Branch data Line data Source code
1 : : /* scraped from http://www.mozilla.org/projects/security/pki/nss/ref/ssl/sslerr.html */
2 : : /* and mozilla security/manager/locales/en-US/chrome/pipnss/nsserrors.properties */
3 : : /* ***** BEGIN LICENSE BLOCK *****
4 : : * Version: MPL 1.1/GPL 2.0/LGPL 2.1
5 : : *
6 : : * The contents of this file are subject to the Mozilla Public License Version
7 : : * 1.1 (the "License"); you may not use this file except in compliance with
8 : : * the License. You may obtain a copy of the License at
9 : : * http://www.mozilla.org/MPL/
10 : : *
11 : : * Software distributed under the License is distributed on an "AS IS" basis,
12 : : * WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
13 : : * for the specific language governing rights and limitations under the
14 : : * License.
15 : : *
16 : : * The Original Code is the Netscape security libraries.
17 : : *
18 : : * The Initial Developer of the Original Code is
19 : : * Netscape Communications Corporation.
20 : : * Portions created by the Initial Developer are Copyright (C) 1994-2000
21 : : * the Initial Developer. All Rights Reserved.
22 : : *
23 : : * Contributor(s):
24 : : *
25 : : * Alternatively, the contents of this file may be used under the terms of
26 : : * either the GNU General Public License Version 2 or later (the "GPL"), or
27 : : * the GNU Lesser General Public License Version 2.1 or later (the "LGPL"),
28 : : * in which case the provisions of the GPL or the LGPL are applicable instead
29 : : * of those above. If you wish to allow use of your version of this file only
30 : : * under the terms of either the GPL or the LGPL, and not to allow others to
31 : : * use your version of this file under the terms of the MPL, indicate your
32 : : * decision by deleting the provisions above and replace them with the notice
33 : : * and other provisions required by the GPL or the LGPL. If you do not delete
34 : : * the provisions above, a recipient may use your version of this file under
35 : : * the terms of any one of the MPL, the GPL or the LGPL.
36 : : * ***** END LICENSE BLOCK ***** */
37 : : /* For systemtap's purposes, GPLv2 is the winning license. */
38 : :
39 : 0 : NSSYERROR(SSL_ERROR_EXPORT_ONLY_SERVER,"Unable to communicate securely. Peer does not support high-grade encryption.");
40 : 0 : NSSYERROR(SSL_ERROR_US_ONLY_SERVER,"Unable to communicate securely. Peer requires high-grade encryption which is not supported.");
41 : 0 : NSSYERROR(SSL_ERROR_NO_CYPHER_OVERLAP,"Cannot communicate securely with peer: no common encryption algorithm(s).");
42 : 0 : NSSYERROR(SSL_ERROR_NO_CERTIFICATE,"Unable to find the certificate or key necessary for authentication.");
43 : 0 : NSSYERROR(SSL_ERROR_BAD_CERTIFICATE,"Unable to communicate securely with peer: peers's certificate was rejected.");
44 : 0 : NSSYERROR(SSL_ERROR_BAD_CLIENT,"The server has encountered bad data from the client.");
45 : 0 : NSSYERROR(SSL_ERROR_BAD_SERVER,"The client has encountered bad data from the server.");
46 : 0 : NSSYERROR(SSL_ERROR_UNSUPPORTED_CERTIFICATE_TYPE,"Unsupported certificate type.");
47 : 0 : NSSYERROR(SSL_ERROR_UNSUPPORTED_VERSION,"Peer using unsupported version of security protocol.");
48 : 0 : NSSYERROR(SSL_ERROR_WRONG_CERTIFICATE,"Client authentication failed: private key in key database does not correspond to public key in certificate database.");
49 : 0 : NSSYERROR(SSL_ERROR_BAD_CERT_DOMAIN,"Unable to communicate securely with peer: requested domain name does not match the server's certificate.");
50 : 0 : NSSYERROR(SSL_ERROR_SSL2_DISABLED,"Peer only supports SSL version 2, which is locally disabled.");
51 : 0 : NSSYERROR(SSL_ERROR_BAD_MAC_READ,"SSL received a record with an incorrect Message Authentication Code.");
52 : 0 : NSSYERROR(SSL_ERROR_BAD_MAC_ALERT,"SSL peer reports incorrect Message Authentication Code.");
53 : 0 : NSSYERROR(SSL_ERROR_BAD_CERT_ALERT,"SSL peer cannot verify your certificate.");
54 : 0 : NSSYERROR(SSL_ERROR_REVOKED_CERT_ALERT,"SSL peer rejected your certificate as revoked.");
55 : 0 : NSSYERROR(SSL_ERROR_EXPIRED_CERT_ALERT,"SSL peer rejected your certificate as expired.");
56 : 0 : NSSYERROR(SSL_ERROR_SSL_DISABLED,"Cannot connect: SSL is disabled.");
57 : 0 : NSSYERROR(SSL_ERROR_FORTEZZA_PQG,"Cannot connect: SSL peer is in another FORTEZZA domain.");
58 : 0 : NSSYERROR(SSL_ERROR_UNKNOWN_CIPHER_SUITE,"An unknown SSL cipher suite has been requested.");
59 : 0 : NSSYERROR(SSL_ERROR_NO_CIPHERS_SUPPORTED,"No cipher suites are present and enabled in this program.");
60 : 0 : NSSYERROR(SSL_ERROR_BAD_BLOCK_PADDING,"SSL received a record with bad block padding.");
61 : 0 : NSSYERROR(SSL_ERROR_RX_RECORD_TOO_LONG,"SSL received a record that exceeded the maximum permissible length.");
62 : 0 : NSSYERROR(SSL_ERROR_TX_RECORD_TOO_LONG,"SSL attempted to send a record that exceeded the maximum permissible length.");
63 : 0 : NSSYERROR(SSL_ERROR_CLOSE_NOTIFY_ALERT,"SSL peer has closed this connection.");
64 : 0 : NSSYERROR(SSL_ERROR_PUB_KEY_SIZE_LIMIT_EXCEEDED,"SSL Server attempted to use domestic-grade public key with export cipher suite.");
65 : 0 : NSSYERROR(SSL_ERROR_NO_SERVER_KEY_FOR_ALG,"Server has no key for the attempted key exchange algorithm.");
66 : 0 : NSSYERROR(SSL_ERROR_TOKEN_INSERTION_REMOVAL,"PKCS #11 token was inserted or removed while operation was in progress.");
67 : 0 : NSSYERROR(SSL_ERROR_TOKEN_SLOT_NOT_FOUND,"No PKCS#11 token could be found to do a required operation.");
68 : 0 : NSSYERROR(SSL_ERROR_NO_COMPRESSION_OVERLAP,"Cannot communicate securely with peer: no common compression algorithm(s).");
69 : 0 : NSSYERROR(SSL_ERROR_HANDSHAKE_NOT_COMPLETED,"Cannot initiate another SSL handshake until current handshake is complete.");
70 : 0 : NSSYERROR(SSL_ERROR_BAD_HANDSHAKE_HASH_VALUE,"Received incorrect handshakes hash values from peer.");
71 : 0 : NSSYERROR(SSL_ERROR_CERT_KEA_MISMATCH,"The certificate provided cannot be used with the selected key exchange algorithm.");
72 : 0 : NSSYERROR(SSL_ERROR_NO_TRUSTED_SSL_CLIENT_CA,"No certificate authority is trusted for SSL client authentication.");
73 : 0 : NSSYERROR(SSL_ERROR_SESSION_NOT_FOUND,"Client's SSL session ID not found in server's session cache.");
74 : 0 : NSSYERROR(SSL_ERROR_RX_MALFORMED_HELLO_REQUEST,"SSL received a malformed Hello Request handshake message.");
75 : 0 : NSSYERROR(SSL_ERROR_RX_MALFORMED_CLIENT_HELLO,"SSL received a malformed Client Hello handshake message.");
76 : 0 : NSSYERROR(SSL_ERROR_RX_MALFORMED_SERVER_HELLO,"SSL received a malformed Server Hello handshake message.");
77 : 0 : NSSYERROR(SSL_ERROR_RX_MALFORMED_CERTIFICATE,"SSL received a malformed Certificate handshake message.");
78 : 0 : NSSYERROR(SSL_ERROR_RX_MALFORMED_SERVER_KEY_EXCH,"SSL received a malformed Server Key Exchange handshake message.");
79 : 0 : NSSYERROR(SSL_ERROR_RX_MALFORMED_CERT_REQUEST,"SSL received a malformed Certificate Request handshake message.");
80 : 0 : NSSYERROR(SSL_ERROR_RX_MALFORMED_HELLO_DONE,"SSL received a malformed Server Hello Done handshake message.");
81 : 0 : NSSYERROR(SSL_ERROR_RX_MALFORMED_CERT_VERIFY,"SSL received a malformed Certificate Verify handshake message.");
82 : 0 : NSSYERROR(SSL_ERROR_RX_MALFORMED_CLIENT_KEY_EXCH,"SSL received a malformed Client Key Exchange handshake message.");
83 : 0 : NSSYERROR(SSL_ERROR_RX_MALFORMED_FINISHED,"SSL received a malformed Finished handshake message.");
84 : 0 : NSSYERROR(SSL_ERROR_RX_MALFORMED_CHANGE_CIPHER,"SSL received a malformed Change Cipher Spec record.");
85 : 0 : NSSYERROR(SSL_ERROR_RX_MALFORMED_ALERT,"SSL received a malformed Alert record.");
86 : 0 : NSSYERROR(SSL_ERROR_RX_MALFORMED_HANDSHAKE,"SSL received a malformed Handshake record.");
87 : 0 : NSSYERROR(SSL_ERROR_RX_MALFORMED_APPLICATION_DATA,"SSL received a malformed Application Data record.");
88 : 0 : NSSYERROR(SSL_ERROR_RX_UNEXPECTED_HELLO_REQUEST,"SSL received an unexpected Hello Request handshake message.");
89 : 0 : NSSYERROR(SSL_ERROR_RX_UNEXPECTED_CLIENT_HELLO,"SSL received an unexpected Client Hello handshake message.");
90 : 0 : NSSYERROR(SSL_ERROR_RX_UNEXPECTED_SERVER_HELLO,"SSL received an unexpected Server Hello handshake message.");
91 : 0 : NSSYERROR(SSL_ERROR_RX_UNEXPECTED_CERTIFICATE,"SSL received an unexpected Certificate handshake message.");
92 : 0 : NSSYERROR(SSL_ERROR_RX_UNEXPECTED_SERVER_KEY_EXCH,"SSL received an unexpected Server Key Exchange handshake message.");
93 : 0 : NSSYERROR(SSL_ERROR_RX_UNEXPECTED_CERT_REQUEST,"SSL received an unexpected Certificate Request handshake message.");
94 : 0 : NSSYERROR(SSL_ERROR_RX_UNEXPECTED_HELLO_DONE,"SSL received an unexpected Server Hello Done handshake message.");
95 : 0 : NSSYERROR(SSL_ERROR_RX_UNEXPECTED_CERT_VERIFY,"SSL received an unexpected Certificate Verify handshake message.");
96 : 0 : NSSYERROR(SSL_ERROR_RX_UNEXPECTED_CLIENT_KEY_EXCH,"SSL received an unexpected Client Key Exchange handshake message.");
97 : 0 : NSSYERROR(SSL_ERROR_RX_UNEXPECTED_FINISHED,"SSL received an unexpected Finished handshake message.");
98 : 0 : NSSYERROR(SSL_ERROR_RX_UNEXPECTED_CHANGE_CIPHER,"SSL received an unexpected Change Cipher Spec record.");
99 : 0 : NSSYERROR(SSL_ERROR_RX_UNEXPECTED_ALERT,"SSL received an unexpected Alert record.");
100 : 0 : NSSYERROR(SSL_ERROR_RX_UNEXPECTED_HANDSHAKE,"SSL received an unexpected Handshake record.");
101 : 0 : NSSYERROR(SSL_ERROR_RX_UNEXPECTED_APPLICATION_DATA,"SSL received an unexpected Application Data record.");
102 : 0 : NSSYERROR(SSL_ERROR_RX_UNKNOWN_RECORD_TYPE,"SSL received a record with an unknown content type.");
103 : 0 : NSSYERROR(SSL_ERROR_RX_UNKNOWN_HANDSHAKE,"SSL received a handshake message with an unknown message type.");
104 : 0 : NSSYERROR(SSL_ERROR_RX_UNKNOWN_ALERT,"SSL received an alert record with an unknown alert description.");
105 : 0 : NSSYERROR(SSL_ERROR_HANDSHAKE_UNEXPECTED_ALERT,"SSL peer was not expecting a handshake message it received.");
106 : 0 : NSSYERROR(SSL_ERROR_DECOMPRESSION_FAILURE_ALERT,"SSL peer was unable to successfully decompress an SSL record it received.");
107 : 0 : NSSYERROR(SSL_ERROR_HANDSHAKE_FAILURE_ALERT,"SSL peer was unable to negotiate an acceptable set of security parameters.");
108 : 0 : NSSYERROR(SSL_ERROR_ILLEGAL_PARAMETER_ALERT,"SSL peer rejected a handshake message for unacceptable content.");
109 : 0 : NSSYERROR(SSL_ERROR_UNSUPPORTED_CERT_ALERT,"SSL peer does not support certificates of the type it received.");
110 : 0 : NSSYERROR(SSL_ERROR_CERTIFICATE_UNKNOWN_ALERT,"SSL peer had some unspecified issue with the certificate it received.");
111 : 0 : NSSYERROR(SSL_ERROR_DECRYPTION_FAILED_ALERT,"Peer was unable to decrypt an SSL record it received.");
112 : 0 : NSSYERROR(SSL_ERROR_RECORD_OVERFLOW_ALERT,"Peer received an SSL record that was longer than is permitted.");
113 : 0 : NSSYERROR(SSL_ERROR_UNKNOWN_CA_ALERT,"Peer does not recognize and trust the CA that issued your certificate.");
114 : 0 : NSSYERROR(SSL_ERROR_ACCESS_DENIED_ALERT,"Peer received a valid certificate, but access was denied.");
115 : 0 : NSSYERROR(SSL_ERROR_DECODE_ERROR_ALERT,"Peer could not decode an SSL handshake message.");
116 : 0 : NSSYERROR(SSL_ERROR_DECRYPT_ERROR_ALERT,"Peer reports failure of signature verification or key exchange.");
117 : 0 : NSSYERROR(SSL_ERROR_EXPORT_RESTRICTION_ALERT,"Peer reports negotiation not in compliance with export regulations.");
118 : 0 : NSSYERROR(SSL_ERROR_PROTOCOL_VERSION_ALERT,"Peer reports incompatible or unsupported protocol version.");
119 : 0 : NSSYERROR(SSL_ERROR_INSUFFICIENT_SECURITY_ALERT,"Server requires ciphers more secure than those supported by client.");
120 : 0 : NSSYERROR(SSL_ERROR_INTERNAL_ERROR_ALERT,"Peer reports it experienced an internal error.");
121 : 0 : NSSYERROR(SSL_ERROR_USER_CANCELED_ALERT,"Peer user canceled handshake.");
122 : 0 : NSSYERROR(SSL_ERROR_NO_RENEGOTIATION_ALERT,"Peer does not permit renegotiation of SSL security parameters.");
123 : 0 : NSSYERROR(SSL_ERROR_GENERATE_RANDOM_FAILURE,"SSL experienced a failure of its random number generator.");
124 : 0 : NSSYERROR(SSL_ERROR_SIGN_HASHES_FAILURE,"Unable to digitally sign data required to verify your certificate.");
125 : 0 : NSSYERROR(SSL_ERROR_EXTRACT_PUBLIC_KEY_FAILURE,"SSL was unable to extract the public key from the peer's certificate.");
126 : 0 : NSSYERROR(SSL_ERROR_SERVER_KEY_EXCHANGE_FAILURE,"Unspecified failure while processing SSL Server Key Exchange handshake.");
127 : 0 : NSSYERROR(SSL_ERROR_CLIENT_KEY_EXCHANGE_FAILURE,"Unspecified failure while processing SSL Client Key Exchange handshake.");
128 : 0 : NSSYERROR(SSL_ERROR_ENCRYPTION_FAILURE,"Bulk data encryption algorithm failed in selected cipher suite.");
129 : 0 : NSSYERROR(SSL_ERROR_DECRYPTION_FAILURE,"Bulk data decryption algorithm failed in selected cipher suite.");
130 : 0 : NSSYERROR(SSL_ERROR_MD5_DIGEST_FAILURE,"MD5 digest function failed.");
131 : 0 : NSSYERROR(SSL_ERROR_SHA_DIGEST_FAILURE,"SHA - 1 digest function failed.");
132 : 0 : NSSYERROR(SSL_ERROR_MAC_COMPUTATION_FAILURE,"Message Authentication Code computation failed.");
133 : 0 : NSSYERROR(SSL_ERROR_SYM_KEY_CONTEXT_FAILURE,"Failure to create Symmetric Key context.");
134 : 0 : NSSYERROR(SSL_ERROR_SYM_KEY_UNWRAP_FAILURE,"Failure to unwrap the Symmetric key in Client Key Exchange message.");
135 : 0 : NSSYERROR(SSL_ERROR_IV_PARAM_FAILURE,"PKCS11 code failed to translate an IV into a param.");
136 : 0 : NSSYERROR(SSL_ERROR_INIT_CIPHER_SUITE_FAILURE,"Failed to initialize the selected cipher suite.");
137 : 0 : NSSYERROR(SSL_ERROR_SOCKET_WRITE_FAILURE,"Attempt to write encrypted data to underlying socket failed.");
138 : 0 : NSSYERROR(SSL_ERROR_SESSION_KEY_GEN_FAILURE,"Failed to generate session keys for SSL session.");
139 : 0 : NSSYERROR(SSL_ERROR_SERVER_CACHE_NOT_CONFIGURED,"SSL server cache not configured and not disabled for this socket.");
140 : 0 : NSSYERROR(SSL_ERROR_UNSUPPORTED_EXTENSION_ALERT,"SSL peer does not support requested TLS hello extension.");
141 : 0 : NSSYERROR(SSL_ERROR_CERTIFICATE_UNOBTAINABLE_ALERT,"SSL peer could not obtain your certificate from the supplied URL.");
142 : 0 : NSSYERROR(SSL_ERROR_UNRECOGNIZED_NAME_ALERT,"SSL peer has no certificate for the requested DNS name.");
143 : 0 : NSSYERROR(SSL_ERROR_BAD_CERT_STATUS_RESPONSE_ALERT,"SSL peer was unable to get an OCSP response for its certificate.");
144 : 0 : NSSYERROR(SSL_ERROR_BAD_CERT_HASH_VALUE_ALERT,"SSL peer reported bad certificate hash value.");
145 : 0 : NSSYERROR(SEC_ERROR_IO,"An I / O error occurred during authentication) or an error occurred during crypto operation (other than signature verification).");
146 : 0 : NSSYERROR(SEC_ERROR_LIBRARY_FAILURE,"Security library failure.");
147 : 0 : NSSYERROR(SEC_ERROR_BAD_DATA,"Security library: received bad data.");
148 : 0 : NSSYERROR(SEC_ERROR_OUTPUT_LEN,"Security library: output length error.");
149 : 0 : NSSYERROR(SEC_ERROR_INPUT_LEN,"Security library: input length error.");
150 : 0 : NSSYERROR(SEC_ERROR_INVALID_ARGS,"Security library: invalid arguments.");
151 : 0 : NSSYERROR(SEC_ERROR_INVALID_ALGORITHM,"Security library: invalid algorithm.");
152 : 0 : NSSYERROR(SEC_ERROR_INVALID_AVA,"Security library: invalid AVA.");
153 : 0 : NSSYERROR(SEC_ERROR_INVALID_TIME,"Security library: invalid time.");
154 : 0 : NSSYERROR(SEC_ERROR_BAD_DER,"Security library:improperly formatted DER - encoded message.");
155 : 0 : NSSYERROR(SEC_ERROR_BAD_SIGNATURE,"Peer's certificate has an invalid signature.");
156 : 0 : NSSYERROR(SEC_ERROR_EXPIRED_CERTIFICATE,"Peer's certificate has expired.");
157 : 0 : NSSYERROR(SEC_ERROR_REVOKED_CERTIFICATE,"Peer's certificate has been revoked.");
158 : 0 : NSSYERROR(SEC_ERROR_UNKNOWN_ISSUER,"Peer's certificate issuer is not recognized.");
159 : 0 : NSSYERROR(SEC_ERROR_BAD_KEY,"Peer's public key is invalid");
160 : 0 : NSSYERROR(SEC_ERROR_BAD_PASSWORD,"The password entered is incorrect.");
161 : 0 : NSSYERROR(SEC_ERROR_RETRY_PASSWORD,"New password entered incorrectly.");
162 : 0 : NSSYERROR(SEC_ERROR_NO_NODELOCK,"Security library: no nodelock.");
163 : 0 : NSSYERROR(SEC_ERROR_BAD_DATABASE,"Security library: bad database.");
164 : 0 : NSSYERROR(SEC_ERROR_NO_MEMORY,"Security library: memory allocation failure.");
165 : 0 : NSSYERROR(SEC_ERROR_UNTRUSTED_ISSUER,"Peer's certificate issuer has been marked as not trusted by the user.");
166 : 0 : NSSYERROR(SEC_ERROR_UNTRUSTED_CERT,"Peer's certificate has been marked as not trusted by the user.");
167 : 0 : NSSYERROR(SEC_ERROR_DUPLICATE_CERT,"Certificate already exists in your database.");
168 : 0 : NSSYERROR(SEC_ERROR_DUPLICATE_CERT_NAME,"Downloaded certificate's name duplicates one already in your database.");
169 : 0 : NSSYERROR(SEC_ERROR_ADDING_CERT,"Error adding certificate to database.");
170 : 0 : NSSYERROR(SEC_ERROR_FILING_KEY,"Error refiling the key for this certificate.");
171 : 0 : NSSYERROR(SEC_ERROR_NO_KEY,"The private key for this certificate cannot be found in key database.");
172 : 0 : NSSYERROR(SEC_ERROR_CERT_VALID,"This certificate is valid.");
173 : 0 : NSSYERROR(SEC_ERROR_CERT_NOT_VALID,"This certificate is not valid.");
174 : 0 : NSSYERROR(SEC_ERROR_CERT_NO_RESPONSE,"Certificate library:no response.");
175 : 0 : NSSYERROR(SEC_ERROR_EXPIRED_ISSUER_CERTIFICATE,"The certificate issuer's certificate has expired.");
176 : 0 : NSSYERROR(SEC_ERROR_CRL_EXPIRED,"The CRL for the certificate's issuer has expired.");
177 : 0 : NSSYERROR(SEC_ERROR_CRL_BAD_SIGNATURE,"The CRL for the certificate's issuer has an invalid signature.");
178 : 0 : NSSYERROR(SEC_ERROR_CRL_INVALID,"New CRL has an invalid format.");
179 : 0 : NSSYERROR(SEC_ERROR_EXTENSION_VALUE_INVALID,"Certificate extension value is invalid.");
180 : 0 : NSSYERROR(SEC_ERROR_EXTENSION_NOT_FOUND,"Certificate extension not found.");
181 : 0 : NSSYERROR(SEC_ERROR_CA_CERT_INVALID,"Issuer certificate is invalid.");
182 : 0 : NSSYERROR(SEC_ERROR_PATH_LEN_CONSTRAINT_INVALID,"Certificate path length constraint is invalid.");
183 : 0 : NSSYERROR(SEC_ERROR_CERT_USAGES_INVALID,"Certificate usages field is invalid.");
184 : 0 : NSSYERROR(SEC_INTERNAL_ONLY,"Internal-only module.");
185 : 0 : NSSYERROR(SEC_ERROR_INVALID_KEY,"The key does not support the requested operation.");
186 : 0 : NSSYERROR(SEC_ERROR_UNKNOWN_CRITICAL_EXTENSION,"Certificate contains unknown critical extension.");
187 : 0 : NSSYERROR(SEC_ERROR_OLD_CRL,"New CRL is not later than the current one.");
188 : 0 : NSSYERROR(SEC_ERROR_NO_EMAIL_CERT,"Not encrypted or signed: you do not yet have an email certificate.");
189 : 0 : NSSYERROR(SEC_ERROR_NO_RECIPIENT_CERTS_QUERY,"Not encrypted: you do not have certificates for each of the recipients.");
190 : 0 : NSSYERROR(SEC_ERROR_NOT_A_RECIPIENT,"Cannot decrypt: you are not a recipient, or matching certificate and private key not found.");
191 : 0 : NSSYERROR(SEC_ERROR_PKCS7_KEYALG_MISMATCH,"Cannot decrypt: key encryption algorithm does not match your certificate.");
192 : 0 : NSSYERROR(SEC_ERROR_PKCS7_BAD_SIGNATURE,"Signature verification failed: no signer found, too many signers found, or improper or corrupted data. ");
193 : 0 : NSSYERROR(SEC_ERROR_UNSUPPORTED_KEYALG,"Unsupported or unknown key algorithm.");
194 : 0 : NSSYERROR(SEC_ERROR_DECRYPTION_DISALLOWED,"Cannot decrypt: encrypted using a disallowed algorithm or key size.");
195 : 0 : NSSYERROR(XP_SEC_FORTEZZA_BAD_CARD,"FORTEZZA card has not been properly initialized.");
196 : 0 : NSSYERROR(XP_SEC_FORTEZZA_NO_CARD,"No FORTEZZA cards found.");
197 : 0 : NSSYERROR(XP_SEC_FORTEZZA_NONE_SELECTED,"No FORTEZZA card selected.");
198 : 0 : NSSYERROR(XP_SEC_FORTEZZA_MORE_INFO,"Please select a personality to get more info on.");
199 : 0 : NSSYERROR(XP_SEC_FORTEZZA_PERSON_NOT_FOUND,"Personality not found");
200 : 0 : NSSYERROR(XP_SEC_FORTEZZA_NO_MORE_INFO,"No more information on that personality.");
201 : 0 : NSSYERROR(XP_SEC_FORTEZZA_BAD_PIN,"Invalid PIN.");
202 : 0 : NSSYERROR(XP_SEC_FORTEZZA_PERSON_ERROR,"Couldn' t initialize FORTEZZA personalities.");
203 : 0 : NSSYERROR(SEC_ERROR_NO_KRL,"No KRL for this site's certificate has been found.");
204 : 0 : NSSYERROR(SEC_ERROR_KRL_EXPIRED,"The KRL for this site's certificate has expired.");
205 : 0 : NSSYERROR(SEC_ERROR_KRL_BAD_SIGNATURE,"The KRL for this site's certificate has an invalid signature.");
206 : 0 : NSSYERROR(SEC_ERROR_REVOKED_KEY,"The key for this site's certificate has been revoked.");
207 : 0 : NSSYERROR(SEC_ERROR_KRL_INVALID,"New KRL has an invalid format.");
208 : 0 : NSSYERROR(SEC_ERROR_NEED_RANDOM,"Security library: need random data.");
209 : 0 : NSSYERROR(SEC_ERROR_NO_MODULE,"Security library: no security module can perform the requested operation.");
210 : 0 : NSSYERROR(SEC_ERROR_NO_TOKEN,"The security card or token does not exist, needs to be initialized, or has been removed.");
211 : 0 : NSSYERROR(SEC_ERROR_READ_ONLY,"Security library:read - only database.");
212 : 0 : NSSYERROR(SEC_ERROR_NO_SLOT_SELECTED,"No slot or token was selected.");
213 : 0 : NSSYERROR(SEC_ERROR_CERT_NICKNAME_COLLISION,"A certificate with the same nickname already exists.");
214 : 0 : NSSYERROR(SEC_ERROR_KEY_NICKNAME_COLLISION,"A key with the same nickname already exists. ");
215 : 0 : NSSYERROR(SEC_ERROR_SAFE_NOT_CREATED,"Error while creating safe object.");
216 : 0 : NSSYERROR(SEC_ERROR_BAGGAGE_NOT_CREATED,"Error while creating baggage object.");
217 : 0 : NSSYERROR(XP_JAVA_REMOVE_PRINCIPAL_ERROR,"Couldn 't remove the principal.");
218 : 0 : NSSYERROR(XP_JAVA_DELETE_PRIVILEGE_ERROR,"Couldn' t delete the privilege ");
219 : 0 : NSSYERROR(XP_JAVA_CERT_NOT_EXISTS_ERROR,"This principal doesn 't have a certificate.");
220 : 0 : NSSYERROR(SEC_ERROR_BAD_EXPORT_ALGORITHM,"Required algorithm is not allowed.");
221 : 0 : NSSYERROR(SEC_ERROR_EXPORTING_CERTIFICATES,"Error attempting to export certificates.");
222 : 0 : NSSYERROR(SEC_ERROR_IMPORTING_CERTIFICATES,"Error attempting to import certificates.");
223 : 0 : NSSYERROR(SEC_ERROR_PKCS12_DECODING_PFX,"Unable to import. Decoding error. File not valid.");
224 : 0 : NSSYERROR(SEC_ERROR_PKCS12_INVALID_MAC,"Unable to import. Invalid MAC. Incorrect password or corrupt file.");
225 : 0 : NSSYERROR(SEC_ERROR_PKCS12_UNSUPPORTED_MAC_ALGORITHM,"Unable to import. MAC algorithm not supported.");
226 : 0 : NSSYERROR(SEC_ERROR_PKCS12_UNSUPPORTED_TRANSPORT_MODE,"Unable to import. Only password integrity and privacy modes supported.");
227 : 0 : NSSYERROR(SEC_ERROR_PKCS12_CORRUPT_PFX_STRUCTURE,"Unable to import. File structure is corrupt.");
228 : 0 : NSSYERROR(SEC_ERROR_PKCS12_UNSUPPORTED_PBE_ALGORITHM,"Unable to import. Encryption algorithm not supported.");
229 : 0 : NSSYERROR(SEC_ERROR_PKCS12_UNSUPPORTED_VERSION,"Unable to import. File version not supported.");
230 : 0 : NSSYERROR(SEC_ERROR_PKCS12_PRIVACY_PASSWORD_INCORRECT,"Unable to import. Incorrect privacy password.");
231 : 0 : NSSYERROR(SEC_ERROR_PKCS12_CERT_COLLISION,"Unable to import. Same nickname already exists in database.");
232 : 0 : NSSYERROR(SEC_ERROR_USER_CANCELLED,"The user clicked cancel.");
233 : 0 : NSSYERROR(SEC_ERROR_PKCS12_DUPLICATE_DATA,"Not imported, already in database.");
234 : 0 : NSSYERROR(SEC_ERROR_MESSAGE_SEND_ABORTED,"Message not sent.");
235 : 0 : NSSYERROR(SEC_ERROR_INADEQUATE_KEY_USAGE,"Certificate key usage inadequate for attempted operation.");
236 : 0 : NSSYERROR(SEC_ERROR_INADEQUATE_CERT_TYPE,"Certificate type not approved for application.");
237 : 0 : NSSYERROR(SEC_ERROR_CERT_ADDR_MISMATCH,"Address in signing certificate does not match address in message headers.");
238 : 0 : NSSYERROR(SEC_ERROR_PKCS12_UNABLE_TO_IMPORT_KEY,"Unable to import. Error attempting to import private key.");
239 : 0 : NSSYERROR(SEC_ERROR_PKCS12_IMPORTING_CERT_CHAIN,"Unable to import. Error attempting to import certificate chain.");
240 : 0 : NSSYERROR(SEC_ERROR_PKCS12_UNABLE_TO_LOCATE_OBJECT_BY_NAME,"Unable to export. Unable to locate certificate or key by nickname.");
241 : 0 : NSSYERROR(SEC_ERROR_PKCS12_UNABLE_TO_EXPORT_KEY,"Unable to export. Private key could not be located and exported.");
242 : 0 : NSSYERROR(SEC_ERROR_PKCS12_UNABLE_TO_WRITE,"Unable to export. Unable to write the export file.");
243 : 0 : NSSYERROR(SEC_ERROR_PKCS12_UNABLE_TO_READ,"Unable to import. Unable to read the import file.");
244 : 0 : NSSYERROR(SEC_ERROR_PKCS12_KEY_DATABASE_NOT_INITIALIZED,"Unable to export. Key database corrupt or deleted.");
245 : 0 : NSSYERROR(SEC_ERROR_KEYGEN_FAIL,"Unable to generate public-private key pair.");
246 : 0 : NSSYERROR(SEC_ERROR_INVALID_PASSWORD,"Password entered is invalid.");
247 : 0 : NSSYERROR(SEC_ERROR_RETRY_OLD_PASSWORD,"Old password entered incorrectly.");
248 : 0 : NSSYERROR(SEC_ERROR_BAD_NICKNAME,"Certificate nickname already in use.");
249 : 0 : NSSYERROR(SEC_ERROR_NOT_FORTEZZA_ISSUER,"Peer FORTEZZA chain has a non-FORTEZZA Certificate.");
250 : 0 : NSSYERROR(SEC_ERROR_CANNOT_MOVE_SENSITIVE_KEY,"A sensitive key cannot be moved to the slot where it is needed.");
251 : 0 : NSSYERROR(SEC_ERROR_JS_INVALID_MODULE_NAME,"Invalid module name.");
252 : 0 : NSSYERROR(SEC_ERROR_JS_INVALID_DLL,"Invalid module path/filename.");
253 : 0 : NSSYERROR(SEC_ERROR_JS_ADD_MOD_FAILURE,"Unable to add module.");
254 : 0 : NSSYERROR(SEC_ERROR_JS_DEL_MOD_FAILURE,"Unable to delete module.");
255 : 0 : NSSYERROR(SEC_ERROR_OLD_KRL,"New KRL is not later than the current one.");
256 : 0 : NSSYERROR(SEC_ERROR_CKL_CONFLICT,"New CKL has different issuer than current CKL.");
257 : 0 : NSSYERROR(SEC_ERROR_CERT_NOT_IN_NAME_SPACE,"Certificate issuer is not permitted to issue a certificate with this name.");
258 : 0 : NSSYERROR(SEC_ERROR_KRL_NOT_YET_VALID,"The key revocation list for this certificate is not yet valid.");
259 : 0 : NSSYERROR(SEC_ERROR_CRL_NOT_YET_VALID,"The certificate revocation list for this certificate is not yet valid.");
260 : 0 : NSSYERROR(SEC_ERROR_UNKNOWN_CERT,"The requested certificate could not be found.");
261 : 0 : NSSYERROR(SEC_ERROR_UNKNOWN_SIGNER,"The signer's certificate could not be found.");
262 : 0 : NSSYERROR(SEC_ERROR_CERT_BAD_ACCESS_LOCATION,"The location for the certificate status server has invalid format.");
263 : 0 : NSSYERROR(SEC_ERROR_OCSP_UNKNOWN_RESPONSE_TYPE,"The OCSP response cannot be fully decoded) it is of an unknown type.");
264 : 0 : NSSYERROR(SEC_ERROR_OCSP_BAD_HTTP_RESPONSE,"The OCSP server returned unexpected / invalid HTTP data.");
265 : 0 : NSSYERROR(SEC_ERROR_OCSP_MALFORMED_REQUEST,"The OCSP server found the request to be corrupted or improperly formed.");
266 : 0 : NSSYERROR(SEC_ERROR_OCSP_SERVER_ERROR,"The OCSP server experienced an internal error.");
267 : 0 : NSSYERROR(SEC_ERROR_OCSP_TRY_SERVER_LATER,"The OCSP server suggests trying again later.");
268 : 0 : NSSYERROR(SEC_ERROR_OCSP_REQUEST_NEEDS_SIG,"The OCSP server requires a signature on this request.");
269 : 0 : NSSYERROR(SEC_ERROR_OCSP_UNAUTHORIZED_REQUEST,"The OCSP server has refused this request as unauthorized.");
270 : 0 : NSSYERROR(SEC_ERROR_OCSP_UNKNOWN_RESPONSE_STATUS,"The OCSP server returned an unrecognizable status.");
271 : 0 : NSSYERROR(SEC_ERROR_OCSP_UNKNOWN_CERT,"The OCSP server has no status for the certificate.");
272 : 0 : NSSYERROR(SEC_ERROR_OCSP_NOT_ENABLED,"You must enable OCSP before performing this operation.");
273 : 0 : NSSYERROR(SEC_ERROR_OCSP_NO_DEFAULT_RESPONDER,"You must set the OCSP default responder before performing this operation.");
274 : 0 : NSSYERROR(SEC_ERROR_OCSP_MALFORMED_RESPONSE,"The response from the OCSP server was corrupted or improperly formed.");
275 : 0 : NSSYERROR(SEC_ERROR_OCSP_UNAUTHORIZED_RESPONSE,"The signer of the OCSP response is not authorized to give status for this certificate.");
276 : 0 : NSSYERROR(SEC_ERROR_OCSP_FUTURE_RESPONSE,"The OCSP response is not yet valid (contains a date in the future) . ");
277 : 0 : NSSYERROR(SEC_ERROR_OCSP_OLD_RESPONSE,"The OCSP response contains out - of - date information.");
278 : 0 : NSSYERROR(SEC_ERROR_DIGEST_NOT_FOUND,"The CMS or PKCS #7 Digest was not found in signed message.");
279 : 0 : NSSYERROR(SEC_ERROR_UNSUPPORTED_MESSAGE_TYPE,"The CMS or PKCS #7 Message type is unsupported.");
280 : 0 : NSSYERROR(SEC_ERROR_MODULE_STUCK,"PKCS #11 module could not be removed because it is still in use.");
281 : 0 : NSSYERROR(SEC_ERROR_BAD_TEMPLATE,"Could not decode ASN .1 data.Specified template was invalid.");
282 : 0 : NSSYERROR(SEC_ERROR_CRL_NOT_FOUND,"No matching CRL was found.");
283 : 0 : NSSYERROR(SEC_ERROR_REUSED_ISSUER_AND_SERIAL,"You are attempting to import a cert with the same issuer / serial as an existing cert, but that is not the same cert.");
284 : 0 : NSSYERROR(SEC_ERROR_BUSY,"NSS could not shutdown.Objects are still in use.");
285 : 0 : NSSYERROR(SEC_ERROR_EXTRA_INPUT,"DER - encoded message contained extra unused data.");
286 : 0 : NSSYERROR(SEC_ERROR_UNSUPPORTED_ELLIPTIC_CURVE,"Unsupported elliptic curve.");
287 : 0 : NSSYERROR(SEC_ERROR_UNSUPPORTED_EC_POINT_FORM,"Unsupported elliptic curve point form.");
288 : 0 : NSSYERROR(SEC_ERROR_UNRECOGNIZED_OID,"Unrecognized Object IDentifier.");
289 : 0 : NSSYERROR(SEC_ERROR_OCSP_INVALID_SIGNING_CERT,"Invalid OCSP signing certificate in OCSP response.");
290 : 0 : NSSYERROR(SEC_ERROR_REVOKED_CERTIFICATE_CRL,"Certificate is revoked in issuer's certificate revocation list.");
291 : 0 : NSSYERROR(SEC_ERROR_REVOKED_CERTIFICATE_OCSP,"Issuer's OCSP responder reports certificate is revoked.");
292 : 0 : NSSYERROR(SEC_ERROR_CRL_INVALID_VERSION,"Issuer's Certificate Revocation List has an unknown version number.");
293 : 0 : NSSYERROR(SEC_ERROR_CRL_V1_CRITICAL_EXTENSION,"Issuer's V1 Certificate Revocation List has a critical extension.");
294 : 0 : NSSYERROR(SEC_ERROR_CRL_UNKNOWN_CRITICAL_EXTENSION,"Issuer's V2 Certificate Revocation List has an unknown critical extension.");
295 : 0 : NSSYERROR(SEC_ERROR_UNKNOWN_OBJECT_TYPE,"Unknown object type specified.");
296 : 0 : NSSYERROR(SEC_ERROR_INCOMPATIBLE_PKCS11,"PKCS #11 driver violates the spec in an incompatible way.");
297 : 0 : NSSYERROR(SEC_ERROR_NO_EVENT,"No new slot event is available at this time.");
298 : 0 : NSSYERROR(SEC_ERROR_CRL_ALREADY_EXISTS,"CRL already exists.");
299 : 0 : NSSYERROR(SEC_ERROR_NOT_INITIALIZED,"NSS is not initialized.");
300 : 0 : NSSYERROR(SEC_ERROR_TOKEN_NOT_LOGGED_IN,"The operation failed because the PKCS #11 token is not logged in.");
301 : 0 : NSSYERROR(SEC_ERROR_OCSP_RESPONDER_CERT_INVALID,"The configured OCSP responder's certificate is invalid.");
302 : 0 : NSSYERROR(SEC_ERROR_OCSP_BAD_SIGNATURE,"OCSP response has an invalid signature.");
303 : 0 : NSSYERROR(SEC_ERROR_OUT_OF_SEARCH_LIMITS,"Certification validation search is out of search limits.");
304 : 0 : NSSYERROR(SEC_ERROR_INVALID_POLICY_MAPPING,"Policy mapping contains any - policy.");
305 : 0 : NSSYERROR(SEC_ERROR_POLICY_VALIDATION_FAILED,"Certificate chain fails policy validation.");
306 : 0 : NSSYERROR(SEC_ERROR_UNKNOWN_AIA_LOCATION_TYPE,"Unknown location type in certificate AIA extension.");
307 : 0 : NSSYERROR(SEC_ERROR_BAD_HTTP_RESPONSE,"Server returned a bad HTTP response.");
308 : 0 : NSSYERROR(SEC_ERROR_BAD_LDAP_RESPONSE,"Server returned a bad LDAP response.");
309 : 0 : NSSYERROR(SEC_ERROR_FAILED_TO_ENCODE_DATA,"Failed to encode data with ASN .1 encoder.");
310 : 0 : NSSYERROR(SEC_ERROR_BAD_INFO_ACCESS_LOCATION,"Bad information access location in certificate extension.");
311 : 0 : NSSYERROR(SEC_ERROR_LIBPKIX_INTERNAL,"Libpkix internal error occurred during cert validation.");
312 : 0 : NSSYERROR(SEC_ERROR_PKCS11_GENERAL_ERROR,"A PKCS #11 module returned CKR_GENERAL_ERROR, indicating that an unrecoverable error has occurred.");
313 : 0 : NSSYERROR(SEC_ERROR_PKCS11_FUNCTION_FAILED,"A PKCS #11 module returned CKR_FUNCTION_FAILED, indicating that the requested function could not be performed.Trying the same operation again might succeed.");
314 : 0 : NSSYERROR(SEC_ERROR_PKCS11_DEVICE_ERROR,"A PKCS #11 module returned CKR_DEVICE_ERROR, indicating that a problem has occurred with the token or slot.");
315 : : /* 3.12.4 and later */
316 : : #if (NSS_VMAJOR > 3) || (NSS_VMAJOR == 3 && NSS_VMINOR > 12) || (NSS_VMAJOR == 3 && NSS_VMINOR == 12 && NSS_VPATCH >= 4)
317 : 0 : NSSYERROR(SEC_ERROR_BAD_INFO_ACCESS_METHOD,"Unknown information access method in certificate extension.");
318 : 0 : NSSYERROR(SEC_ERROR_CRL_IMPORT_FAILED,"Error attempting to import a CRL.");
319 : : #endif
|
