source: squid-ssl/trunk/fuentes/errors/ca/error-details.txt @ 5495

Last change on this file since 5495 was 5495, checked in by Juanma, 2 years ago

Initial release
File size: 7.1 KB
Line 
1name: SQUID_X509_V_ERR_INFINITE_VALIDATION
2detail: "%ssl_error_descr: %ssl_subject"
3descr: "Cert validation infinite loop detected"
4
5name: SQUID_ERR_SSL_HANDSHAKE
6detail: "%ssl_error_descr: %ssl_lib_error"
7descr: "Handshake with SSL server failed"
8
9name: SQUID_X509_V_ERR_DOMAIN_MISMATCH
10detail: "%ssl_error_descr: %ssl_subject"
11descr: "Certificate does not match domainname"
12
13name: X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT
14detail: "SSL Certficate error: certificate issuer (CA) not known: %ssl_ca_name"
15descr: "Unable to get issuer certificate"
16
17name: X509_V_ERR_UNABLE_TO_GET_CRL
18detail: "%ssl_error_descr: %ssl_subject"
19descr: "Unable to get certificate CRL"
20
21name: X509_V_ERR_UNABLE_TO_DECRYPT_CERT_SIGNATURE
22detail: "%ssl_error_descr: %ssl_subject"
23descr: "Unable to decrypt certificate's signature"
24
25name: X509_V_ERR_UNABLE_TO_DECRYPT_CRL_SIGNATURE
26detail: "%ssl_error_descr: %ssl_subject"
27descr: "Unable to decrypt CRL's signature"
28
29name: X509_V_ERR_UNABLE_TO_DECODE_ISSUER_PUBLIC_KEY
30detail: "Unable to decode issuer (CA) public key: %ssl_ca_name"
31descr: "Unable to decode issuer public key"
32
33name: X509_V_ERR_CERT_SIGNATURE_FAILURE
34detail: "%ssl_error_descr: %ssl_subject"
35descr: "Certificate signature failure"
36
37name: X509_V_ERR_CRL_SIGNATURE_FAILURE
38detail: "%ssl_error_descr: %ssl_subject"
39descr: "CRL signature failure"
40
41name: X509_V_ERR_CERT_NOT_YET_VALID
42detail: "SSL Certficate is not valid before: %ssl_notbefore"
43descr: "Certificate is not yet valid"
44
45name: X509_V_ERR_CERT_HAS_EXPIRED
46detail: "SSL Certificate expired on: %ssl_notafter"
47descr: "Certificate has expired"
48
49name: X509_V_ERR_CRL_NOT_YET_VALID
50detail: "%ssl_error_descr: %ssl_subject"
51descr: "CRL is not yet valid"
52
53name: X509_V_ERR_CRL_HAS_EXPIRED
54detail: "%ssl_error_descr: %ssl_subject"
55descr: "CRL has expired"
56
57name: X509_V_ERR_ERROR_IN_CERT_NOT_BEFORE_FIELD
58detail: "SSL Certificate has invalid start date (the 'not before' field): %ssl_subject"
59descr: "Format error in certificate's notBefore field"
60
61name: X509_V_ERR_ERROR_IN_CERT_NOT_AFTER_FIELD
62detail: "SSL Certificate has invalid expiration date (the 'not after' field): %ssl_subject"
63descr: "Format error in certificate's notAfter field"
64
65name: X509_V_ERR_ERROR_IN_CRL_LAST_UPDATE_FIELD
66detail: "%ssl_error_descr: %ssl_subject"
67descr: "Format error in CRL's lastUpdate field"
68
69name: X509_V_ERR_ERROR_IN_CRL_NEXT_UPDATE_FIELD
70detail: "%ssl_error_descr: %ssl_subject"
71descr: "Format error in CRL's nextUpdate field"
72
73name: X509_V_ERR_OUT_OF_MEM
74detail: "%ssl_error_descr"
75descr: "Out of memory"
76
77name: X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT
78detail: "Self-signed SSL Certificate: %ssl_subject"
79descr: "Self signed certificate"
80
81name: X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN
82detail: "Self-signed SSL Certificate in chain: %ssl_subject"
83descr: "Self signed certificate in certificate chain"
84
85name: X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY
86detail: "SSL Certficate error: certificate issuer (CA) not known: %ssl_ca_name"
87descr: "Unable to get local issuer certificate"
88
89name: X509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE
90detail: "%ssl_error_descr: %ssl_subject"
91descr: "Unable to verify the first certificate"
92
93name: X509_V_ERR_CERT_CHAIN_TOO_LONG
94detail: "%ssl_error_descr: %ssl_subject"
95descr: "Certificate chain too long"
96
97name: X509_V_ERR_CERT_REVOKED
98detail: "%ssl_error_descr: %ssl_subject"
99descr: "Certificate revoked"
100
101name: X509_V_ERR_INVALID_CA
102detail: "%ssl_error_descr: %ssl_ca_name"
103descr: "Invalid CA certificate"
104
105name: X509_V_ERR_PATH_LENGTH_EXCEEDED
106detail: "%ssl_error_descr: %ssl_subject"
107descr: "Path length constraint exceeded"
108
109name: X509_V_ERR_INVALID_PURPOSE
110detail: "%ssl_error_descr: %ssl_subject"
111descr: "Unsupported certificate purpose"
112
113name: X509_V_ERR_CERT_UNTRUSTED
114detail: "%ssl_error_descr: %ssl_subject"
115descr: "Certificate not trusted"
116
117name: X509_V_ERR_CERT_REJECTED
118detail: "%ssl_error_descr: %ssl_subject"
119descr: "Certificate rejected"
120
121name: X509_V_ERR_SUBJECT_ISSUER_MISMATCH
122detail: "%ssl_error_descr: %ssl_ca_name"
123descr: "Subject issuer mismatch"
124
125name: X509_V_ERR_AKID_SKID_MISMATCH
126detail: "%ssl_error_descr: %ssl_subject"
127descr: "Authority and subject key identifier mismatch"
128
129name: X509_V_ERR_AKID_ISSUER_SERIAL_MISMATCH
130detail: "%ssl_error_descr: %ssl_ca_name"
131descr: "Authority and issuer serial number mismatch"
132
133name: X509_V_ERR_KEYUSAGE_NO_CERTSIGN
134detail: "%ssl_error_descr: %ssl_subject"
135descr: "Key usage does not include certificate signing"
136
137name: X509_V_ERR_UNABLE_TO_GET_CRL_ISSUER
138detail: "%ssl_error_descr: %ssl_subject"
139descr: "unable to get CRL issuer certificate"
140
141name: X509_V_ERR_UNHANDLED_CRITICAL_EXTENSION
142detail: "%ssl_error_descr: %ssl_subject"
143descr: "unhandled critical extension"
144
145name: X509_V_ERR_KEYUSAGE_NO_CRL_SIGN
146detail: "%ssl_error_descr: %ssl_subject"
147descr: "key usage does not include CRL signing"
148
149name: X509_V_ERR_UNHANDLED_CRITICAL_CRL_EXTENSION
150detail: "%ssl_error_descr: %ssl_subject"
151descr: "unhandled critical CRL extension"
152
153name: X509_V_ERR_INVALID_NON_CA
154detail: "%ssl_error_descr: %ssl_subject"
155descr: "invalid non-CA certificate (has CA markings)"
156
157name: X509_V_ERR_PROXY_PATH_LENGTH_EXCEEDED
158detail: "%ssl_error_descr: %ssl_subject"
159descr: "proxy path length constraint exceeded"
160
161name: X509_V_ERR_KEYUSAGE_NO_DIGITAL_SIGNATURE
162detail: "%ssl_error_descr: %ssl_subject"
163descr: "key usage does not include digital signature"
164
165name: X509_V_ERR_PROXY_CERTIFICATES_NOT_ALLOWED
166detail: "%ssl_error_descr: %ssl_subject"
167descr: "proxy certificates not allowed, please set the appropriate flag"
168
169name: X509_V_ERR_INVALID_EXTENSION
170detail: "%ssl_error_descr: %ssl_subject"
171descr: "invalid or inconsistent certificate extension"
172
173name: X509_V_ERR_INVALID_POLICY_EXTENSION
174detail: "%ssl_error_descr: %ssl_subject"
175descr: "invalid or inconsistent certificate policy extension"
176
177name: X509_V_ERR_NO_EXPLICIT_POLICY
178detail: "%ssl_error_descr: %ssl_subject"
179descr: "no explicit policy"
180
181name: X509_V_ERR_DIFFERENT_CRL_SCOPE
182detail: "%ssl_error_descr: %ssl_subject"
183descr: "Different CRL scope"
184
185name: X509_V_ERR_UNSUPPORTED_EXTENSION_FEATURE
186detail: "%ssl_error_descr: %ssl_subject"
187descr: "Unsupported extension feature"
188
189name: X509_V_ERR_UNNESTED_RESOURCE
190detail: "%ssl_error_descr: %ssl_subject"
191descr: "RFC 3779 resource not subset of parent's resources"
192
193name: X509_V_ERR_PERMITTED_VIOLATION
194detail: "%ssl_error_descr: %ssl_subject"
195descr: "permitted subtree violation"
196
197name: X509_V_ERR_EXCLUDED_VIOLATION
198detail: "%ssl_error_descr: %ssl_subject"
199descr: "excluded subtree violation"
200
201name: X509_V_ERR_SUBTREE_MINMAX
202detail: "%ssl_error_descr: %ssl_subject"
203descr: "name constraints minimum and maximum not supported"
204
205name: X509_V_ERR_UNSUPPORTED_CONSTRAINT_TYPE
206detail: "%ssl_error_descr: %ssl_subject"
207descr: "unsupported name constraint type"
208
209name: X509_V_ERR_UNSUPPORTED_CONSTRAINT_SYNTAX
210detail: "%ssl_error_descr: %ssl_subject"
211descr: "unsupported or invalid name constraint syntax"
212
213name: X509_V_ERR_UNSUPPORTED_NAME_SYNTAX
214detail: "%ssl_error_descr: %ssl_subject"
215descr: "unsupported or invalid name syntax"
216
217name: X509_V_ERR_CRL_PATH_VALIDATION_ERROR
218detail: "%ssl_error_descr: %ssl_subject"
219descr: "CRL path validation error"
220
221name: X509_V_ERR_APPLICATION_VERIFICATION
222detail: "%ssl_error_descr: %ssl_subject"
223descr: "Application verification failure"
Note: See TracBrowser for help on using the repository browser.