ltmServerSslDropUntrustCa
F5-BIGIP-LOCAL-MIB ·
.1.3.6.1.4.1.3375.2.2.6.3.1.2.1.29
Object
column
Enumeration
Whether to drop or ignore or mask connection when server certificate has invalid CA.
Context
- MIB
- F5-BIGIP-LOCAL-MIB
- OID
.1.3.6.1.4.1.3375.2.2.6.3.1.2.1.29- Type
- column
- Access
- readonly
- Status
- current
- Parent
- ltmServerSslEntry
- Table
- ltmServerSslTable
- Siblings
- 46
Syntax
Enumeration
Values & Constraints
Enumerated Values
0 | ignore |
1 | drop |
2 | mask |
Related Objects
Sibling Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| ltmServerSslName The name of a server-side SSL profile. | column | F5-BIGIP-COMMON-MIBLongDisplayString | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.1 |
| ltmServerSslCiphers The set of ciphers available for server-side SSL negotiation. | column | F5-BIGIP-COMMON-MIBLongDisplayString | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.10 |
| ltmServerSslPassphrase deprecated Deprecated! No longer supported.
The key passphrase (if any). | column | F5-BIGIP-COMMON-MIBLongDisplayString | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.11 |
| ltmServerSslOptions The SSL options.
SSLOPT_MICROSOFT_SESS_ID_BUG = 1
SSLOPT_NETSCAPE_CHALLENGE_BUG = 2
SSLOPT_NETSCAPE_REUSE_CIPHER_CHANGE_BUG = 8
SSLOPT_SSLREF2_REUSE_CE… | column | RFC1155-SMIGauge | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.12 |
| ltmServerSslModsslmethods The status of using ModSSL method emulation. | column | Enumeration | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.13 |
| ltmServerSslRenegotiatePeriod Time-based trigger. | column | RFC1155-SMIGauge | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.14 |
| ltmServerSslRenegotiateSize Throughput-based trigger MB. | column | RFC1155-SMIGauge | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.15 |
| ltmServerSslPeerCertMode The mode of peer certification. | column | Enumeration | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.16 |
| ltmServerSslAuthenticateOnce The feature to request server cert with each SSL session
renegotiation. | column | Enumeration | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.17 |
| ltmServerSslAuthenticateDepth The max traversal depth for client certificate chain. | column | RFC1155-SMIGauge | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.18 |
| ltmServerSslAuthenticateName The expected server certificate DN(Domain Name). | column | F5-BIGIP-COMMON-MIBLongDisplayString | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.19 |
| ltmServerSslConfigSource The state that specifies whether this is a base/pre-configured profile
or user defined profile. | column | Enumeration | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.2 |
| ltmServerSslUncleanShutdown The state of shutdown for this SSL, whether it is unclean
shutdown (not sending a close notification alert when closing
connection.). | column | Enumeration | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.20 |
| ltmServerSslStrictResume The feature whether to enforce strict SSL session resumption
per RFC2246 | column | Enumeration | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.21 |
| ltmServerSslHandshakeTimeout The handshake timeout in seconds. | column | RFC1155-SMIGauge | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.22 |
| ltmServerSslAlertTimeout The alert timeout in seconds. | column | RFC1155-SMIGauge | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.23 |
| ltmServerSslCacheSize The SSL session cache size. | column | RFC1155-SMIGauge | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.24 |
| ltmServerSslCacheTimeout The SSL session cache timeout. | column | RFC1155-SMIGauge | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.25 |
| ltmServerSslSessionTicket Whether to enforce session ticket per RFC5077. | column | Enumeration | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.26 |
| ltmServerSslFwdpEnabled Whether to enable SSL Forward Proxy. | column | Enumeration | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.27 |
| ltmServerSslDropExpCert Whether to drop or ignore or mask connection when server certificate is expired. | column | Enumeration | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.28 |
| ltmServerSslDefaultName The name of the profile from which the specified profile derives
its attribute default values. | column | F5-BIGIP-COMMON-MIBLongDisplayString | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.3 |
| ltmServerSslGenericAlert Whether to use generic alert number in Alert message. | column | Enumeration | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.30 |
| ltmServerSslSslSignHash The ssl sign hash algorithm. | column | Enumeration | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.31 |
| ltmServerSslFwdpBypassEnabled Whether to enable SSL Forward Proxy Bypass. | column | Enumeration | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.32 |
| ltmServerSslProxySsl Whether to enable Proxy SSL. | column | Enumeration | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.33 |
| ltmServerSslProxySslPassthrough Whether to enable Proxy SSL passthrough. | column | Enumeration | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.34 |
| ltmServerSslSessionMirroring Whether to mirror ssl sessions to HA peer. | column | Enumeration | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.35 |
| ltmServerSslAllowExpiredCrl Whether to ignore a CRLs expiration. | column | Enumeration | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.36 |
| ltmServerSslMaxActiveHandshake Maximum number of allowed SSL active handshakes. | column | RFC1155-SMIGauge | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.37 |
| ltmServerSslBypassHsAlertEnabled Whether to enable forward-proxy bypass on handshake alert | column | Enumeration | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.38 |
| ltmServerSslBypassClientCertFailEnabled Whether to enable forward-proxy bypass on failed client cert | column | Enumeration | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.39 |
| ltmServerSslMode The status of this profile. | column | Enumeration | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.4 |
| ltmServerSslCentityOcspObjName The name of OCSP profile used to enable OCSP stapling and validation of server certificate status. | column | F5-BIGIP-COMMON-MIBLongDisplayString | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.40 |
| ltmServerSslC3dEnabled Whether to enable SSL Client Certificate Constrained Delegation. | column | Enumeration | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.41 |
| ltmServerSslC3dCaKey The CA key object name for Client Certificate Constrained Delegation. | column | F5-BIGIP-COMMON-MIBLongDisplayString | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.42 |
| ltmServerSslC3dCaCert The CA certificate object name for Client Certificate Constrained Delegation. | column | F5-BIGIP-COMMON-MIBLongDisplayString | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.43 |
| ltmServerSslC3dCaPassphrase deprecated Deprecated! No longer supported.
The CA key passphrase for Client Certificate Constrained Delegation (if any). | column | F5-BIGIP-COMMON-MIBLongDisplayString | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.44 |
| ltmServerSslC3dCertLifespan The lifespan of the generated certificates for Client Certificate Constrained Delegation. | column | RFC1155-SMIGauge | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.45 |
| ltmServerSslC3dCertExtensionIncludes The certificate extensions to include in generated certificates for
Client Certificate Constrained Delegation.
SSL_C3D_CERT_EXT_BASIC_CONSTRAINTS = 2
SSL_C3D_CERT_EXT_… | column | RFC1155-SMIGauge | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.46 |
| ltmServerSslData0rttMode Specifies if TLSv1.3 should send 0-RTT early data when available. | column | Enumeration | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.47 |
| ltmServerSslKey The key file name. | column | F5-BIGIP-COMMON-MIBLongDisplayString | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.5 |
| ltmServerSslCert The certificate file name. | column | F5-BIGIP-COMMON-MIBLongDisplayString | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.6 |
| ltmServerSslChain The certificate chain file name. | column | F5-BIGIP-COMMON-MIBLongDisplayString | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.7 |
| ltmServerSslCafile The CA certificate file name. | column | F5-BIGIP-COMMON-MIBLongDisplayString | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.8 |
| ltmServerSslCrlfile The CRL file name. | column | F5-BIGIP-COMMON-MIBLongDisplayString | .1.3.6.1.4.1.3375.2.2.6.3.1.2.1.9 |