HPE-SSL Table View

This table is used for :
1. generating keys and self signed certificate - saved in flash and RAM
(not in configuration file)
2. generating certificate requests - saved in RAM, can be read by
rlSslCertificateExportTable
3. generating self signed certificate - saved in flash and RAM (not in
configuraion file)
By setting rlSslCertificateGenerationAction to the appropriate
value this action takes place. The other fields of this table are used for
each of this actions

rlSslCertificateGenerationEntry row .1.3.6.1.4.1.11.2.100.1.1

The row definition for this table.

Indexes

rlSslCertificateGenerationIndex

Column	Syntax	OID
rlSslCertificateGenerationIndex This index is always set to 1 no matter for which certificate or certificate request the action refers to.	Integer32r/w Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.11.2.100.1.1.1
rlSslCertificateGenerationId The device can hold a number of keys/certificates/certificate requests. These certificates are always numbered from 1 to N (maximum number of certificates in device). This field decides to which keys/certificates/certif…	Integer32r/w Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.11.2.100.1.1.2
rlSslCertificateGenerationCountryName Value of country name field that will appear when a new certificate request or self signed certificate is generated.	OctetStringr/w Constraints: range: 2-2	.1.3.6.1.4.1.11.2.100.1.1.3
rlSslCertificateGenerationStateOrProvinceName Value of state or province name field that will appear when a new certificate or self signed certificate is generated.	OctetStringr/w Constraints: range: 1-64	.1.3.6.1.4.1.11.2.100.1.1.4
rlSslCertificateGenerationLocalityName Value of locality field that will appear when a new certificate or self signed certificate is generated.	OctetStringr/w Constraints: range: 1-64	.1.3.6.1.4.1.11.2.100.1.1.5
rlSslCertificateGenerationOrganizationName Value of organization field that will appear when a new certificate or self signed certificate is generated.	OctetStringr/w Constraints: range: 1-64	.1.3.6.1.4.1.11.2.100.1.1.6
rlSslCertificateGenerationOrganizationUnitName Value of organization field that will appear when a new certificate or self signed certificate is generated.	OctetStringr/w Constraints: range: 1-64	.1.3.6.1.4.1.11.2.100.1.1.7
rlSslCertificateGenerationCommonName Value of common name field that will appear when a new certificate or self signed certificate is generated.	OctetStringr/w Constraints: range: 1-64	.1.3.6.1.4.1.11.2.100.1.1.8
rlSslCertificateGenerationValidDays When generating self signed certificate this field sets the valid fields. 'Valid from' is current GMT and 'valid to' current GMT + the value of this field.	Integer32r/w Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.11.2.100.1.1.9
rlSslCertificateGenerationRsaKeyLength Setting the RSA key size that will be created when a new key is generated - generateRsaKeyAndSelfSignedCertificate	Integer32r/w Constraints: range: 512-3072	.1.3.6.1.4.1.11.2.100.1.1.10
rlSslCertificateGenerationPassphrase When a RSA key is generated (generateRsaKeyAndSelfSignedCertificate) this passphrase is saved in flash and when the time comes and the certificate and the key are exported in PKCS12 format this passphrase is used to enc…	SNMPv2-TCDisplayStringr/w Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.11.2.100.1.1.11
rlSslCertificateGenerationAction Setting to a regenerateCertificate causes a new certificate to be generated and to be used for all new sessions.	Enumerationr/w Enumerated Values: 1 generateRsaKeyAndSelfSignedCertificate 2 generateSelfSignedCertificate 3 generatePkcs12 4 generateCertificateRequest 5 generateEcKeyAndSelfSignedCertificate	.1.3.6.1.4.1.11.2.100.1.1.12
rlSslCertificateGenerationEcKeyCurve Setting the EC key curve that will be created when a new key is generated - generateEcKeyAndSelfSignedCertificate	Integer32r/w Constraints: range: 1-1000	.1.3.6.1.4.1.11.2.100.1.1.13

This table is used for viewing saved data from RAM and flash.

rlSslCertificateExportEntry row .1.3.6.1.4.1.11.2.100.2.1

The row definition for this table.

Indexes

rlSslCertificateExportId rlSslCertificateExportType rlSslCertificateExportFragmentId

Column	Syntax	OID
rlSslCertificateExportId Identifies the index of this certficate / certificate request the table holds.	Integer32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.11.2.100.2.1.1
rlSslCertificateExportType Identifies the type of data the current entry shows.	Enumeration Enumerated Values: 1 certificateRequestPemFormat 2 certificatePemFormat 3 certificateOpenSslFormat 4 certificateAndKeyPkcs12	.1.3.6.1.4.1.11.2.100.2.1.2
rlSslCertificateExportFragmentId Identifies the index of this fragment in the CA certificate.	Integer32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.11.2.100.2.1.3
rlSslCertificateExportFragmentText A part of the readable text entry for the certificate request.	OctetString	.1.3.6.1.4.1.11.2.100.2.1.4

This table is used for copying an external certificate to the device -
see rlSslCertificateSave

rlSslCertificateImportEntry row .1.3.6.1.4.1.11.2.100.6.1

The row definition for this table.

Indexes

rlSslCertificateImportId rlSslCertificateImportFormat rlSslCertificateImportFragmentId

Column	Syntax	OID
rlSslCertificateImportId The certificate ID.	Integer32r/w Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.11.2.100.6.1.1
rlSslCertificateImportFormat .	Enumerationr/w Enumerated Values: 1 x509 2 pkcs12	.1.3.6.1.4.1.11.2.100.6.1.2
rlSslCertificateImportFragmentId Identifies the index of this fragment in the certificate.	Integer32r/w Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.11.2.100.6.1.3
rlSslCertificateImportFragmentText A part of the readable text entry for the certificate.	OctetStringr/w	.1.3.6.1.4.1.11.2.100.6.1.4
rlSslCertificateImportFragmentStatus	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.11.2.100.6.1.5

This table can be used for 2 purposes:
1) Importing public/private key pair to serve as the device key when acting
as SSL server. This is done by setting entries to this table, according to
the specified format. When the last entry (footer) is set, the whole key
pair is checked and if valid, stored in CDB.
2) Exporting the device SSL server public/private key. This can be done by
performing GetNext operations on this table.

rlSslImportExportSelfKeyEntry row .1.3.6.1.4.1.11.2.100.8.1

The row definition for this table.

Indexes

rlSslImportExportSelfKeyFormat rlSslImportExportSelfKeyIndex rlSslImportExportSelfKeyFragmentId

Column	Syntax	OID
rlSslImportExportSelfKeyFormat Specifies the format of public/key pair. The following formats are supported for import/export: 1) uuencoded_format - in this format both private and public key are in uu-encoded format, and are seperated from one anoth…	Enumeration Enumerated Values: 1 uuencoded-format	.1.3.6.1.4.1.11.2.100.8.1.1
rlSslImportExportSelfKeyIndex Identifies the SSL server key index (there can be more than one key).	Integer32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.11.2.100.8.1.2
rlSslImportExportSelfKeyFragmentId Identifies the index of this fragment in the key pair input/output.	Integer32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.11.2.100.8.1.3
rlSslImportExportSelfKeyAlgorithm Identifies the type of key pair.	RlSslPublicKeyAlgorithmr/w Type Values: 1 rsa 2 dsa 3 ec 4 ecdsa	.1.3.6.1.4.1.11.2.100.8.1.4
rlSslImportExportSelfKeyFragmentText A part of the readable text entry for the key pair input/output.	OctetStringr/w	.1.3.6.1.4.1.11.2.100.8.1.5

This table is used for installing a CA certificate to the device

rlCaCertificateInstallEntry row .1.3.6.1.4.1.11.2.100.12.1

The row definition for this table.

Indexes

rlCaCertificateInstallType rlCaCertificateInstallOwner rlCaCertificateInstallName rlCaCertificateInstallFragmentId

Column	Syntax	OID
rlCaCertificateInstallType Ca Certificate type	RlCaCertificateInstallTyper/w Type Values: 1 signer 2 static 3 dynamic	.1.3.6.1.4.1.11.2.100.12.1.1
rlCaCertificateInstallOwner The CA certificate Owner - application name.	SNMPv2-TCDisplayStringr/w Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.11.2.100.12.1.2
rlCaCertificateInstallName The CA certificate Name.	SNMPv2-TCDisplayStringr/w Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.11.2.100.12.1.3
rlCaCertificateInstallFragmentId Identifies the index of this fragment in the CA certificate.	Integer32r/w Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.11.2.100.12.1.4
rlCaCertificateInstallFragmentPEMText A part of the readable text entry for the CA certificate.	OctetStringr/w	.1.3.6.1.4.1.11.2.100.12.1.5
rlCaCertificateInstallFragmentStatus	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.11.2.100.12.1.6
rlCaCertificateInstallIsLastFragment Has a true value in case of passing a last fragment	SNMPv2-TCTruthValuer/w Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.11.2.100.12.1.7

This table is used for displaying a CA certificate to the device

rlCaCertificateDisplayEntry row .1.3.6.1.4.1.11.2.100.13.1

The row definition for this table.

Indexes

rlCaCertificateDisplayType rlCaCertificateDisplayOwner rlCaCertificateDisplayName

Column	Syntax	OID
rlCaCertificateDisplayType Ca Certificate type	RlCaCertificateInstallType Type Values: 1 signer 2 static 3 dynamic	.1.3.6.1.4.1.11.2.100.13.1.1
rlCaCertificateDisplayOwner The CA certificate Owner - application name.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.11.2.100.13.1.2
rlCaCertificateDisplayName The CA certificate Name.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.11.2.100.13.1.3
rlCaCertificateDisplayVersion The CA certificate Version.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.11.2.100.13.1.4
rlCaCertificateDisplaySerialNumber The CA certificate Serial Number.	OctetString	.1.3.6.1.4.1.11.2.100.13.1.5
rlCaCertificateDisplayIssuerName The CA certificate Issuer Name.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.11.2.100.13.1.6
rlCaCertificateDisplaySubjectName The CA certificate Subject Name.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.11.2.100.13.1.7
rlCaCertificateDisplayNotBefore The CA certificate Not before time.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.11.2.100.13.1.8
rlCaCertificateDisplayNotAfter The CA certificate Not after time.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.11.2.100.13.1.9
rlCaCertificateDisplayValid true - Certificate is VALID, dates validity and not revoked false - Certificate is INVALID, dates validity is faled or revoked	SNMPv2-TCTruthValue Type Values: 1 true 2 false Description: Represents a boolean value.	.1.3.6.1.4.1.11.2.100.13.1.10
rlCaCertificateDisplayNonValidReason Ca Certificate reason for non validity	RlCaCertificateDisplayNonValidReason Type Values: 0 noReason 1 premature 2 expired 3 revoked 4 timeNotSet 5 unknown	.1.3.6.1.4.1.11.2.100.13.1.11
rlCaCertificateDisplaySignatureAlgorithm The CA certificate Signature Algorithm.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.11.2.100.13.1.12
rlCaCertificateDisplayPublicKeyAlgorithm The CA certificate PublicKey Algorithm.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.11.2.100.13.1.13
rlCaCertificateDisplayFingerprintAlgorithm The CA certificate Fingerprint Algorithm.	SNMPv2-TCDisplayString Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.11.2.100.13.1.14
rlCaCertificateDisplayFingerprint The CA certificate Fingerprint.	OctetString	.1.3.6.1.4.1.11.2.100.13.1.15
rlCaCertificateDisplayPublicKeySize The CA certificate PublicKey size.	Integer32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.11.2.100.13.1.16

This table is used for revocation a CA certificate to the device

rlCaCertificateRevocationEntry row .1.3.6.1.4.1.11.2.100.14.1

The row definition for this table.

Indexes

rlCaCertificateRevocationIssuerName rlCaCertificateRevocationSerialNumber

Column	Syntax	OID
rlCaCertificateRevocationIssuerName Ca Certificate Issuer Name	SNMPv2-TCDisplayStringr/w Type Constraints: range: 0..255 Description: Represents textual information taken from the NVT ASCII character set, as defined in pages 4, 10-11 of RFC 854. To summarize RFC 854, the NVT ASCII repertoire specifies: - the use of c…	.1.3.6.1.4.1.11.2.100.14.1.1
rlCaCertificateRevocationSerialNumber The CA certificate Serial Number.	OctetStringr/w Constraints: range: 1-20	.1.3.6.1.4.1.11.2.100.14.1.2
rlCaCertificateRevocationRowStatus	SNMPv2-TCRowStatusr/w Type Values: 1 active 2 notInService 3 notReady 4 createAndGo 5 createAndWait 6 destroy Description: The RowStatus textual convention is used to manage the creation and deletion of conceptual rows, and is used as the value of the SYNTAX clause for the status column of a conceptual row (as described in Section 7.7.1 of …	.1.3.6.1.4.1.11.2.100.14.1.3

This table is used for displaying certain information of a CA certificate

rlCaCertificateDisplayExtEntry row .1.3.6.1.4.1.11.2.100.15.1

The row definition for this table.

Indexes

rlCaCertificateDisplayType rlCaCertificateDisplayOwner rlCaCertificateDisplayName rlCaCetrificateDisplayExtType rlCaCertificateDisplayExtFragmentId

Column	Syntax	OID
rlCaCetrificateDisplayExtType CA Certificate property type	RlCaCertificateDisplayExtType Type Values: 0 publicKey 1 signature	.1.3.6.1.4.1.11.2.100.15.1.1
rlCaCertificateDisplayExtFragmentId Identifies the index of this fragment in the CA certificate property.	Integer32 Type Constraints: range: -2147483648..2147483647	.1.3.6.1.4.1.11.2.100.15.1.2
rlCaCertificateDisplayExtFragmentData A fragment of the property to display from a CA certificate.	OctetString	.1.3.6.1.4.1.11.2.100.15.1.3