmentData
OBJECT-TYPE
A fragment of the property to display from a CA certificate.
1.3.6.1.4.1.9.6.1.101.100.15.1.3OCTET STRINGread-onlycurrent