1*0Sstevel@tonic-gate /* 2*0Sstevel@tonic-gate * Copyright (c) 2001 by Sun Microsystems, Inc. 3*0Sstevel@tonic-gate * All rights reserved. 4*0Sstevel@tonic-gate */ 5*0Sstevel@tonic-gate 6*0Sstevel@tonic-gate #pragma ident "%Z%%M% %I% %E% SMI" 7*0Sstevel@tonic-gate 8*0Sstevel@tonic-gate /* 9*0Sstevel@tonic-gate * The contents of this file are subject to the Netscape Public 10*0Sstevel@tonic-gate * License Version 1.1 (the "License"); you may not use this file 11*0Sstevel@tonic-gate * except in compliance with the License. You may obtain a copy of 12*0Sstevel@tonic-gate * the License at http://www.mozilla.org/NPL/ 13*0Sstevel@tonic-gate * 14*0Sstevel@tonic-gate * Software distributed under the License is distributed on an "AS 15*0Sstevel@tonic-gate * IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or 16*0Sstevel@tonic-gate * implied. See the License for the specific language governing 17*0Sstevel@tonic-gate * rights and limitations under the License. 18*0Sstevel@tonic-gate * 19*0Sstevel@tonic-gate * The Original Code is Mozilla Communicator client code, released 20*0Sstevel@tonic-gate * March 31, 1998. 21*0Sstevel@tonic-gate * 22*0Sstevel@tonic-gate * The Initial Developer of the Original Code is Netscape 23*0Sstevel@tonic-gate * Communications Corporation. Portions created by Netscape are 24*0Sstevel@tonic-gate * Copyright (C) 1998-1999 Netscape Communications Corporation. All 25*0Sstevel@tonic-gate * Rights Reserved. 26*0Sstevel@tonic-gate * 27*0Sstevel@tonic-gate * Contributor(s): 28*0Sstevel@tonic-gate */ 29*0Sstevel@tonic-gate /* 30*0Sstevel@tonic-gate * sslerrstrs.h - map SSL errors to strings (used by errormap.c) 31*0Sstevel@tonic-gate * 32*0Sstevel@tonic-gate */ 33*0Sstevel@tonic-gate 34*0Sstevel@tonic-gate /* 35*0Sstevel@tonic-gate **************************************************************************** 36*0Sstevel@tonic-gate * The code below this point was provided by Nelson Bolyard <nelsonb> of the 37*0Sstevel@tonic-gate * Netscape Certificate Server team on 27-March-1998. 38*0Sstevel@tonic-gate * Taken from the file ns/security/cmd/lib/SSLerrs.h on NSS_1_BRANCH. 39*0Sstevel@tonic-gate * Last updated from there: 24-July-1998 by Mark Smith <mcs> 40*0Sstevel@tonic-gate * 41*0Sstevel@tonic-gate * All of the Directory Server specific changes are enclosed inside 42*0Sstevel@tonic-gate * #ifdef NS_DIRECTORY. 43*0Sstevel@tonic-gate **************************************************************************** 44*0Sstevel@tonic-gate */ 45*0Sstevel@tonic-gate 46*0Sstevel@tonic-gate /* SSL-specific security error codes */ 47*0Sstevel@tonic-gate /* caller must include "sslerr.h" */ 48*0Sstevel@tonic-gate 49*0Sstevel@tonic-gate ER3(SSL_ERROR_EXPORT_ONLY_SERVER, SSL_ERROR_BASE + 0, 50*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 51*0Sstevel@tonic-gate "Unable to communicate securely. Peer does not support high-grade encryption.")) 52*0Sstevel@tonic-gate 53*0Sstevel@tonic-gate ER3(SSL_ERROR_US_ONLY_SERVER, SSL_ERROR_BASE + 1, 54*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 55*0Sstevel@tonic-gate "Unable to communicate securely. Peer requires high-grade encryption which is not supported.")) 56*0Sstevel@tonic-gate 57*0Sstevel@tonic-gate ER3(SSL_ERROR_NO_CYPHER_OVERLAP, SSL_ERROR_BASE + 2, 58*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 59*0Sstevel@tonic-gate "Cannot communicate securely with peer: no common encryption algorithm(s).")) 60*0Sstevel@tonic-gate 61*0Sstevel@tonic-gate ER3(SSL_ERROR_NO_CERTIFICATE, SSL_ERROR_BASE + 3, 62*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 63*0Sstevel@tonic-gate "Unable to find the certificate or key necessary for authentication.")) 64*0Sstevel@tonic-gate 65*0Sstevel@tonic-gate ER3(SSL_ERROR_BAD_CERTIFICATE, SSL_ERROR_BASE + 4, 66*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 67*0Sstevel@tonic-gate "Unable to communicate securely with peer: peers's certificate was rejected.")) 68*0Sstevel@tonic-gate 69*0Sstevel@tonic-gate /* unused (SSL_ERROR_BASE + 5),*/ 70*0Sstevel@tonic-gate 71*0Sstevel@tonic-gate ER3(SSL_ERROR_BAD_CLIENT, SSL_ERROR_BASE + 6, 72*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 73*0Sstevel@tonic-gate "The server has encountered bad data from the client.")) 74*0Sstevel@tonic-gate 75*0Sstevel@tonic-gate ER3(SSL_ERROR_BAD_SERVER, SSL_ERROR_BASE + 7, 76*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 77*0Sstevel@tonic-gate "The client has encountered bad data from the server.")) 78*0Sstevel@tonic-gate 79*0Sstevel@tonic-gate ER3(SSL_ERROR_UNSUPPORTED_CERTIFICATE_TYPE, SSL_ERROR_BASE + 8, 80*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 81*0Sstevel@tonic-gate "Unsupported certificate type.")) 82*0Sstevel@tonic-gate 83*0Sstevel@tonic-gate ER3(SSL_ERROR_UNSUPPORTED_VERSION, SSL_ERROR_BASE + 9, 84*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 85*0Sstevel@tonic-gate "Peer using unsupported version of security protocol.")) 86*0Sstevel@tonic-gate 87*0Sstevel@tonic-gate /* unused (SSL_ERROR_BASE + 10),*/ 88*0Sstevel@tonic-gate 89*0Sstevel@tonic-gate ER3(SSL_ERROR_WRONG_CERTIFICATE, SSL_ERROR_BASE + 11, 90*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 91*0Sstevel@tonic-gate "Client authentication failed: private key in key database does not match public key in certificate database.")) 92*0Sstevel@tonic-gate 93*0Sstevel@tonic-gate ER3(SSL_ERROR_BAD_CERT_DOMAIN, SSL_ERROR_BASE + 12, 94*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 95*0Sstevel@tonic-gate "Unable to communicate securely with peer: requested domain name does not match the server's certificate.")) 96*0Sstevel@tonic-gate 97*0Sstevel@tonic-gate /* SSL_ERROR_POST_WARNING (SSL_ERROR_BASE + 13), 98*0Sstevel@tonic-gate defined in sslerr.h 99*0Sstevel@tonic-gate */ 100*0Sstevel@tonic-gate 101*0Sstevel@tonic-gate ER3(SSL_ERROR_SSL2_DISABLED, (SSL_ERROR_BASE + 14), 102*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 103*0Sstevel@tonic-gate "Peer only supports SSL version 2, which is locally disabled.")) 104*0Sstevel@tonic-gate 105*0Sstevel@tonic-gate 106*0Sstevel@tonic-gate ER3(SSL_ERROR_BAD_MAC_READ, (SSL_ERROR_BASE + 15), 107*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 108*0Sstevel@tonic-gate "SSL received a record with an incorrect Message Authentication Code.")) 109*0Sstevel@tonic-gate 110*0Sstevel@tonic-gate ER3(SSL_ERROR_BAD_MAC_ALERT, (SSL_ERROR_BASE + 16), 111*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 112*0Sstevel@tonic-gate "SSL peer reports incorrect Message Authentication Code.")) 113*0Sstevel@tonic-gate 114*0Sstevel@tonic-gate ER3(SSL_ERROR_BAD_CERT_ALERT, (SSL_ERROR_BASE + 17), 115*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 116*0Sstevel@tonic-gate "SSL peer cannot verify your certificate.")) 117*0Sstevel@tonic-gate 118*0Sstevel@tonic-gate ER3(SSL_ERROR_REVOKED_CERT_ALERT, (SSL_ERROR_BASE + 18), 119*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 120*0Sstevel@tonic-gate "SSL peer rejected your certificate as revoked.")) 121*0Sstevel@tonic-gate 122*0Sstevel@tonic-gate ER3(SSL_ERROR_EXPIRED_CERT_ALERT, (SSL_ERROR_BASE + 19), 123*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 124*0Sstevel@tonic-gate "SSL peer rejected your certificate as expired.")) 125*0Sstevel@tonic-gate 126*0Sstevel@tonic-gate ER3(SSL_ERROR_SSL_DISABLED, (SSL_ERROR_BASE + 20), 127*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 128*0Sstevel@tonic-gate "Cannot connect: SSL is disabled.")) 129*0Sstevel@tonic-gate 130*0Sstevel@tonic-gate ER3(SSL_ERROR_FORTEZZA_PQG, (SSL_ERROR_BASE + 21), 131*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 132*0Sstevel@tonic-gate "Cannot connect: SSL peer is in another FORTEZZA domain.")) 133*0Sstevel@tonic-gate 134*0Sstevel@tonic-gate ER3(SSL_ERROR_UNKNOWN_CIPHER_SUITE , (SSL_ERROR_BASE + 22), 135*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 136*0Sstevel@tonic-gate "An unknown SSL cipher suite has been requested.")) 137*0Sstevel@tonic-gate 138*0Sstevel@tonic-gate ER3(SSL_ERROR_NO_CIPHERS_SUPPORTED , (SSL_ERROR_BASE + 23), 139*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 140*0Sstevel@tonic-gate "No cipher suites are present and enabled in this program.")) 141*0Sstevel@tonic-gate 142*0Sstevel@tonic-gate ER3(SSL_ERROR_BAD_BLOCK_PADDING , (SSL_ERROR_BASE + 24), 143*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 144*0Sstevel@tonic-gate "SSL received a record with bad block padding.")) 145*0Sstevel@tonic-gate 146*0Sstevel@tonic-gate ER3(SSL_ERROR_RX_RECORD_TOO_LONG , (SSL_ERROR_BASE + 25), 147*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 148*0Sstevel@tonic-gate "SSL received a record that exceeded the maximum permissible length.")) 149*0Sstevel@tonic-gate 150*0Sstevel@tonic-gate ER3(SSL_ERROR_TX_RECORD_TOO_LONG , (SSL_ERROR_BASE + 26), 151*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 152*0Sstevel@tonic-gate "SSL attempted to send a record that exceeded the maximum permissible length.")) 153*0Sstevel@tonic-gate 154*0Sstevel@tonic-gate /* 155*0Sstevel@tonic-gate * Received a malformed (too long or short or invalid content) SSL handshake. 156*0Sstevel@tonic-gate */ 157*0Sstevel@tonic-gate ER3(SSL_ERROR_RX_MALFORMED_HELLO_REQUEST , (SSL_ERROR_BASE + 27), 158*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 159*0Sstevel@tonic-gate "SSL received a malformed Hello Request handshake message.")) 160*0Sstevel@tonic-gate 161*0Sstevel@tonic-gate ER3(SSL_ERROR_RX_MALFORMED_CLIENT_HELLO , (SSL_ERROR_BASE + 28), 162*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 163*0Sstevel@tonic-gate "SSL received a malformed Client Hello handshake message.")) 164*0Sstevel@tonic-gate 165*0Sstevel@tonic-gate ER3(SSL_ERROR_RX_MALFORMED_SERVER_HELLO , (SSL_ERROR_BASE + 29), 166*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 167*0Sstevel@tonic-gate "SSL received a malformed Server Hello handshake message.")) 168*0Sstevel@tonic-gate 169*0Sstevel@tonic-gate ER3(SSL_ERROR_RX_MALFORMED_CERTIFICATE , (SSL_ERROR_BASE + 30), 170*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 171*0Sstevel@tonic-gate "SSL received a malformed Certificate handshake message.")) 172*0Sstevel@tonic-gate 173*0Sstevel@tonic-gate ER3(SSL_ERROR_RX_MALFORMED_SERVER_KEY_EXCH , (SSL_ERROR_BASE + 31), 174*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 175*0Sstevel@tonic-gate "SSL received a malformed Server Key Exchange handshake message.")) 176*0Sstevel@tonic-gate 177*0Sstevel@tonic-gate ER3(SSL_ERROR_RX_MALFORMED_CERT_REQUEST , (SSL_ERROR_BASE + 32), 178*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 179*0Sstevel@tonic-gate "SSL received a malformed Certificate Request handshake message.")) 180*0Sstevel@tonic-gate 181*0Sstevel@tonic-gate ER3(SSL_ERROR_RX_MALFORMED_HELLO_DONE , (SSL_ERROR_BASE + 33), 182*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 183*0Sstevel@tonic-gate "SSL received a malformed Server Hello Done handshake message.")) 184*0Sstevel@tonic-gate 185*0Sstevel@tonic-gate ER3(SSL_ERROR_RX_MALFORMED_CERT_VERIFY , (SSL_ERROR_BASE + 34), 186*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 187*0Sstevel@tonic-gate "SSL received a malformed Certificate Verify handshake message.")) 188*0Sstevel@tonic-gate 189*0Sstevel@tonic-gate ER3(SSL_ERROR_RX_MALFORMED_CLIENT_KEY_EXCH , (SSL_ERROR_BASE + 35), 190*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 191*0Sstevel@tonic-gate "SSL received a malformed Client Key Exchange handshake message.")) 192*0Sstevel@tonic-gate 193*0Sstevel@tonic-gate ER3(SSL_ERROR_RX_MALFORMED_FINISHED , (SSL_ERROR_BASE + 36), 194*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 195*0Sstevel@tonic-gate "SSL received a malformed Finished handshake message.")) 196*0Sstevel@tonic-gate 197*0Sstevel@tonic-gate /* 198*0Sstevel@tonic-gate * Received a malformed (too long or short) SSL record. 199*0Sstevel@tonic-gate */ 200*0Sstevel@tonic-gate ER3(SSL_ERROR_RX_MALFORMED_CHANGE_CIPHER , (SSL_ERROR_BASE + 37), 201*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 202*0Sstevel@tonic-gate "SSL received a malformed Change Cipher Spec record.")) 203*0Sstevel@tonic-gate 204*0Sstevel@tonic-gate ER3(SSL_ERROR_RX_MALFORMED_ALERT , (SSL_ERROR_BASE + 38), 205*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 206*0Sstevel@tonic-gate "SSL received a malformed Alert record.")) 207*0Sstevel@tonic-gate 208*0Sstevel@tonic-gate ER3(SSL_ERROR_RX_MALFORMED_HANDSHAKE , (SSL_ERROR_BASE + 39), 209*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 210*0Sstevel@tonic-gate "SSL received a malformed Handshake record.")) 211*0Sstevel@tonic-gate 212*0Sstevel@tonic-gate ER3(SSL_ERROR_RX_MALFORMED_APPLICATION_DATA , (SSL_ERROR_BASE + 40), 213*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 214*0Sstevel@tonic-gate "SSL received a malformed Application Data record.")) 215*0Sstevel@tonic-gate 216*0Sstevel@tonic-gate /* 217*0Sstevel@tonic-gate * Received an SSL handshake that was inappropriate for the state we're in. 218*0Sstevel@tonic-gate * E.g. Server received message from server, or wrong state in state machine. 219*0Sstevel@tonic-gate */ 220*0Sstevel@tonic-gate ER3(SSL_ERROR_RX_UNEXPECTED_HELLO_REQUEST , (SSL_ERROR_BASE + 41), 221*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 222*0Sstevel@tonic-gate "SSL received an unexpected Hello Request handshake message.")) 223*0Sstevel@tonic-gate 224*0Sstevel@tonic-gate ER3(SSL_ERROR_RX_UNEXPECTED_CLIENT_HELLO , (SSL_ERROR_BASE + 42), 225*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 226*0Sstevel@tonic-gate "SSL received an unexpected Client Hello handshake message.")) 227*0Sstevel@tonic-gate 228*0Sstevel@tonic-gate ER3(SSL_ERROR_RX_UNEXPECTED_SERVER_HELLO , (SSL_ERROR_BASE + 43), 229*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 230*0Sstevel@tonic-gate "SSL received an unexpected Server Hello handshake message.")) 231*0Sstevel@tonic-gate 232*0Sstevel@tonic-gate ER3(SSL_ERROR_RX_UNEXPECTED_CERTIFICATE , (SSL_ERROR_BASE + 44), 233*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 234*0Sstevel@tonic-gate "SSL received an unexpected Certificate handshake message.")) 235*0Sstevel@tonic-gate 236*0Sstevel@tonic-gate ER3(SSL_ERROR_RX_UNEXPECTED_SERVER_KEY_EXCH , (SSL_ERROR_BASE + 45), 237*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 238*0Sstevel@tonic-gate "SSL received an unexpected Server Key Exchange handshake message.")) 239*0Sstevel@tonic-gate 240*0Sstevel@tonic-gate ER3(SSL_ERROR_RX_UNEXPECTED_CERT_REQUEST , (SSL_ERROR_BASE + 46), 241*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 242*0Sstevel@tonic-gate "SSL received an unexpected Certificate Request handshake message.")) 243*0Sstevel@tonic-gate 244*0Sstevel@tonic-gate ER3(SSL_ERROR_RX_UNEXPECTED_HELLO_DONE , (SSL_ERROR_BASE + 47), 245*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 246*0Sstevel@tonic-gate "SSL received an unexpected Server Hello Done handshake message.")) 247*0Sstevel@tonic-gate 248*0Sstevel@tonic-gate ER3(SSL_ERROR_RX_UNEXPECTED_CERT_VERIFY , (SSL_ERROR_BASE + 48), 249*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 250*0Sstevel@tonic-gate "SSL received an unexpected Certificate Verify handshake message.")) 251*0Sstevel@tonic-gate 252*0Sstevel@tonic-gate ER3(SSL_ERROR_RX_UNEXPECTED_CLIENT_KEY_EXCH , (SSL_ERROR_BASE + 49), 253*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 254*0Sstevel@tonic-gate "SSL received an unexpected Cllient Key Exchange handshake message.")) 255*0Sstevel@tonic-gate 256*0Sstevel@tonic-gate ER3(SSL_ERROR_RX_UNEXPECTED_FINISHED , (SSL_ERROR_BASE + 50), 257*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 258*0Sstevel@tonic-gate "SSL received an unexpected Finished handshake message.")) 259*0Sstevel@tonic-gate 260*0Sstevel@tonic-gate /* 261*0Sstevel@tonic-gate * Received an SSL record that was inappropriate for the state we're in. 262*0Sstevel@tonic-gate */ 263*0Sstevel@tonic-gate ER3(SSL_ERROR_RX_UNEXPECTED_CHANGE_CIPHER , (SSL_ERROR_BASE + 51), 264*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 265*0Sstevel@tonic-gate "SSL received an unexpected Change Cipher Spec record.")) 266*0Sstevel@tonic-gate 267*0Sstevel@tonic-gate ER3(SSL_ERROR_RX_UNEXPECTED_ALERT , (SSL_ERROR_BASE + 52), 268*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 269*0Sstevel@tonic-gate "SSL received an unexpected Alert record.")) 270*0Sstevel@tonic-gate 271*0Sstevel@tonic-gate ER3(SSL_ERROR_RX_UNEXPECTED_HANDSHAKE , (SSL_ERROR_BASE + 53), 272*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 273*0Sstevel@tonic-gate "SSL received an unexpected Handshake record.")) 274*0Sstevel@tonic-gate 275*0Sstevel@tonic-gate ER3(SSL_ERROR_RX_UNEXPECTED_APPLICATION_DATA, (SSL_ERROR_BASE + 54), 276*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 277*0Sstevel@tonic-gate "SSL received an unexpected Application Data record.")) 278*0Sstevel@tonic-gate 279*0Sstevel@tonic-gate /* 280*0Sstevel@tonic-gate * Received record/message with unknown discriminant. 281*0Sstevel@tonic-gate */ 282*0Sstevel@tonic-gate ER3(SSL_ERROR_RX_UNKNOWN_RECORD_TYPE , (SSL_ERROR_BASE + 55), 283*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 284*0Sstevel@tonic-gate "SSL received a record with an unknown content type.")) 285*0Sstevel@tonic-gate 286*0Sstevel@tonic-gate ER3(SSL_ERROR_RX_UNKNOWN_HANDSHAKE , (SSL_ERROR_BASE + 56), 287*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 288*0Sstevel@tonic-gate "SSL received a handshake message with an unknown message type.")) 289*0Sstevel@tonic-gate 290*0Sstevel@tonic-gate ER3(SSL_ERROR_RX_UNKNOWN_ALERT , (SSL_ERROR_BASE + 57), 291*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 292*0Sstevel@tonic-gate "SSL received an alert record with an unknown alert description.")) 293*0Sstevel@tonic-gate 294*0Sstevel@tonic-gate /* 295*0Sstevel@tonic-gate * Received an alert reporting what we did wrong. (more alerts above) 296*0Sstevel@tonic-gate */ 297*0Sstevel@tonic-gate ER3(SSL_ERROR_CLOSE_NOTIFY_ALERT , (SSL_ERROR_BASE + 58), 298*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 299*0Sstevel@tonic-gate "SSL peer has closed this connection.")) 300*0Sstevel@tonic-gate 301*0Sstevel@tonic-gate ER3(SSL_ERROR_HANDSHAKE_UNEXPECTED_ALERT , (SSL_ERROR_BASE + 59), 302*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 303*0Sstevel@tonic-gate "SSL peer was not expecting a handshake message it received.")) 304*0Sstevel@tonic-gate 305*0Sstevel@tonic-gate ER3(SSL_ERROR_DECOMPRESSION_FAILURE_ALERT , (SSL_ERROR_BASE + 60), 306*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 307*0Sstevel@tonic-gate "SSL peer was unable to succesfully decompress an SSL record it received.")) 308*0Sstevel@tonic-gate 309*0Sstevel@tonic-gate ER3(SSL_ERROR_HANDSHAKE_FAILURE_ALERT , (SSL_ERROR_BASE + 61), 310*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 311*0Sstevel@tonic-gate "SSL peer was unable to negotiate an acceptable set of security parameters.")) 312*0Sstevel@tonic-gate 313*0Sstevel@tonic-gate ER3(SSL_ERROR_ILLEGAL_PARAMETER_ALERT , (SSL_ERROR_BASE + 62), 314*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 315*0Sstevel@tonic-gate "SSL peer rejected a handshake message for unacceptable content.")) 316*0Sstevel@tonic-gate 317*0Sstevel@tonic-gate ER3(SSL_ERROR_UNSUPPORTED_CERT_ALERT , (SSL_ERROR_BASE + 63), 318*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 319*0Sstevel@tonic-gate "SSL peer does not support certificates of the type it received.")) 320*0Sstevel@tonic-gate 321*0Sstevel@tonic-gate ER3(SSL_ERROR_CERTIFICATE_UNKNOWN_ALERT , (SSL_ERROR_BASE + 64), 322*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 323*0Sstevel@tonic-gate "SSL peer had some unspecified issue with the certificate it received.")) 324*0Sstevel@tonic-gate 325*0Sstevel@tonic-gate ER3(SSL_ERROR_GENERATE_RANDOM_FAILURE , (SSL_ERROR_BASE + 65), 326*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 327*0Sstevel@tonic-gate "SSL experienced a failure of its random number generator.")) 328*0Sstevel@tonic-gate 329*0Sstevel@tonic-gate ER3(SSL_ERROR_SIGN_HASHES_FAILURE , (SSL_ERROR_BASE + 66), 330*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 331*0Sstevel@tonic-gate "Unable to digitally sign data required to verify your certificate.")) 332*0Sstevel@tonic-gate 333*0Sstevel@tonic-gate ER3(SSL_ERROR_EXTRACT_PUBLIC_KEY_FAILURE , (SSL_ERROR_BASE + 67), 334*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 335*0Sstevel@tonic-gate "SSL was unable to extract the public key from the peer's certificate.")) 336*0Sstevel@tonic-gate 337*0Sstevel@tonic-gate ER3(SSL_ERROR_SERVER_KEY_EXCHANGE_FAILURE , (SSL_ERROR_BASE + 68), 338*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 339*0Sstevel@tonic-gate "Unspecified failure while processing SSL Server Key Exchange handshake.")) 340*0Sstevel@tonic-gate 341*0Sstevel@tonic-gate ER3(SSL_ERROR_CLIENT_KEY_EXCHANGE_FAILURE , (SSL_ERROR_BASE + 69), 342*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 343*0Sstevel@tonic-gate "Unspecified failure while processing SSL Client Key Exchange handshake.")) 344*0Sstevel@tonic-gate 345*0Sstevel@tonic-gate ER3(SSL_ERROR_ENCRYPTION_FAILURE , (SSL_ERROR_BASE + 70), 346*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 347*0Sstevel@tonic-gate "Bulk data encryption algorithm failed in selected cipher suite.")) 348*0Sstevel@tonic-gate 349*0Sstevel@tonic-gate ER3(SSL_ERROR_DECRYPTION_FAILURE , (SSL_ERROR_BASE + 71), 350*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 351*0Sstevel@tonic-gate "Bulk data decryption algorithm failed in selected cipher suite.")) 352*0Sstevel@tonic-gate 353*0Sstevel@tonic-gate ER3(SSL_ERROR_SOCKET_WRITE_FAILURE , (SSL_ERROR_BASE + 72), 354*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 355*0Sstevel@tonic-gate "Attempt to write encrypted data to underlying socket failed.")) 356*0Sstevel@tonic-gate 357*0Sstevel@tonic-gate ER3(SSL_ERROR_MD5_DIGEST_FAILURE , (SSL_ERROR_BASE + 73), 358*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 359*0Sstevel@tonic-gate "MD5 digest function failed.")) 360*0Sstevel@tonic-gate 361*0Sstevel@tonic-gate ER3(SSL_ERROR_SHA_DIGEST_FAILURE , (SSL_ERROR_BASE + 74), 362*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 363*0Sstevel@tonic-gate "SHA-1 digest function failed.")) 364*0Sstevel@tonic-gate 365*0Sstevel@tonic-gate ER3(SSL_ERROR_MAC_COMPUTATION_FAILURE , (SSL_ERROR_BASE + 75), 366*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 367*0Sstevel@tonic-gate "MAC computation failed.")) 368*0Sstevel@tonic-gate 369*0Sstevel@tonic-gate ER3(SSL_ERROR_SYM_KEY_CONTEXT_FAILURE , (SSL_ERROR_BASE + 76), 370*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 371*0Sstevel@tonic-gate "Failure to create Symmetric Key context.")) 372*0Sstevel@tonic-gate 373*0Sstevel@tonic-gate ER3(SSL_ERROR_SYM_KEY_UNWRAP_FAILURE , (SSL_ERROR_BASE + 77), 374*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 375*0Sstevel@tonic-gate "Failure to unwrap the Symmetric key in Client Key Exchange message.")) 376*0Sstevel@tonic-gate 377*0Sstevel@tonic-gate ER3(SSL_ERROR_PUB_KEY_SIZE_LIMIT_EXCEEDED , (SSL_ERROR_BASE + 78), 378*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 379*0Sstevel@tonic-gate "SSL Server attempted to use domestic-grade public key with export cipher suite.")) 380*0Sstevel@tonic-gate 381*0Sstevel@tonic-gate ER3(SSL_ERROR_IV_PARAM_FAILURE , (SSL_ERROR_BASE + 79), 382*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 383*0Sstevel@tonic-gate "PKCS11 code failed to translate an IV into a param.")) 384*0Sstevel@tonic-gate 385*0Sstevel@tonic-gate ER3(SSL_ERROR_INIT_CIPHER_SUITE_FAILURE , (SSL_ERROR_BASE + 80), 386*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 387*0Sstevel@tonic-gate "Failed to initialize the selected cipher suite.")) 388*0Sstevel@tonic-gate 389*0Sstevel@tonic-gate ER3(SSL_ERROR_SESSION_KEY_GEN_FAILURE , (SSL_ERROR_BASE + 81), 390*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 391*0Sstevel@tonic-gate "Client failed to generate session keys for SSL session.")) 392*0Sstevel@tonic-gate 393*0Sstevel@tonic-gate ER3(SSL_ERROR_NO_SERVER_KEY_FOR_ALG , (SSL_ERROR_BASE + 82), 394*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 395*0Sstevel@tonic-gate "Server has no key for the attempted key exchange algorithm.")) 396*0Sstevel@tonic-gate 397*0Sstevel@tonic-gate ER3(SSL_ERROR_TOKEN_INSERTION_REMOVAL , (SSL_ERROR_BASE + 83), 398*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 399*0Sstevel@tonic-gate "PKCS#11 token was inserted or removed while operation was in progress.")) 400*0Sstevel@tonic-gate 401*0Sstevel@tonic-gate ER3(SSL_ERROR_TOKEN_SLOT_NOT_FOUND , (SSL_ERROR_BASE + 84), 402*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 403*0Sstevel@tonic-gate "No PKCS#11 token could be found to do a required operation.")) 404*0Sstevel@tonic-gate 405*0Sstevel@tonic-gate ER3(SSL_ERROR_NO_COMPRESSION_OVERLAP , (SSL_ERROR_BASE + 85), 406*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 407*0Sstevel@tonic-gate "Cannot communicate securely with peer: no common compression algorithm(s).")) 408*0Sstevel@tonic-gate 409*0Sstevel@tonic-gate ER3(SSL_ERROR_HANDSHAKE_NOT_COMPLETED , (SSL_ERROR_BASE + 86), 410*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 411*0Sstevel@tonic-gate "Cannot initiate another SSL handshake until current handshake is complete.")) 412*0Sstevel@tonic-gate 413*0Sstevel@tonic-gate ER3(SSL_ERROR_BAD_HANDSHAKE_HASH_VALUE , (SSL_ERROR_BASE + 87), 414*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 415*0Sstevel@tonic-gate "Received incorrect handshakes hash values from peer.")) 416*0Sstevel@tonic-gate 417*0Sstevel@tonic-gate ER3(SSL_ERROR_CERT_KEA_MISMATCH , (SSL_ERROR_BASE + 88), 418*0Sstevel@tonic-gate dgettext(TEXT_DOMAIN, 419*0Sstevel@tonic-gate "The certificate provided cannot be used with the selected key exchange algorithm.")) 420