CISCOSB-SSL

File: CISCOSB-SSL.mib (19985 bytes)

Imported modules

CISCOSB-MIB SNMPv2-SMI SNMPv2-TC

Imported symbols

switch001 Unsigned32 IpAddress
MODULE-IDENTITY OBJECT-TYPE TruthValue
RowStatus DisplayString TEXTUAL-CONVENTION

Defined Types

RlSslCertificateGenerationEntry  
SEQUENCE    
  rlSslCertificateGenerationIndex INTEGER
  rlSslCertificateGenerationId INTEGER
  rlSslCertificateGenerationCountryName DisplayString
  rlSslCertificateGenerationStateOrProvinceName DisplayString
  rlSslCertificateGenerationLocalityName DisplayString
  rlSslCertificateGenerationOrganizationName DisplayString
  rlSslCertificateGenerationOrganizationUnitName DisplayString
  rlSslCertificateGenerationCommonName DisplayString
  rlSslCertificateGenerationValidDays INTEGER
  rlSslCertificateGenerationRsaKeyLength INTEGER
  rlSslCertificateGenerationPassphrase DisplayString
  rlSslCertificateGenerationAction INTEGER

RlSslCertificateExportEntry  
SEQUENCE    
  rlSslCertificateExportId INTEGER
  rlSslCertificateExportType INTEGER
  rlSslCertificateExportFragmentId INTEGER
  rlSslCertificateExportFragmentText OCTET STRING

RlSslCertificateImportEntry  
SEQUENCE    
  rlSslCertificateImportId INTEGER
  rlSslCertificateImportFormat INTEGER
  rlSslCertificateImportFragmentId INTEGER
  rlSslCertificateImportFragmentText OCTET STRING
  rlSslCertificateImportFragmentStatus RowStatus

RlSslPublicKeyAlgorithm  
This textual convention describes the various possible public key algorithms. The key algorithm is used to select the PK to be generated and is also used when viewing the public keys.
TEXTUAL-CONVENTION    
  INTEGER rsa(1), dsa(2)  

RlSslImportExportSelfKeyEntry  
SEQUENCE    
  rlSslImportExportSelfKeyFormat INTEGER
  rlSslImportExportSelfKeyIndex INTEGER
  rlSslImportExportSelfKeyFragmentId INTEGER
  rlSslImportExportSelfKeyAlgorithm RlSslPublicKeyAlgorithm
  rlSslImportExportSelfKeyFragmentText OCTET STRING

Defined Values

rlSsl 1.3.6.1.4.1.9.6.1.101.100
The private MIB module definition for SSL.
MODULE-IDENTITY    

rlSslCertificateGenerationTable 1.3.6.1.4.1.9.6.1.101.100.1
This table is used for : 1. generating keys and self signed certificate - saved in flash and RAM (not in configuration file) 2. generating certificate requests - saved in RAM, can be read by rlSslCertificateExportTable 3. generating self signed certificate - saved in flash and RAM (not in configuraion file) By setting rlSslCertificateGenerationAction to the appropriate value this action takes place. The other fields of this table are used for each of this actions
OBJECT-TYPE    
  SEQUENCE OF  
    RlSslCertificateGenerationEntry

rlSslCertificateGenerationEntry 1.3.6.1.4.1.9.6.1.101.100.1.1
The row definition for this table.
OBJECT-TYPE    
  RlSslCertificateGenerationEntry  

rlSslCertificateGenerationIndex 1.3.6.1.4.1.9.6.1.101.100.1.1.1
This index is always set to 1 no matter for which certificate or certificate request the action refers to.
OBJECT-TYPE    
  INTEGER  

rlSslCertificateGenerationId 1.3.6.1.4.1.9.6.1.101.100.1.1.2
The device can hold a number of keys/certificates/certificate requests. These certificates are always numbered from 1 to N (maximum number of certificates in device). This field decides to which keys/certificates/certificate requests the action refers.
OBJECT-TYPE    
  INTEGER  

rlSslCertificateGenerationCountryName 1.3.6.1.4.1.9.6.1.101.100.1.1.3
Value of country name field that will appear when a new certificate request or self signed certificate is generated.
OBJECT-TYPE    
  DisplayString Size(2)  

rlSslCertificateGenerationStateOrProvinceName 1.3.6.1.4.1.9.6.1.101.100.1.1.4
Value of state or province name field that will appear when a new certificate or self signed certificate is generated.
OBJECT-TYPE    
  DisplayString Size(1..64)  

rlSslCertificateGenerationLocalityName 1.3.6.1.4.1.9.6.1.101.100.1.1.5
Value of locality field that will appear when a new certificate or self signed certificate is generated.
OBJECT-TYPE    
  DisplayString Size(1..64)  

rlSslCertificateGenerationOrganizationName 1.3.6.1.4.1.9.6.1.101.100.1.1.6
Value of organization field that will appear when a new certificate or self signed certificate is generated.
OBJECT-TYPE    
  DisplayString Size(1..64)  

rlSslCertificateGenerationOrganizationUnitName 1.3.6.1.4.1.9.6.1.101.100.1.1.7
Value of organization field that will appear when a new certificate or self signed certificate is generated.
OBJECT-TYPE    
  DisplayString Size(1..64)  

rlSslCertificateGenerationCommonName 1.3.6.1.4.1.9.6.1.101.100.1.1.8
Value of common name field that will appear when a new certificate or self signed certificate is generated.
OBJECT-TYPE    
  DisplayString Size(1..64)  

rlSslCertificateGenerationValidDays 1.3.6.1.4.1.9.6.1.101.100.1.1.9
When generating self signed certificate this field sets the valid fields. 'Valid from' is current GMT and 'valid to' current GMT + the value of this field.
OBJECT-TYPE    
  INTEGER  

rlSslCertificateGenerationRsaKeyLength 1.3.6.1.4.1.9.6.1.101.100.1.1.10
Setting the RSA key size that will be created when a new key is generated - generateRsaKeyAndSelfSignedCertificate
OBJECT-TYPE    
  INTEGER 512..2048  

rlSslCertificateGenerationPassphrase 1.3.6.1.4.1.9.6.1.101.100.1.1.11
When a RSA key is generated (generateRsaKeyAndSelfSignedCertificate) this passphrase is saved in flash and when the time comes and the certificate and the key are exported in PKCS12 format this passphrase is used to encrypt it. If the passphrase is empty the key and certificate can not be exported. There is no method of obtaining this passphrase once a key was generated.
OBJECT-TYPE    
  DisplayString  

rlSslCertificateGenerationAction 1.3.6.1.4.1.9.6.1.101.100.1.1.12
Setting to a regenerateCertificate causes a new certificate to be generated and to be used for all new sessions.
OBJECT-TYPE    
  INTEGER generateRsaKeyAndSelfSignedCertificate(1), generateSelfSignedCertificate(2), generatePkcs12(3), generateCertificateRequest(4)  

rlSslCertificateExportTable 1.3.6.1.4.1.9.6.1.101.100.2
This table is used for viewing saved data from RAM and flash.
OBJECT-TYPE    
  SEQUENCE OF  
    RlSslCertificateExportEntry

rlSslCertificateExportEntry 1.3.6.1.4.1.9.6.1.101.100.2.1
The row definition for this table.
OBJECT-TYPE    
  RlSslCertificateExportEntry  

rlSslCertificateExportId 1.3.6.1.4.1.9.6.1.101.100.2.1.1
Identifies the index of this certficate / certificate request the table holds.
OBJECT-TYPE    
  INTEGER  

rlSslCertificateExportType 1.3.6.1.4.1.9.6.1.101.100.2.1.2
Identifies the type of data the current entry shows.
OBJECT-TYPE    
  INTEGER certificateRequestPemFormat(1), certificatePemFormat(2), certificateOpenSslFormat(3), certificateAndKeyPkcs12(4)  

rlSslCertificateExportFragmentId 1.3.6.1.4.1.9.6.1.101.100.2.1.3
Identifies the index of this fragment in the certificate request.
OBJECT-TYPE    
  INTEGER  

rlSslCertificateExportFragmentText 1.3.6.1.4.1.9.6.1.101.100.2.1.4
A part of the readable text entry for the certificate request.
OBJECT-TYPE    
  OCTET STRING  

rlSslCertificateSave 1.3.6.1.4.1.9.6.1.101.100.3
Saves data from rlSslCertificateImportTable to RAM and CDB. When an external certificate should be copied to the device first we copy it to rlSslCertificateImportTable and then this scalar is set to the certificate id that we want to save - 1. All entries in rlSslCertificateImportTable that have this id and their format is equal to the current value of rlSslCertificateSaveFormat are concatenated. 2. If the imported certificate format is .. - section 1 result is validated against the key with the same index. If validation fails for any reason - the certificate is not saved and the setting this scalar fails.] This scalar is for certificate 1 only... for certificate 2 use rlSslCertificateSave2
OBJECT-TYPE    
  INTEGER  

rlSslCertificateSaveFormat 1.3.6.1.4.1.9.6.1.101.100.4
.
OBJECT-TYPE    
  INTEGER x509(1), pkcs12(2)  

rlSslImportedPKCS12CertificatePassphrase 1.3.6.1.4.1.9.6.1.101.100.5
.
OBJECT-TYPE    
  DisplayString Size(8..96)  

rlSslCertificateImportTable 1.3.6.1.4.1.9.6.1.101.100.6
This table is used for copying an external certificate to the device - see rlSslCertificateSave
OBJECT-TYPE    
  SEQUENCE OF  
    RlSslCertificateImportEntry

rlSslCertificateImportEntry 1.3.6.1.4.1.9.6.1.101.100.6.1
The row definition for this table.
OBJECT-TYPE    
  RlSslCertificateImportEntry  

rlSslCertificateImportId 1.3.6.1.4.1.9.6.1.101.100.6.1.1
The certificate ID.
OBJECT-TYPE    
  INTEGER  

rlSslCertificateImportFormat 1.3.6.1.4.1.9.6.1.101.100.6.1.2
.
OBJECT-TYPE    
  INTEGER x509(1), pkcs12(2)  

rlSslCertificateImportFragmentId 1.3.6.1.4.1.9.6.1.101.100.6.1.3
Identifies the index of this fragment in the certificate.
OBJECT-TYPE    
  INTEGER  

rlSslCertificateImportFragmentText 1.3.6.1.4.1.9.6.1.101.100.6.1.4
A part of the readable text entry for the certificate.
OBJECT-TYPE    
  OCTET STRING  

rlSslCertificateImportFragmentStatus 1.3.6.1.4.1.9.6.1.101.100.6.1.5
Tok_String
OBJECT-TYPE    
  RowStatus  

rlSslSSLv2Enable 1.3.6.1.4.1.9.6.1.101.100.7
if enabled then SSLv2 will be supported , if disabled SSLv2 won't be supported. only SSLV3 and TSL1. Note: disabling SSLv2 is more secure.
OBJECT-TYPE    
  INTEGER enabled(1), disabled(2)  

rlSslImportExportSelfKeyTable 1.3.6.1.4.1.9.6.1.101.100.8
This table can be used for 2 purposes: 1) Importing public/private key pair to serve as the device key when acting as SSL server. This is done by setting entries to this table, according to the specified format. When the last entry (footer) is set, the whole key pair is checked and if valid, stored in CDB. 2) Exporting the device SSL server public/private key. This can be done by performing GetNext operations on this table.
OBJECT-TYPE    
  SEQUENCE OF  
    RlSslImportExportSelfKeyEntry

rlSslImportExportSelfKeyEntry 1.3.6.1.4.1.9.6.1.101.100.8.1
The row definition for this table.
OBJECT-TYPE    
  RlSslImportExportSelfKeyEntry  

rlSslImportExportSelfKeyFormat 1.3.6.1.4.1.9.6.1.101.100.8.1.1
Specifies the format of public/key pair. The following formats are supported for import/export: 1) uuencoded_format - in this format both private and public key are in uu-encoded format, and are seperated from one another by header and footer. An example of the concateneation of all fragments in this format is: -----BEGIN RSA PRIVATE KEY----- tDaNkZZoCxXfkLLsLDlZ6T9H8U4Gz637eRV7BYBpapkidAxY1UG0/qgfKLPkbId4wzht6ArV9bE4fMtX wSMOxL3q31pOmUdVhjbWYcgZQBDy1DjFSbuIEdP85c96B9bBE2nPv90mSvb/6j8R2NItT/KJeiYMtLtI N3m6/zESKJGIrX0jP1RFDjVZSS5chSAFgB0egsLZEyOQn7jAqpX/x/easD2J6F/OjPXlJ9Hff2tMb3NU QYyBoWH2J9IxhWB6Vo66R9Y04JGR18uL/rV2sMCtpg5ppkVTEpNTp9qE1yXocR2NmzUfNFap+GJ4IHj8 CzkVfmJM/kEWaJsYgHbAgLyRg4QVyelfobv1B71aQ+u1z9KGu/QajkWdR04OQfsGOL1CvU2LGYDcRjfH jv+jl/UkDRRjoD9kt2WvouT+OL6esvKl0OJBqWbGNXg9TWv/VLtJIwgUno+MLaJuOM4Fh44+wpnqUXwQ TFtBFc8pzt5BoOwbv9gXpicTkq4/+GhwXWXxSVFebKhnHAvKSLT+Ba7K7ZeR8EIIxbXdDNFOiS45R2KI jxxXLXK44u6KGl5MygCKXUOFlJ+Zhgrq6ZH17z/RVJQ2CWqb5Ekn9GY3kH9QZ3mb4MDPfriWi2lHGXHY JmJd4SLQhpBdnOS5tu84QmyU3dNbAdzghDsR+dEY/6g7Cn0kcVkeHNZ0H+mCZik5f6XBD8eplkk43bdR FrkwTeAjwurGcKwdiKkR4DlfSq3DKssVBucTqUpqsKqPXLwTIL44rWKhEPXgGPB2XDG0VLvIRKkAgEGI LNTwOm091Ro= -----END RSA PRIVATE KEY----- -----BEGIN RSA PUBLIC KEY----- MIGHAoGBAOeIC9gRg3YaEGGMp3C00qNwLINAEDZV/J4BWM5WnWwCWZyHXDs2XiEmFu0ZONAD4gcT2f2f NNfCBPye39VVuOkKQuSV0MLLX5800LZ4y1BNcPzPZHpnGaCzl7iAjhfj9MolzAh5VRjeiYt0t1um4dm+ q9A4BtfpJqDYxCW9uxd/AgEj -----END RSA PUBLIC KEY-----
OBJECT-TYPE    
  INTEGER uuencoded-format(1)  

rlSslImportExportSelfKeyIndex 1.3.6.1.4.1.9.6.1.101.100.8.1.2
Identifies the SSL server key index (there can be more than one key).
OBJECT-TYPE    
  INTEGER  

rlSslImportExportSelfKeyFragmentId 1.3.6.1.4.1.9.6.1.101.100.8.1.3
Identifies the index of this fragment in the key pair input/output.
OBJECT-TYPE    
  INTEGER  

rlSslImportExportSelfKeyAlgorithm 1.3.6.1.4.1.9.6.1.101.100.8.1.4
Identifies the type of key pair.
OBJECT-TYPE    
  RlSslPublicKeyAlgorithm  

rlSslImportExportSelfKeyFragmentText 1.3.6.1.4.1.9.6.1.101.100.8.1.5
A part of the readable text entry for the key pair input/output.
OBJECT-TYPE    
  OCTET STRING  

rlSslCertificateSave2 1.3.6.1.4.1.9.6.1.101.100.9
Saves data from rlSslCertificateImportTable to RAM and CDB. When an external certificate should be copied to the device first we copy it to rlSslCertificateImportTable and then this scalar is set to the certificate id that we want to save - 1. All entries in rlSslCertificateImportTable that have this id and their format is equal to the current value of rlSslCertificateSaveFormat are concatenated. 2. If the imported certificate format is .. - section 1 result is validated against the key with the same index. If validation fails for any reason - the certificate is not saved and the setting this scalar fails.] This scalar is for certificate 2 only... for certificate 1 use rlSslCertificateSave
OBJECT-TYPE    
  INTEGER  

rlSslisCertificate1Default 1.3.6.1.4.1.9.6.1.101.100.10
if set to true then this is the default key , will be configured when auto generation is done , will set to try , all other cases will be set to false.
OBJECT-TYPE    
  TruthValue  

rlSslisCertificate2Default 1.3.6.1.4.1.9.6.1.101.100.11
if set to true then this is the default key , will be configured when auto generation is done , will set to try , all other cases will be set to false.
OBJECT-TYPE    
  TruthValue