OID reference
1.3.6.1.4.1.272.4.26.33.3.1.4
This object specifies if the certificate is trusted without any further validity check. Possible Values: true(1), -- Disable any validity checks false(2) -- Run validity checks as far as configured -- otherwise.
Identification
{1 3 6 1 4 1 272 4 26 33 3 1 4}
Definitions may combine these properties differently.
Numbers refer to source variants above. Each value is shown only for variants that define it. Notes below names come from selected MIB definitions.
| Value | Name and source notes | Source variants |
|---|---|---|
| 1 | true Disable any validity checks | 1, 2 |
| 2 | false | 1, 2 |
At least one MIB declaration places this object in a table row. A value belongs to a row instance; its suffix depends on the row's INDEX or AUGMENTS definition.
In BIANCA-BRICK-CERT-MIB, the row index certIndex is declared as INTEGER. A non-negative index value is encoded as one numeric subidentifier. An instance has the form .1.3.6.1.4.1.272.4.26.33.3.1.4.<certIndex>. Use an index value actually present on the device and permitted by its MIB. Other definitions can differ.
snmpwalk [connection options] DEVICE .1.3.6.1.4.1.272.4.26.33.3.1.4
Replace the placeholders with your connection and authentication options. Available permissions and device support can differ from the MIB.
Properties come from available MIB definitions. Actual device support and access can differ. See source records below for original files and qualifications.
Available source records contain 2 distinct definitions; some records may not include a definition.
certForceTrusted OBJECT-TYPE
SYNTAX INTEGER {
true(1), -- Disable any validity checks
false(2) -- Run validity checks as far as configured
-- otherwise.
}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object specifies if the certificate is trusted without any
further validity check.
Possible Values:
true(1), -- Disable any validity checks
false(2) -- Run validity checks as far as configured
-- otherwise."
DEFVAL { false }
::= { certEntry 4 }certForceTrusted OBJECT-TYPE
SYNTAX INTEGER {
true(1), -- Always trust this certificate without
-- considering any CAs
false(2) -- trust this certificate only, if there
-- exists a valid trust path from a CA to it
-- and it is not revoked
}
ACCESS read-write
STATUS mandatory
DESCRIPTION
"This object specifies how the certificate is treated internally.
Possible Values:
true(1), -- Always trust this certificate without
-- considering any CAs
false(2) -- trust this certificate only, if there
-- exists a valid trust path from a CA to it
-- and it is not revoked."
::= { certEntry 4 }
Meaning
Identical descriptions are grouped. Different wording and device-specific notes are retained.
Description 1
This object specifies if the certificate is trusted without any further validity check. Possible Values: true(1), -- Disable any validity checks false(2) -- Run validity checks as far as configured -- otherwise.
Multiple manufacturers; see the original MIB MIB copies (LibreNMS/Observium Community)
Description 2
This object specifies how the certificate is treated internally. Possible Values: true(1), -- Always trust this certificate without -- considering any CAs false(2) -- trust this certificate only, if there -- exists a valid trust path from a CA to it -- and it is not revoked.
Evidence
Matching descriptions are grouped; open a group to compare definitions and supporting files.
Status in source: current.
Names: certForceTrusted
{
"smi_kind": "OBJECT-TYPE",
"definition": [
"certForceTrusted",
"OBJECT-TYPE",
"SYNTAX",
"INTEGER",
"{",
"true",
"(",
"1",
")",
",",
"false",
"(",
"2",
")",
"}",
"MAX-ACCESS",
"read-write",
"STATUS",
"current",
"DESCRIPTION",
"\"This object specifies if the certificate is trusted without any further validity check. Possible Values: true(1), -- Disable any validity checks false(2) -- Run validity checks as far as configured -- otherwise.\"",
"DEFVAL",
"{",
"false",
"}",
"::=",
"{",
"certEntry",
"4",
"}"
],
"syntax_tree": [
[
"SimpleSyntax",
"INTEGER",
[
"enumSpec",
[
[
"true",
1
],
[
"false",
2
]
]
]
],
null,
[
"MaxAccessPart",
"read-write"
],
[
"Status",
"current"
],
[
"DESCRIPTION",
"This object specifies if the certificate is trusted without any further validity check. Possible Values: true(1), -- Disable any validity checks false(2) -- Run validity checks as far as configured -- otherwise."
],
null,
null,
null,
[
"DEFVAL",
"false"
]
]
}Vendor MIB copy from the Observium Community archive.
Module: FEC-CERT-MIB
See published definition above
{'SNMPv2-TC': ['DisplayString', 'TestAndIncr', 'TimeStamp'], 'BINTEC-MIB': ['Date', 'HexValue', 'ipsec'], 'SNMPv2-SMI': ['MODULE-IDENTITY', 'OBJECT-TYPE', 'NOTIFICATION-TYPE', 'enterprises', 'snmpModules', 'mib-2'], 'SNMPv2-CONF': ['MODULE-COMPLIANCE', 'OBJECT-GROUP', 'NOTIFICATION-GROUP']}Related source files and packages:
Status in source: mandatory.
Names: certForceTrusted
{
"smi_kind": "OBJECT-TYPE",
"definition": [
"certForceTrusted",
"OBJECT-TYPE",
"SYNTAX",
"INTEGER",
"{",
"true",
"(",
"1",
")",
",",
"false",
"(",
"2",
")",
"}",
"ACCESS",
"read-write",
"STATUS",
"mandatory",
"DESCRIPTION",
"\"This object specifies how the certificate is treated internally. Possible Values: true(1), -- Always trust this certificate without -- considering any CAs false(2) -- trust this certificate only, if there -- exists a valid trust path from a CA to it -- and it is not revoked.\"",
"::=",
"{",
"certEntry",
"4",
"}"
],
"syntax_tree": [
[
"SimpleSyntax",
"INTEGER",
[
"enumSpec",
[
[
"true",
1
],
[
"false",
2
]
]
]
],
null,
[
"MaxAccessPart",
"read-write"
],
[
"Status",
"mandatory"
],
[
"DESCRIPTION",
"This object specifies how the certificate is treated internally. Possible Values: true(1), -- Always trust this certificate without -- considering any CAs false(2) -- trust this certificate only, if there -- exists a valid trust path from a CA to it -- and it is not revoked."
],
null,
null,
null,
null
]
}Module: BIANCA-BRICK-CERT-MIB
See published definition above
{'RFC-1212': ['OBJECT-TYPE'], 'RFC1155-SMI': ['IpAddress', 'Counter', 'TimeTicks']}Module: BIANCA-BRICK-CERT-MIB
{'RFC-1212': ['OBJECT-TYPE'], 'RFC1155-SMI': ['IpAddress', 'Counter', 'TimeTicks']}Historical records
certForceTrusted OBJECT-TYPE
SYNTAX INTEGER {
true(1),
false(2)
}
ACCESS read-write
STATUS mandatory
DESCRIPTION
"This object specifies how the certificate is treated internally.
Possible Values:
true(1),
false(2)
::= { certEntry 4 }
certForceTrusted OBJECT-TYPE
SYNTAX INTEGER {
true(1),
false(2)
}
ACCESS read-write
STATUS mandatory
DESCRIPTION
"This object specifies how the certificate is treated internally.
Possible Values:
true(1),
false(2)
::= { certEntry 4 }
Registration
| OID | Name | Direct children | Descendants | Description |
|---|---|---|---|---|
| 1.3.6.1.4.1.272.4.26.33.3.1.1 | certIndex | 0 | 0 | A unique index of this certificate entry. |
| 1.3.6.1.4.1.272.4.26.33.3.1.2 | certDescription | 0 | 0 | This object specifies the name of the X.509 Certificate. |
| 1.3.6.1.4.1.272.4.26.33.3.1.3 | certIsCA | 0 | 0 | |
| 1.3.6.1.4.1.272.4.26.33.3.1.5 | certNoCrls | 0 | 0 | |
| 1.3.6.1.4.1.272.4.26.33.3.1.6 | certSerialNumber | 0 | 0 | This object specifies the serial number of the certificate. |
| 1.3.6.1.4.1.272.4.26.33.3.1.7 | certSubjectName | 0 | 0 | The subject name of the certificate. |
| 1.3.6.1.4.1.272.4.26.33.3.1.8 | certSubjectAltNames | 0 | 0 | The subject alternative name of the certificate. For IPSec, this field (not the subject name) is taken by default as the peer id,… |
| 1.3.6.1.4.1.272.4.26.33.3.1.9 | certIssuerName | 0 | 0 | The name of the certificate authority which issued this certificate. |
| 1.3.6.1.4.1.272.4.26.33.3.1.10 | certIssuerAltNames | 0 | 0 | The alternative names of the certificate authority which issued this certificate. |
| 1.3.6.1.4.1.272.4.26.33.3.1.11 | certValidity | 0 | 0 | The validity period of this certificate in human readable form. |
| 1.3.6.1.4.1.272.4.26.33.3.1.12 | certPubKeyInfo | 0 | 0 | This string shows the properties of the public key certified in this certificate. These are the algorithm for which the key is us… |
| 1.3.6.1.4.1.272.4.26.33.3.1.13 | certKeyId | 0 | 0 | The key id as contained in the extensions of the certificate, if any. |
| 1.3.6.1.4.1.272.4.26.33.3.1.14 | certPrivateKey | 0 | 0 | The index of the private key from the ipsecPublicKeyTable corresponding to the public key in this certificate. Used only for own … |
| 1.3.6.1.4.1.272.4.26.33.3.1.15 | certValidNotBefore | 0 | 0 | |
| 1.3.6.1.4.1.272.4.26.33.3.1.16 | certValidNotAfter | 0 | 0 | |
| 1.3.6.1.4.1.272.4.26.33.3.1.17 | certKeyUsage | 0 | 0 | |
| 1.3.6.1.4.1.272.4.26.33.3.1.24 | certMD5Fingerprint | 0 | 0 | The fingerprint of the certificate computed as an MD5 hash of the DER encoded binary certificate data. |
| 1.3.6.1.4.1.272.4.26.33.3.1.25 | certSHA1Fingerprint | 0 | 0 | The fingerprint of the certificate computed as an SHA1 hash of the DER encoded binary certificate data. |
| 1.3.6.1.4.1.272.4.26.33.3.1.26 | certSource | 0 | 0 | |
| 1.3.6.1.4.1.272.4.26.33.3.1.27 | certUptodate | 0 | 0 |