LocalLB::SSLCertificateExtension

Introduced : BIG-IP_v11.3.0
A list of certificate extensions that can be included in SSL forward proxy generated certificates.

Members

Member

Value

Description

SSL_FWDP_CERT_EXT_UNKNOWN

0

Unknown extension (or unsupported by iControl).

SSL_FWDP_CERT_EXT_AUTHORITY_KEY_IDENTIFIER

1

Authority Key Identifier provides a means of identifying the public key corresponding to the private key used to sign a certificate.

SSL_FWDP_CERT_EXT_BASIC_CONSTRAINTS

2

Basic Constraints are used to indicate whether the certificate belongs to a CA.

SSL_FWDP_CERT_EXT_CERTIFICATE_POLICIES

3

Certificate Policies contain a sequence of one or more policy information terms.

SSL_FWDP_CERT_EXT_CRL_DISTRIBUTION_POINTS

4

CRL Distribution Points identify how CRL information is obtained.

SSL_FWDP_CERT_EXT_EXTENDED_KEY_USAGE

5

Extended Key Usage is used, typically on a leaf certificate, to indicate the purpose of the public key contained in the certificate.

SSL_FWDP_CERT_EXT_FRESH_CRL

6

Fresh CRL (a.k.a Delta CRL Distribution Point) identifies how delta CRL information is obtained.

SSL_FWDP_CERT_EXT_ISSUER_ALTERNATIVE_NAME

7

As with Subject Alternative Name, Issuer Alternative Name is used to associate Internet style identities with the certificate issuer.

SSL_FWDP_CERT_EXT_KEY_USAGE

8

Key Usage provides a bitmap specifying the cryptographics operations which may be performed using the public key contained in the certificate; for example, it could indicate that the key should be used for signature but not for encipherment.

SSL_FWDP_CERT_EXT_SUBJECT_ALTERNATIVE_NAME

9

Subject Alternative Name allows identities to be bound to the subject of the certificate. These identities may be included in addition to or in place of the identity in the subject field of the certificate.

SSL_FWDP_CERT_EXT_SUBJECT_DIRECTORY_ATTRIBUTES

10

Subject Directory Attributes are used to convey identification attributes (e.g., nationality) of the subject.

SSL_FWDP_CERT_EXT_SUBJECT_KEY_IDENTIFIER

11

Subject Key Identifier provides a means of identifying certificates that contains a particular public key.


See Also

Warning

The links to the sample code below are remnants of the old DevCentral wiki and will result in a 404 error. For best results, please copy the link text and search the codeshare directly on DevCentral.

Sample Code


The BIG-IP API Reference documentation contains community-contributed content. F5 does not monitor or control community code contributions. We make no guarantees or warranties regarding the available code, and it may contain errors, defects, bugs, inaccuracies, or security vulnerabilities. Your access to and use of any code available in the BIG-IP API reference guides is solely at your own risk.