path: root/MIBS/cisco/CISCOSB-SSL

CISCOSB-SSL DEFINITIONS ::= BEGIN

-- Title:      CISCOSB Ssl Private Extension
-- Version:    7.35
-- Date:       20 Jan 2004

IMPORTS
    switch001                                   FROM CISCOSB-MIB
    Unsigned32, IpAddress,
    MODULE-IDENTITY, OBJECT-TYPE                FROM SNMPv2-SMI
    TruthValue, RowStatus, DisplayString,
    TEXTUAL-CONVENTION                          FROM SNMPv2-TC;

rlSsl MODULE-IDENTITY
        LAST-UPDATED "200309210001Z"
        ORGANIZATION "Cisco Systems, Inc."

        CONTACT-INFO
        "Postal: 170 West Tasman Drive
        San Jose , CA 95134-1706
        USA

        
        Website:  Cisco Small Business Support Community <http://www.cisco.com/go/smallbizsupport>"

        DESCRIPTION
                "The private MIB module definition for SSL."
        REVISION "200309210000Z"
        DESCRIPTION
                "Added this MODULE-IDENTITY clause."
        ::= { switch001 100 }

rlSslCertificateGenerationTable OBJECT-TYPE
   SYNTAX SEQUENCE OF RlSslCertificateGenerationEntry
   MAX-ACCESS     not-accessible
   STATUS     current
   DESCRIPTION
    "This table is used for :
    1. generating keys and self signed certificate - saved in flash and RAM
    (not in configuration file)
    2. generating certificate requests - saved in RAM, can be read by
    rlSslCertificateExportTable
    3. generating self signed certificate - saved in flash and RAM (not in
    configuraion file)
    By setting rlSslCertificateGenerationAction to the appropriate
    value this action takes place. The other fields of this table are used for
    each of this actions"
    ::= { rlSsl 1 }

rlSslCertificateGenerationEntry  OBJECT-TYPE
   SYNTAX RlSslCertificateGenerationEntry
   MAX-ACCESS   not-accessible
   STATUS       current
   DESCRIPTION
       " The row definition for this table."
   INDEX {  rlSslCertificateGenerationIndex }
   ::= { rlSslCertificateGenerationTable 1 }

RlSslCertificateGenerationEntry ::= SEQUENCE {
  rlSslCertificateGenerationIndex                   INTEGER,
  rlSslCertificateGenerationId                      INTEGER,
  rlSslCertificateGenerationCountryName             DisplayString,
  rlSslCertificateGenerationStateOrProvinceName     DisplayString,
  rlSslCertificateGenerationLocalityName            DisplayString,
  rlSslCertificateGenerationOrganizationName        DisplayString,
  rlSslCertificateGenerationOrganizationUnitName    DisplayString,
  rlSslCertificateGenerationCommonName              DisplayString,
  rlSslCertificateGenerationValidDays               INTEGER,
  rlSslCertificateGenerationRsaKeyLength            INTEGER,
  rlSslCertificateGenerationPassphrase              DisplayString,
  rlSslCertificateGenerationAction                  INTEGER,
  rlSslCertificateGenerationEcKeyCurve	            INTEGER
}

rlSslCertificateGenerationIndex   OBJECT-TYPE
   SYNTAX INTEGER
   MAX-ACCESS   read-write
   STATUS current
   DESCRIPTION
    "This index is always set to 1 no matter for which certificate or
    certificate request the action refers to."
     ::=  { rlSslCertificateGenerationEntry  1 }

rlSslCertificateGenerationId   OBJECT-TYPE
   SYNTAX INTEGER
   MAX-ACCESS   read-write
   STATUS current
   DESCRIPTION
    "The device can hold a number of keys/certificates/certificate requests.
    These certificates are always numbered from 1 to N (maximum number of
    certificates in device). This field decides to which
    keys/certificates/certificate requests the action refers."
     ::=  { rlSslCertificateGenerationEntry  2 }


rlSslCertificateGenerationCountryName OBJECT-TYPE
    SYNTAX  DisplayString (SIZE(2))
    MAX-ACCESS  read-write
    STATUS  current
    DESCRIPTION
        "Value of country name field that will appear when a new certificate
        request or self signed certificate is generated."
    ::= { rlSslCertificateGenerationEntry   3 }

rlSslCertificateGenerationStateOrProvinceName OBJECT-TYPE
    SYNTAX  DisplayString (SIZE(1..64))
    MAX-ACCESS  read-write
    STATUS  current
    DESCRIPTION
        "Value of state or province name field that will appear when a new
        certificate or self signed certificate is generated."
    ::= { rlSslCertificateGenerationEntry   4 }


rlSslCertificateGenerationLocalityName OBJECT-TYPE
    SYNTAX  DisplayString (SIZE(1..64))
    MAX-ACCESS  read-write
    STATUS  current
    DESCRIPTION
        "Value of locality field that will appear when a new certificate or
        self signed certificate is generated."
    ::= { rlSslCertificateGenerationEntry   5 }


rlSslCertificateGenerationOrganizationName OBJECT-TYPE
    SYNTAX  DisplayString (SIZE(1..64))
    MAX-ACCESS  read-write
    STATUS  current
    DESCRIPTION
        "Value of organization field that will appear when a new certificate or
        self signed certificate is generated."
    ::= { rlSslCertificateGenerationEntry   6 }

rlSslCertificateGenerationOrganizationUnitName OBJECT-TYPE
    SYNTAX  DisplayString (SIZE(1..64))
    MAX-ACCESS  read-write
    STATUS  current
    DESCRIPTION
        "Value of organization field that will appear when a new certificate or
        self signed certificate is generated."
    ::= { rlSslCertificateGenerationEntry   7 }

rlSslCertificateGenerationCommonName OBJECT-TYPE
    SYNTAX  DisplayString (SIZE(1..64))
    MAX-ACCESS  read-write
    STATUS  current
    DESCRIPTION
        "Value of common name field that will appear when a new certificate or
        self signed certificate is generated."
    ::= { rlSslCertificateGenerationEntry   8 }

rlSslCertificateGenerationValidDays OBJECT-TYPE
    SYNTAX      INTEGER
    MAX-ACCESS      read-write
    STATUS      current
    DESCRIPTION
        "When generating self signed certificate this field sets the valid fields.
        'Valid from' is current GMT and 'valid to' current GMT + the value of
        this field."
    ::= { rlSslCertificateGenerationEntry   9 }

rlSslCertificateGenerationRsaKeyLength OBJECT-TYPE
    SYNTAX  INTEGER (512..3072)
    MAX-ACCESS      read-write
    STATUS      current
    DESCRIPTION
        "Setting the RSA key size that will be created when a new key is generated -
         generateRsaKeyAndSelfSignedCertificate"
    ::= { rlSslCertificateGenerationEntry   10 }

rlSslCertificateGenerationPassphrase OBJECT-TYPE
    SYNTAX      DisplayString
    MAX-ACCESS  read-write
    STATUS      current
    DESCRIPTION
        "When a RSA key is generated (generateRsaKeyAndSelfSignedCertificate)
        this passphrase is saved in flash and when the time comes and the
        certificate and the key are exported in PKCS12 format this passphrase
        is used to encrypt it. If the passphrase is empty the key and
        certificate can not be exported. There is no method of obtaining this
        passphrase once a key was generated."
    ::= { rlSslCertificateGenerationEntry   11 }

rlSslCertificateGenerationAction OBJECT-TYPE
    SYNTAX  INTEGER {
       generateRsaKeyAndSelfSignedCertificate(1),
       generateSelfSignedCertificate(2),
       generatePkcs12(3),
       generateCertificateRequest(4),
       generateEcKeyAndSelfSignedCertificate(5)
     }
    MAX-ACCESS      read-write
    STATUS      current
    DESCRIPTION
        "Setting to a regenerateCertificate causes a new certificate to be
        generated and to be used for all new sessions."
    ::= { rlSslCertificateGenerationEntry   12 }

rlSslCertificateGenerationEcKeyCurve OBJECT-TYPE
    SYNTAX  INTEGER (1..1000)
    MAX-ACCESS      read-write
    STATUS      current
    DESCRIPTION
        "Setting the EC key curve that will be created when a new key is generated -
         generateEcKeyAndSelfSignedCertificate"
    ::= { rlSslCertificateGenerationEntry   13 }

rlSslCertificateExportTable OBJECT-TYPE
   SYNTAX SEQUENCE OF RlSslCertificateExportEntry
   MAX-ACCESS     not-accessible
   STATUS     current
   DESCRIPTION
    "This table is used for viewing saved data from RAM and flash."
    ::= { rlSsl 2 }

rlSslCertificateExportEntry  OBJECT-TYPE
   SYNTAX RlSslCertificateExportEntry
   MAX-ACCESS   not-accessible
   STATUS       current
   DESCRIPTION
       " The row definition for this table."
   INDEX {     rlSslCertificateExportId,
               rlSslCertificateExportType,
               rlSslCertificateExportFragmentId }
   ::= { rlSslCertificateExportTable 1 }

RlSslCertificateExportEntry ::= SEQUENCE {
  rlSslCertificateExportId              INTEGER,
  rlSslCertificateExportType            INTEGER,
  rlSslCertificateExportFragmentId      INTEGER,
  rlSslCertificateExportFragmentText    OCTET STRING
}

rlSslCertificateExportId     OBJECT-TYPE
   SYNTAX INTEGER
   MAX-ACCESS   read-only
   STATUS current
   DESCRIPTION
    "Identifies the index of this certficate / certificate request the table holds."
     ::=  { rlSslCertificateExportEntry  1 }

rlSslCertificateExportType        OBJECT-TYPE
   SYNTAX INTEGER {
           certificateRequestPemFormat (1),
           certificatePemFormat(2),
           certificateOpenSslFormat(3),
           certificateAndKeyPkcs12(4)
     }
   MAX-ACCESS   read-only
   STATUS current
   DESCRIPTION
    "Identifies the type of data the current entry shows."
     ::=  { rlSslCertificateExportEntry  2 }

rlSslCertificateExportFragmentId   OBJECT-TYPE
   SYNTAX INTEGER
   MAX-ACCESS   read-only
   STATUS current
   DESCRIPTION
    "Identifies the index of this fragment in the CA certificate."
     ::=  { rlSslCertificateExportEntry  3 }

rlSslCertificateExportFragmentText    OBJECT-TYPE
   SYNTAX OCTET STRING
   MAX-ACCESS   read-only
   STATUS current
   DESCRIPTION
    "A part of the readable text entry for the certificate request."
     ::=  { rlSslCertificateExportEntry  4 }


rlSslCertificateSave OBJECT-TYPE
    SYNTAX  INTEGER
    MAX-ACCESS      read-write
    STATUS      current
    DESCRIPTION
        "Saves data from rlSslCertificateImportTable to RAM and CDB. When
        an external certificate should be copied to the device first we copy
        it to rlSslCertificateImportTable and then this scalar is set to the
        certificate id that we want to save -
        1. All entries in rlSslCertificateImportTable that have this id and
        their format is equal to the current value of rlSslCertificateSaveFormat
        are concatenated.
        2. If the imported certificate format is .. - section 1 result
        is validated against the key with the same index. If validation fails
        for any reason - the certificate is not saved and the setting this
        scalar fails.]
        This scalar is for certificate 1 only... for certificate 2 use
        rlSslCertificateSave2 "
    ::= { rlSsl  3 }

rlSslCertificateSaveFormat OBJECT-TYPE
    SYNTAX  INTEGER{
            x509 (1),
            pkcs12(2)
        }
    MAX-ACCESS      read-write
    STATUS      current
    DESCRIPTION
        "."
    ::= { rlSsl  4 }

rlSslImportedPKCS12CertificatePassphrase OBJECT-TYPE
    SYNTAX      DisplayString (SIZE(8..96))
    MAX-ACCESS  read-write
    STATUS      current
    DESCRIPTION
        "."
    ::= { rlSsl  5 }


rlSslCertificateImportTable OBJECT-TYPE
   SYNTAX SEQUENCE OF RlSslCertificateImportEntry
   MAX-ACCESS     not-accessible
   STATUS     current
   DESCRIPTION
    "This table is used for copying an external certificate to the device -
    see rlSslCertificateSave"
    ::= { rlSsl 6 }

rlSslCertificateImportEntry  OBJECT-TYPE
   SYNTAX RlSslCertificateImportEntry
   MAX-ACCESS   not-accessible
   STATUS       current
   DESCRIPTION
       " The row definition for this table."
   INDEX { rlSslCertificateImportId,
           rlSslCertificateImportFormat,
           rlSslCertificateImportFragmentId}
   ::= { rlSslCertificateImportTable 1 }

RlSslCertificateImportEntry ::= SEQUENCE {
  rlSslCertificateImportId              INTEGER,
  rlSslCertificateImportFormat          INTEGER,
  rlSslCertificateImportFragmentId      INTEGER,
  rlSslCertificateImportFragmentText    OCTET STRING,
  rlSslCertificateImportFragmentStatus  RowStatus
}

rlSslCertificateImportId   OBJECT-TYPE
   SYNTAX INTEGER
   MAX-ACCESS   read-write
   STATUS current
   DESCRIPTION
    "The certificate ID."
     ::=  { rlSslCertificateImportEntry  1 }

rlSslCertificateImportFormat   OBJECT-TYPE
   SYNTAX INTEGER {
            x509 (1),
            pkcs12(2)
           }

   MAX-ACCESS   read-write
   STATUS current
   DESCRIPTION
    "."
     ::=  { rlSslCertificateImportEntry  2 }


rlSslCertificateImportFragmentId   OBJECT-TYPE
   SYNTAX INTEGER
   MAX-ACCESS   read-write
   STATUS current
   DESCRIPTION
    "Identifies the index of this fragment in the certificate."
     ::=  { rlSslCertificateImportEntry  3 }


rlSslCertificateImportFragmentText    OBJECT-TYPE
   SYNTAX OCTET STRING
   MAX-ACCESS   read-write
   STATUS current
   DESCRIPTION
    "A part of the readable text entry for the certificate."
     ::=  { rlSslCertificateImportEntry  4 }

rlSslCertificateImportFragmentStatus    OBJECT-TYPE
   SYNTAX RowStatus
   MAX-ACCESS   read-write
   STATUS current
   DESCRIPTION
    ""
     ::=  { rlSslCertificateImportEntry  5 }


 rlSslSSLv2Enable OBJECT-TYPE
    SYNTAX      INTEGER { enabled(1), disabled(2) }
    MAX-ACCESS  read-write
    STATUS      current
    DESCRIPTION
        "if enabled then SSLv2 will be supported , if disabled SSLv2 won't be supported.
         only SSLV3 and TSL1.
         Note: disabling SSLv2 is more secure."
     ::= { rlSsl 7 }

RlSslPublicKeyAlgorithm ::= TEXTUAL-CONVENTION
    STATUS  current
    DESCRIPTION
        "This textual convention describes the various possible public key
         algorithms.  The key algorithm is used to select the PK to be generated
         and is also used when viewing the public keys."

    SYNTAX  INTEGER {
        rsa(1),
        dsa(2),
        ec(3),
        ecdsa(4)
    }


rlSslImportExportSelfKeyTable OBJECT-TYPE
   SYNTAX SEQUENCE OF RlSslImportExportSelfKeyEntry
   MAX-ACCESS     not-accessible
   STATUS     current
   DESCRIPTION
    "This table can be used for 2 purposes:
     1) Importing public/private key pair to serve as the device key when acting
     as SSL server. This is done by setting entries to this table, according to
     the specified format. When the last entry (footer) is set, the whole key
     pair is checked and if valid, stored in CDB.
     2) Exporting the device SSL server public/private key. This can be done by
     performing GetNext operations on this table."
    ::= { rlSsl 8 }

rlSslImportExportSelfKeyEntry  OBJECT-TYPE
   SYNTAX RlSslImportExportSelfKeyEntry
   MAX-ACCESS   not-accessible
   STATUS       current
   DESCRIPTION
       " The row definition for this table."
   INDEX { rlSslImportExportSelfKeyFormat,
           rlSslImportExportSelfKeyIndex,
           rlSslImportExportSelfKeyFragmentId}
   ::= { rlSslImportExportSelfKeyTable 1 }

RlSslImportExportSelfKeyEntry ::= SEQUENCE {
  rlSslImportExportSelfKeyFormat          INTEGER,
  rlSslImportExportSelfKeyIndex           INTEGER,
  rlSslImportExportSelfKeyFragmentId      INTEGER,
  rlSslImportExportSelfKeyAlgorithm       RlSslPublicKeyAlgorithm,
  rlSslImportExportSelfKeyFragmentText    OCTET STRING
}


rlSslImportExportSelfKeyFormat   OBJECT-TYPE
   SYNTAX INTEGER {
            uuencoded-format(1)
           }

   MAX-ACCESS   not-accessible
   STATUS current
   DESCRIPTION
    "Specifies the format of public/key pair. The following formats are
    supported for import/export:
    1) uuencoded_format - in this format both private and public key are in
    uu-encoded format, and are seperated from one another by header and footer.
    An example of the concateneation of all fragments in this format is:
    -----BEGIN RSA PRIVATE KEY-----
    tDaNkZZoCxXfkLLsLDlZ6T9H8U4Gz637eRV7BYBpapkidAxY1UG0/qgfKLPkbId4wzht6ArV9bE4fMtX
    wSMOxL3q31pOmUdVhjbWYcgZQBDy1DjFSbuIEdP85c96B9bBE2nPv90mSvb/6j8R2NItT/KJeiYMtLtI
    N3m6/zESKJGIrX0jP1RFDjVZSS5chSAFgB0egsLZEyOQn7jAqpX/x/easD2J6F/OjPXlJ9Hff2tMb3NU
    QYyBoWH2J9IxhWB6Vo66R9Y04JGR18uL/rV2sMCtpg5ppkVTEpNTp9qE1yXocR2NmzUfNFap+GJ4IHj8
    CzkVfmJM/kEWaJsYgHbAgLyRg4QVyelfobv1B71aQ+u1z9KGu/QajkWdR04OQfsGOL1CvU2LGYDcRjfH
    jv+jl/UkDRRjoD9kt2WvouT+OL6esvKl0OJBqWbGNXg9TWv/VLtJIwgUno+MLaJuOM4Fh44+wpnqUXwQ
    TFtBFc8pzt5BoOwbv9gXpicTkq4/+GhwXWXxSVFebKhnHAvKSLT+Ba7K7ZeR8EIIxbXdDNFOiS45R2KI
    jxxXLXK44u6KGl5MygCKXUOFlJ+Zhgrq6ZH17z/RVJQ2CWqb5Ekn9GY3kH9QZ3mb4MDPfriWi2lHGXHY
    JmJd4SLQhpBdnOS5tu84QmyU3dNbAdzghDsR+dEY/6g7Cn0kcVkeHNZ0H+mCZik5f6XBD8eplkk43bdR
    FrkwTeAjwurGcKwdiKkR4DlfSq3DKssVBucTqUpqsKqPXLwTIL44rWKhEPXgGPB2XDG0VLvIRKkAgEGI
    LNTwOm091Ro=
    -----END RSA PRIVATE KEY-----

    -----BEGIN RSA PUBLIC KEY-----
    MIGHAoGBAOeIC9gRg3YaEGGMp3C00qNwLINAEDZV/J4BWM5WnWwCWZyHXDs2XiEmFu0ZONAD4gcT2f2f
    NNfCBPye39VVuOkKQuSV0MLLX5800LZ4y1BNcPzPZHpnGaCzl7iAjhfj9MolzAh5VRjeiYt0t1um4dm+
    q9A4BtfpJqDYxCW9uxd/AgEj
    -----END RSA PUBLIC KEY-----
    "
     ::=  { rlSslImportExportSelfKeyEntry  1 }

rlSslImportExportSelfKeyIndex   OBJECT-TYPE
   SYNTAX INTEGER
   MAX-ACCESS   not-accessible
   STATUS current
   DESCRIPTION
    "Identifies the SSL server key index (there can be more than one key)."
     ::=  { rlSslImportExportSelfKeyEntry  2 }

rlSslImportExportSelfKeyFragmentId   OBJECT-TYPE
   SYNTAX INTEGER
   MAX-ACCESS   not-accessible
   STATUS current
   DESCRIPTION
    "Identifies the index of this fragment in the key pair input/output."
     ::=  { rlSslImportExportSelfKeyEntry  3 }

rlSslImportExportSelfKeyAlgorithm   OBJECT-TYPE
   SYNTAX RlSslPublicKeyAlgorithm
   MAX-ACCESS   read-write
   STATUS current
   DESCRIPTION
    "Identifies the type of key pair."
     ::=  { rlSslImportExportSelfKeyEntry  4 }

rlSslImportExportSelfKeyFragmentText    OBJECT-TYPE
   SYNTAX OCTET STRING
   MAX-ACCESS   read-write
   STATUS current
   DESCRIPTION
    "A part of the readable text entry for the key pair input/output."
     ::=  { rlSslImportExportSelfKeyEntry  5 }


--
--rlSslImportExportSelfKeyStatus    OBJECT-TYPE
--   SYNTAX RowStatus
--   MAX-ACCESS   read-write
--   STATUS current
--   DESCRIPTION
--   ""
--     ::=  { rlSslImportExportSelfKeyEntry  6 }
--


rlSslCertificateSave2 OBJECT-TYPE
    SYNTAX  INTEGER
    MAX-ACCESS      read-write
    STATUS      current
    DESCRIPTION
        "Saves data from rlSslCertificateImportTable to RAM and CDB. When
        an external certificate should be copied to the device first we copy
        it to rlSslCertificateImportTable and then this scalar is set to the
        certificate id that we want to save -
        1. All entries in rlSslCertificateImportTable that have this id and
        their format is equal to the current value of rlSslCertificateSaveFormat
        are concatenated.
        2. If the imported certificate format is .. - section 1 result
        is validated against the key with the same index. If validation fails
        for any reason - the certificate is not saved and the setting this
        scalar fails.]
        This scalar is for certificate 2 only... for certificate 1 use
        rlSslCertificateSave  "
    ::= { rlSsl  9 }

rlSslisCertificate1Default OBJECT-TYPE
    SYNTAX  TruthValue
    MAX-ACCESS      read-write
    STATUS      current
    DESCRIPTION
        "if set to true then this is the default key , will be configured
         when auto generation is done , will set to try , all other cases will
         be set to false.
          "
    ::= { rlSsl  10 }

rlSslisCertificate2Default OBJECT-TYPE
    SYNTAX  TruthValue
    MAX-ACCESS      read-write
    STATUS      current
    DESCRIPTION
        "if set to true then this is the default key , will be configured
         when auto generation is done , will set to try , all other cases will
         be set to false.
          "
    ::= { rlSsl  11 }


--  MIB TABLE rlCaCertificateInstallEntry

RlCaCertificateInstallType  ::= TEXTUAL-CONVENTION
   STATUS current
   DESCRIPTION    "Ca Certificate type enumeration."
   SYNTAX INTEGER {
        signer(1),
        static(2),
        dynamic(3)
    }

RlCaCertificateDisplayNonValidReason  ::= TEXTUAL-CONVENTION
   STATUS current
   DESCRIPTION    "Ca Certificate NON valid reason enumeration."
   SYNTAX INTEGER {
        noReason(0),
        premature(1),
        expired(2),
        revoked(3),
        timeNotSet(4),
        unknown(5)
    }

rlCaCertificateInstallTable OBJECT-TYPE
   SYNTAX SEQUENCE OF RlCaCertificateInstallEntry
   MAX-ACCESS     not-accessible
   STATUS     current
   DESCRIPTION
    "This table is used for installing a CA certificate to the device"
    ::= { rlSsl 12 }

rlCaCertificateInstallEntry  OBJECT-TYPE
   SYNTAX RlCaCertificateInstallEntry
   MAX-ACCESS   not-accessible
   STATUS       current
   DESCRIPTION
       " The row definition for this table."
   INDEX { rlCaCertificateInstallType,
           rlCaCertificateInstallOwner,
           rlCaCertificateInstallName,
           rlCaCertificateInstallFragmentId}
   ::= { rlCaCertificateInstallTable 1 }

RlCaCertificateInstallEntry ::= SEQUENCE {
  rlCaCertificateInstallType            RlCaCertificateInstallType,
  rlCaCertificateInstallOwner           DisplayString,
  rlCaCertificateInstallName            DisplayString,
  rlCaCertificateInstallFragmentId      INTEGER,
  rlCaCertificateInstallFragmentPEMText OCTET STRING,
  rlCaCertificateInstallFragmentStatus  RowStatus,
  rlCaCertificateInstallIsLastFragment  TruthValue
}

rlCaCertificateInstallType OBJECT-TYPE
    SYNTAX RlCaCertificateInstallType
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "Ca Certificate type"
     ::= { rlCaCertificateInstallEntry 1 }

rlCaCertificateInstallOwner   OBJECT-TYPE
   SYNTAX DisplayString
   MAX-ACCESS   read-write
   STATUS current
   DESCRIPTION
    "The CA certificate Owner - application name."
     ::=  { rlCaCertificateInstallEntry 2 }
     
rlCaCertificateInstallName   OBJECT-TYPE
   SYNTAX DisplayString
   MAX-ACCESS   read-write
   STATUS current
   DESCRIPTION
    "The CA certificate Name."
     ::=  { rlCaCertificateInstallEntry 3 }

rlCaCertificateInstallFragmentId   OBJECT-TYPE
   SYNTAX INTEGER
   MAX-ACCESS   read-write
   STATUS current
   DESCRIPTION
    "Identifies the index of this fragment in the CA certificate."
     ::=  { rlCaCertificateInstallEntry 4 }


rlCaCertificateInstallFragmentPEMText    OBJECT-TYPE
   SYNTAX OCTET STRING
   MAX-ACCESS   read-write
   STATUS current
   DESCRIPTION
    "A part of the readable text entry for the CA certificate."
     ::=  { rlCaCertificateInstallEntry 5 }


rlCaCertificateInstallFragmentStatus    OBJECT-TYPE
   SYNTAX RowStatus
   MAX-ACCESS   read-write
   STATUS current
   DESCRIPTION
    ""
     ::=  { rlCaCertificateInstallEntry 6 }

 rlCaCertificateInstallIsLastFragment    OBJECT-TYPE
   SYNTAX TruthValue
   MAX-ACCESS   read-write
   STATUS current
   DESCRIPTION
    "Has a true value in case of passing a last fragment"
     ::=  { rlCaCertificateInstallEntry 7 }

--  MIB TABLE rlCaCertificateDisplayEntry

rlCaCertificateDisplayTable OBJECT-TYPE
   SYNTAX SEQUENCE OF RlCaCertificateDisplayEntry
   MAX-ACCESS     not-accessible
   STATUS     current
   DESCRIPTION
    "This table is used for displaying a CA certificate to the device"
    ::= { rlSsl 13 }

rlCaCertificateDisplayEntry  OBJECT-TYPE
   SYNTAX RlCaCertificateDisplayEntry
   MAX-ACCESS   not-accessible
   STATUS       current
   DESCRIPTION
       " The row definition for this table."
   INDEX { rlCaCertificateDisplayType,
           rlCaCertificateDisplayOwner,
           rlCaCertificateDisplayName}
   ::= { rlCaCertificateDisplayTable 1 }

RlCaCertificateDisplayEntry ::= SEQUENCE {
  rlCaCertificateDisplayType                  RlCaCertificateInstallType,
  rlCaCertificateDisplayOwner                 DisplayString,
  rlCaCertificateDisplayName                  DisplayString, 
  rlCaCertificateDisplayVersion               DisplayString,
  rlCaCertificateDisplaySerialNumber          OCTET STRING,
  rlCaCertificateDisplayIssuerName            DisplayString,
  rlCaCertificateDisplaySubjectName           DisplayString,
  rlCaCertificateDisplayNotBefore             DisplayString,
  rlCaCertificateDisplayNotAfter              DisplayString,
  rlCaCertificateDisplayValid                 TruthValue,
  rlCaCertificateDisplayNonValidReason        RlCaCertificateDisplayNonValidReason,
  rlCaCertificateDisplaySignatureAlgorithm    DisplayString,
  rlCaCertificateDisplayPublicKeyAlgorithm    DisplayString,
  rlCaCertificateDisplayFingerprintAlgorithm  DisplayString,
  rlCaCertificateDisplayFingerprint           OCTET STRING,
  rlCaCertificateDisplayPublicKeySize         INTEGER
}

rlCaCertificateDisplayType OBJECT-TYPE
    SYNTAX RlCaCertificateInstallType
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "Ca Certificate type"
     ::= { rlCaCertificateDisplayEntry 1 }

rlCaCertificateDisplayOwner   OBJECT-TYPE
   SYNTAX DisplayString
   MAX-ACCESS  not-accessible
   STATUS current
   DESCRIPTION
    "The CA certificate Owner - application name."
     ::=  { rlCaCertificateDisplayEntry 2 }
     
 rlCaCertificateDisplayName   OBJECT-TYPE
   SYNTAX DisplayString
   MAX-ACCESS  not-accessible
   STATUS current
   DESCRIPTION
    "The CA certificate Name."
     ::=  { rlCaCertificateDisplayEntry 3 }

rlCaCertificateDisplayVersion   OBJECT-TYPE
   SYNTAX DisplayString
   MAX-ACCESS   read-only
   STATUS current
   DESCRIPTION
    "The CA certificate Version."
     ::=  { rlCaCertificateDisplayEntry 4 }

rlCaCertificateDisplaySerialNumber   OBJECT-TYPE
   SYNTAX OCTET STRING
   MAX-ACCESS   read-only
   STATUS current
   DESCRIPTION
    "The CA certificate Serial Number."
     ::=  { rlCaCertificateDisplayEntry 5 }

rlCaCertificateDisplayIssuerName   OBJECT-TYPE
   SYNTAX DisplayString
   MAX-ACCESS  read-only
   STATUS current
   DESCRIPTION
    "The CA certificate Issuer Name."
     ::=  { rlCaCertificateDisplayEntry 6 }

rlCaCertificateDisplaySubjectName   OBJECT-TYPE
   SYNTAX DisplayString
   MAX-ACCESS  read-only
   STATUS current
   DESCRIPTION
    "The CA certificate Subject Name."
     ::=  { rlCaCertificateDisplayEntry 7 }

rlCaCertificateDisplayNotBefore   OBJECT-TYPE
   SYNTAX DisplayString
   MAX-ACCESS  read-only
   STATUS current
   DESCRIPTION
    "The CA certificate Not before time."
     ::=  { rlCaCertificateDisplayEntry 8 }

rlCaCertificateDisplayNotAfter   OBJECT-TYPE
   SYNTAX DisplayString
   MAX-ACCESS  read-only
   STATUS current
   DESCRIPTION
    "The CA certificate Not after time."
     ::=  { rlCaCertificateDisplayEntry 9 }

rlCaCertificateDisplayValid OBJECT-TYPE
    SYNTAX  TruthValue
    MAX-ACCESS  read-only
    STATUS  current
    DESCRIPTION
        "true -  Certificate is VALID, dates validity and not revoked
         false - Certificate is INVALID, dates validity is faled or revoked"
    DEFVAL { true }
    ::= { rlCaCertificateDisplayEntry 10 }

rlCaCertificateDisplayNonValidReason OBJECT-TYPE
    SYNTAX RlCaCertificateDisplayNonValidReason
    MAX-ACCESS  read-only
    STATUS current
    DESCRIPTION
        "Ca Certificate reason for non validity"
     ::= { rlCaCertificateDisplayEntry 11 }

rlCaCertificateDisplaySignatureAlgorithm   OBJECT-TYPE
   SYNTAX DisplayString
   MAX-ACCESS  read-only
   STATUS current
   DESCRIPTION
    "The CA certificate Signature Algorithm."
     ::=  { rlCaCertificateDisplayEntry 12 }

rlCaCertificateDisplayPublicKeyAlgorithm   OBJECT-TYPE
   SYNTAX DisplayString
   MAX-ACCESS  read-only
   STATUS current
   DESCRIPTION
    "The CA certificate PublicKey Algorithm."
     ::=  { rlCaCertificateDisplayEntry 13 }

rlCaCertificateDisplayFingerprintAlgorithm   OBJECT-TYPE
   SYNTAX DisplayString
   MAX-ACCESS  read-only
   STATUS current
   DESCRIPTION
    "The CA certificate Fingerprint Algorithm."
     ::=  { rlCaCertificateDisplayEntry 14 }

rlCaCertificateDisplayFingerprint   OBJECT-TYPE
   SYNTAX OCTET STRING
   MAX-ACCESS  read-only
   STATUS current
   DESCRIPTION
    "The CA certificate Fingerprint."
     ::=  { rlCaCertificateDisplayEntry 15 }

rlCaCertificateDisplayPublicKeySize   OBJECT-TYPE
   SYNTAX INTEGER
   MAX-ACCESS   read-only
   STATUS current
   DESCRIPTION
    "The CA certificate PublicKey size."
     ::=  { rlCaCertificateDisplayEntry 16 }


--  MIB TABLE rlCaCertificateRevocationEntry

rlCaCertificateRevocationTable OBJECT-TYPE
   SYNTAX SEQUENCE OF RlCaCertificateRevocationEntry
   MAX-ACCESS     not-accessible
   STATUS     current
   DESCRIPTION
    "This table is used for revocation a CA certificate to the device"
    ::= { rlSsl 14 }

rlCaCertificateRevocationEntry  OBJECT-TYPE
   SYNTAX RlCaCertificateRevocationEntry
   MAX-ACCESS   not-accessible
   STATUS       current
   DESCRIPTION
       " The row definition for this table."
   INDEX { rlCaCertificateRevocationIssuerName,
           rlCaCertificateRevocationSerialNumber}
   ::= { rlCaCertificateRevocationTable 1 }

RlCaCertificateRevocationEntry ::= SEQUENCE {
  rlCaCertificateRevocationIssuerName            DisplayString,
  rlCaCertificateRevocationSerialNumber          OCTET STRING,
  rlCaCertificateRevocationRowStatus             RowStatus
}

rlCaCertificateRevocationIssuerName OBJECT-TYPE
    SYNTAX DisplayString
    MAX-ACCESS read-write
    STATUS current
    DESCRIPTION
        "Ca Certificate Issuer Name"
     ::= { rlCaCertificateRevocationEntry 1 }

rlCaCertificateRevocationSerialNumber   OBJECT-TYPE
   SYNTAX OCTET STRING (SIZE(1..20))
   MAX-ACCESS   read-write
   STATUS current
   DESCRIPTION
    "The CA certificate Serial Number."
     ::=  { rlCaCertificateRevocationEntry 2 }
     
rlCaCertificateRevocationRowStatus    OBJECT-TYPE
   SYNTAX RowStatus
   MAX-ACCESS   read-write
   STATUS current
   DESCRIPTION
    ""
     ::=  { rlCaCertificateRevocationEntry 3 }

--  MIB TABLE rlCaCertificateDisplayExtEntry

RlCaCertificateDisplayExtType  ::= TEXTUAL-CONVENTION
   STATUS current
   DESCRIPTION    "CA Certificate property type enumeration."
   SYNTAX INTEGER {
        publicKey(0),
        signature(1)
    }

rlCaCertificateDisplayExtTable OBJECT-TYPE
   SYNTAX SEQUENCE OF RlCaCertificateDisplayExtEntry
   MAX-ACCESS     not-accessible
   STATUS     current
   DESCRIPTION
    "This table is used for displaying certain information of a CA certificate"
    ::= { rlSsl 15 }

rlCaCertificateDisplayExtEntry  OBJECT-TYPE
   SYNTAX RlCaCertificateDisplayExtEntry
   MAX-ACCESS   not-accessible
   STATUS       current
   DESCRIPTION
       " The row definition for this table."
   INDEX { rlCaCertificateDisplayType,
           rlCaCertificateDisplayOwner,
           rlCaCertificateDisplayName,
	   rlCaCetrificateDisplayExtType,
	   rlCaCertificateDisplayExtFragmentId}
   ::= { rlCaCertificateDisplayExtTable 1 }

RlCaCertificateDisplayExtEntry ::= SEQUENCE {
  rlCaCetrificateDisplayExtType               RlCaCertificateDisplayExtType,
  rlCaCertificateDisplayExtFragmentId         INTEGER,
  rlCaCertificateDisplayExtFragmentData       OCTET STRING
}

rlCaCetrificateDisplayExtType OBJECT-TYPE
    SYNTAX RlCaCertificateDisplayExtType
    MAX-ACCESS not-accessible
    STATUS current
    DESCRIPTION
        "CA Certificate property type"
     ::= { rlCaCertificateDisplayExtEntry 1 }

rlCaCertificateDisplayExtFragmentId   OBJECT-TYPE
   SYNTAX INTEGER
   MAX-ACCESS   not-accessible
   STATUS current
   DESCRIPTION
    "Identifies the index of this fragment in the CA certificate property."
     ::=  { rlCaCertificateDisplayExtEntry 2 }
     
rlCaCertificateDisplayExtFragmentData    OBJECT-TYPE
   SYNTAX OCTET STRING
   MAX-ACCESS   read-only
   STATUS current
   DESCRIPTION
    "A fragment of the property to display from a CA certificate."
     ::=  { rlCaCertificateDisplayExtEntry 3 }

END