| OLD | NEW |
| (Empty) |
| 1 /* This Source Code Form is subject to the terms of the Mozilla Public | |
| 2 * License, v. 2.0. If a copy of the MPL was not distributed with this | |
| 3 * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ | |
| 4 | |
| 5 /* General security error codes */ | |
| 6 /* Caller must #include "secerr.h" */ | |
| 7 | |
| 8 ER3(SEC_ERROR_IO, SEC_ERROR_BASE + 0, | |
| 9 "An I/O error occurred during security authorization.") | |
| 10 | |
| 11 ER3(SEC_ERROR_LIBRARY_FAILURE, SEC_ERROR_BASE + 1, | |
| 12 "security library failure.") | |
| 13 | |
| 14 ER3(SEC_ERROR_BAD_DATA, SEC_ERROR_BASE + 2, | |
| 15 "security library: received bad data.") | |
| 16 | |
| 17 ER3(SEC_ERROR_OUTPUT_LEN, SEC_ERROR_BASE + 3, | |
| 18 "security library: output length error.") | |
| 19 | |
| 20 ER3(SEC_ERROR_INPUT_LEN, SEC_ERROR_BASE + 4, | |
| 21 "security library has experienced an input length error.") | |
| 22 | |
| 23 ER3(SEC_ERROR_INVALID_ARGS, SEC_ERROR_BASE + 5, | |
| 24 "security library: invalid arguments.") | |
| 25 | |
| 26 ER3(SEC_ERROR_INVALID_ALGORITHM, SEC_ERROR_BASE + 6, | |
| 27 "security library: invalid algorithm.") | |
| 28 | |
| 29 ER3(SEC_ERROR_INVALID_AVA, SEC_ERROR_BASE + 7, | |
| 30 "security library: invalid AVA.") | |
| 31 | |
| 32 ER3(SEC_ERROR_INVALID_TIME, SEC_ERROR_BASE + 8, | |
| 33 "Improperly formatted time string.") | |
| 34 | |
| 35 ER3(SEC_ERROR_BAD_DER, SEC_ERROR_BASE + 9, | |
| 36 "security library: improperly formatted DER-encoded message.") | |
| 37 | |
| 38 ER3(SEC_ERROR_BAD_SIGNATURE, SEC_ERROR_BASE + 10, | |
| 39 "Peer's certificate has an invalid signature.") | |
| 40 | |
| 41 ER3(SEC_ERROR_EXPIRED_CERTIFICATE, SEC_ERROR_BASE + 11, | |
| 42 "Peer's Certificate has expired.") | |
| 43 | |
| 44 ER3(SEC_ERROR_REVOKED_CERTIFICATE, SEC_ERROR_BASE + 12, | |
| 45 "Peer's Certificate has been revoked.") | |
| 46 | |
| 47 ER3(SEC_ERROR_UNKNOWN_ISSUER, SEC_ERROR_BASE + 13, | |
| 48 "Peer's Certificate issuer is not recognized.") | |
| 49 | |
| 50 ER3(SEC_ERROR_BAD_KEY, SEC_ERROR_BASE + 14, | |
| 51 "Peer's public key is invalid.") | |
| 52 | |
| 53 ER3(SEC_ERROR_BAD_PASSWORD, SEC_ERROR_BASE + 15, | |
| 54 "The security password entered is incorrect.") | |
| 55 | |
| 56 ER3(SEC_ERROR_RETRY_PASSWORD, SEC_ERROR_BASE + 16, | |
| 57 "New password entered incorrectly. Please try again.") | |
| 58 | |
| 59 ER3(SEC_ERROR_NO_NODELOCK, SEC_ERROR_BASE + 17, | |
| 60 "security library: no nodelock.") | |
| 61 | |
| 62 ER3(SEC_ERROR_BAD_DATABASE, SEC_ERROR_BASE + 18, | |
| 63 "security library: bad database.") | |
| 64 | |
| 65 ER3(SEC_ERROR_NO_MEMORY, SEC_ERROR_BASE + 19, | |
| 66 "security library: memory allocation failure.") | |
| 67 | |
| 68 ER3(SEC_ERROR_UNTRUSTED_ISSUER, SEC_ERROR_BASE + 20, | |
| 69 "Peer's certificate issuer has been marked as not trusted by the user.") | |
| 70 | |
| 71 ER3(SEC_ERROR_UNTRUSTED_CERT, SEC_ERROR_BASE + 21, | |
| 72 "Peer's certificate has been marked as not trusted by the user.") | |
| 73 | |
| 74 ER3(SEC_ERROR_DUPLICATE_CERT, (SEC_ERROR_BASE + 22), | |
| 75 "Certificate already exists in your database.") | |
| 76 | |
| 77 ER3(SEC_ERROR_DUPLICATE_CERT_NAME, (SEC_ERROR_BASE + 23), | |
| 78 "Downloaded certificate's name duplicates one already in your database.") | |
| 79 | |
| 80 ER3(SEC_ERROR_ADDING_CERT, (SEC_ERROR_BASE + 24), | |
| 81 "Error adding certificate to database.") | |
| 82 | |
| 83 ER3(SEC_ERROR_FILING_KEY, (SEC_ERROR_BASE + 25), | |
| 84 "Error refiling the key for this certificate.") | |
| 85 | |
| 86 ER3(SEC_ERROR_NO_KEY, (SEC_ERROR_BASE + 26), | |
| 87 "The private key for this certificate cannot be found in key database") | |
| 88 | |
| 89 ER3(SEC_ERROR_CERT_VALID, (SEC_ERROR_BASE + 27), | |
| 90 "This certificate is valid.") | |
| 91 | |
| 92 ER3(SEC_ERROR_CERT_NOT_VALID, (SEC_ERROR_BASE + 28), | |
| 93 "This certificate is not valid.") | |
| 94 | |
| 95 ER3(SEC_ERROR_CERT_NO_RESPONSE, (SEC_ERROR_BASE + 29), | |
| 96 "Cert Library: No Response") | |
| 97 | |
| 98 ER3(SEC_ERROR_EXPIRED_ISSUER_CERTIFICATE, (SEC_ERROR_BASE + 30), | |
| 99 "The certificate issuer's certificate has expired. Check your system date and t
ime.") | |
| 100 | |
| 101 ER3(SEC_ERROR_CRL_EXPIRED, (SEC_ERROR_BASE + 31), | |
| 102 "The CRL for the certificate's issuer has expired. Update it or check your syst
em date and time.") | |
| 103 | |
| 104 ER3(SEC_ERROR_CRL_BAD_SIGNATURE, (SEC_ERROR_BASE + 32), | |
| 105 "The CRL for the certificate's issuer has an invalid signature.") | |
| 106 | |
| 107 ER3(SEC_ERROR_CRL_INVALID, (SEC_ERROR_BASE + 33), | |
| 108 "New CRL has an invalid format.") | |
| 109 | |
| 110 ER3(SEC_ERROR_EXTENSION_VALUE_INVALID, (SEC_ERROR_BASE + 34), | |
| 111 "Certificate extension value is invalid.") | |
| 112 | |
| 113 ER3(SEC_ERROR_EXTENSION_NOT_FOUND, (SEC_ERROR_BASE + 35), | |
| 114 "Certificate extension not found.") | |
| 115 | |
| 116 ER3(SEC_ERROR_CA_CERT_INVALID, (SEC_ERROR_BASE + 36), | |
| 117 "Issuer certificate is invalid.") | |
| 118 | |
| 119 ER3(SEC_ERROR_PATH_LEN_CONSTRAINT_INVALID, (SEC_ERROR_BASE + 37), | |
| 120 "Certificate path length constraint is invalid.") | |
| 121 | |
| 122 ER3(SEC_ERROR_CERT_USAGES_INVALID, (SEC_ERROR_BASE + 38), | |
| 123 "Certificate usages field is invalid.") | |
| 124 | |
| 125 ER3(SEC_INTERNAL_ONLY, (SEC_ERROR_BASE + 39), | |
| 126 "**Internal ONLY module**") | |
| 127 | |
| 128 ER3(SEC_ERROR_INVALID_KEY, (SEC_ERROR_BASE + 40), | |
| 129 "The key does not support the requested operation.") | |
| 130 | |
| 131 ER3(SEC_ERROR_UNKNOWN_CRITICAL_EXTENSION, (SEC_ERROR_BASE + 41), | |
| 132 "Certificate contains unknown critical extension.") | |
| 133 | |
| 134 ER3(SEC_ERROR_OLD_CRL, (SEC_ERROR_BASE + 42), | |
| 135 "New CRL is not later than the current one.") | |
| 136 | |
| 137 ER3(SEC_ERROR_NO_EMAIL_CERT, (SEC_ERROR_BASE + 43), | |
| 138 "Not encrypted or signed: you do not yet have an email certificate.") | |
| 139 | |
| 140 ER3(SEC_ERROR_NO_RECIPIENT_CERTS_QUERY, (SEC_ERROR_BASE + 44), | |
| 141 "Not encrypted: you do not have certificates for each of the recipients.") | |
| 142 | |
| 143 ER3(SEC_ERROR_NOT_A_RECIPIENT, (SEC_ERROR_BASE + 45), | |
| 144 "Cannot decrypt: you are not a recipient, or matching certificate and \ | |
| 145 private key not found.") | |
| 146 | |
| 147 ER3(SEC_ERROR_PKCS7_KEYALG_MISMATCH, (SEC_ERROR_BASE + 46), | |
| 148 "Cannot decrypt: key encryption algorithm does not match your certificate.") | |
| 149 | |
| 150 ER3(SEC_ERROR_PKCS7_BAD_SIGNATURE, (SEC_ERROR_BASE + 47), | |
| 151 "Signature verification failed: no signer found, too many signers found, \ | |
| 152 or improper or corrupted data.") | |
| 153 | |
| 154 ER3(SEC_ERROR_UNSUPPORTED_KEYALG, (SEC_ERROR_BASE + 48), | |
| 155 "Unsupported or unknown key algorithm.") | |
| 156 | |
| 157 ER3(SEC_ERROR_DECRYPTION_DISALLOWED, (SEC_ERROR_BASE + 49), | |
| 158 "Cannot decrypt: encrypted using a disallowed algorithm or key size.") | |
| 159 | |
| 160 | |
| 161 /* Fortezza Alerts */ | |
| 162 ER3(XP_SEC_FORTEZZA_BAD_CARD, (SEC_ERROR_BASE + 50), | |
| 163 "Fortezza card has not been properly initialized. \ | |
| 164 Please remove it and return it to your issuer.") | |
| 165 | |
| 166 ER3(XP_SEC_FORTEZZA_NO_CARD, (SEC_ERROR_BASE + 51), | |
| 167 "No Fortezza cards Found") | |
| 168 | |
| 169 ER3(XP_SEC_FORTEZZA_NONE_SELECTED, (SEC_ERROR_BASE + 52), | |
| 170 "No Fortezza card selected") | |
| 171 | |
| 172 ER3(XP_SEC_FORTEZZA_MORE_INFO, (SEC_ERROR_BASE + 53), | |
| 173 "Please select a personality to get more info on") | |
| 174 | |
| 175 ER3(XP_SEC_FORTEZZA_PERSON_NOT_FOUND, (SEC_ERROR_BASE + 54), | |
| 176 "Personality not found") | |
| 177 | |
| 178 ER3(XP_SEC_FORTEZZA_NO_MORE_INFO, (SEC_ERROR_BASE + 55), | |
| 179 "No more information on that Personality") | |
| 180 | |
| 181 ER3(XP_SEC_FORTEZZA_BAD_PIN, (SEC_ERROR_BASE + 56), | |
| 182 "Invalid Pin") | |
| 183 | |
| 184 ER3(XP_SEC_FORTEZZA_PERSON_ERROR, (SEC_ERROR_BASE + 57), | |
| 185 "Couldn't initialize Fortezza personalities.") | |
| 186 /* end fortezza alerts. */ | |
| 187 | |
| 188 ER3(SEC_ERROR_NO_KRL, (SEC_ERROR_BASE + 58), | |
| 189 "No KRL for this site's certificate has been found.") | |
| 190 | |
| 191 ER3(SEC_ERROR_KRL_EXPIRED, (SEC_ERROR_BASE + 59), | |
| 192 "The KRL for this site's certificate has expired.") | |
| 193 | |
| 194 ER3(SEC_ERROR_KRL_BAD_SIGNATURE, (SEC_ERROR_BASE + 60), | |
| 195 "The KRL for this site's certificate has an invalid signature.") | |
| 196 | |
| 197 ER3(SEC_ERROR_REVOKED_KEY, (SEC_ERROR_BASE + 61), | |
| 198 "The key for this site's certificate has been revoked.") | |
| 199 | |
| 200 ER3(SEC_ERROR_KRL_INVALID, (SEC_ERROR_BASE + 62), | |
| 201 "New KRL has an invalid format.") | |
| 202 | |
| 203 ER3(SEC_ERROR_NEED_RANDOM, (SEC_ERROR_BASE + 63), | |
| 204 "security library: need random data.") | |
| 205 | |
| 206 ER3(SEC_ERROR_NO_MODULE, (SEC_ERROR_BASE + 64), | |
| 207 "security library: no security module can perform the requested operation.") | |
| 208 | |
| 209 ER3(SEC_ERROR_NO_TOKEN, (SEC_ERROR_BASE + 65), | |
| 210 "The security card or token does not exist, needs to be initialized, or has been
removed.") | |
| 211 | |
| 212 ER3(SEC_ERROR_READ_ONLY, (SEC_ERROR_BASE + 66), | |
| 213 "security library: read-only database.") | |
| 214 | |
| 215 ER3(SEC_ERROR_NO_SLOT_SELECTED, (SEC_ERROR_BASE + 67), | |
| 216 "No slot or token was selected.") | |
| 217 | |
| 218 ER3(SEC_ERROR_CERT_NICKNAME_COLLISION, (SEC_ERROR_BASE + 68), | |
| 219 "A certificate with the same nickname already exists.") | |
| 220 | |
| 221 ER3(SEC_ERROR_KEY_NICKNAME_COLLISION, (SEC_ERROR_BASE + 69), | |
| 222 "A key with the same nickname already exists.") | |
| 223 | |
| 224 ER3(SEC_ERROR_SAFE_NOT_CREATED, (SEC_ERROR_BASE + 70), | |
| 225 "error while creating safe object") | |
| 226 | |
| 227 ER3(SEC_ERROR_BAGGAGE_NOT_CREATED, (SEC_ERROR_BASE + 71), | |
| 228 "error while creating baggage object") | |
| 229 | |
| 230 ER3(XP_JAVA_REMOVE_PRINCIPAL_ERROR, (SEC_ERROR_BASE + 72), | |
| 231 "Couldn't remove the principal") | |
| 232 | |
| 233 ER3(XP_JAVA_DELETE_PRIVILEGE_ERROR, (SEC_ERROR_BASE + 73), | |
| 234 "Couldn't delete the privilege") | |
| 235 | |
| 236 ER3(XP_JAVA_CERT_NOT_EXISTS_ERROR, (SEC_ERROR_BASE + 74), | |
| 237 "This principal doesn't have a certificate") | |
| 238 | |
| 239 ER3(SEC_ERROR_BAD_EXPORT_ALGORITHM, (SEC_ERROR_BASE + 75), | |
| 240 "Required algorithm is not allowed.") | |
| 241 | |
| 242 ER3(SEC_ERROR_EXPORTING_CERTIFICATES, (SEC_ERROR_BASE + 76), | |
| 243 "Error attempting to export certificates.") | |
| 244 | |
| 245 ER3(SEC_ERROR_IMPORTING_CERTIFICATES, (SEC_ERROR_BASE + 77), | |
| 246 "Error attempting to import certificates.") | |
| 247 | |
| 248 ER3(SEC_ERROR_PKCS12_DECODING_PFX, (SEC_ERROR_BASE + 78), | |
| 249 "Unable to import. Decoding error. File not valid.") | |
| 250 | |
| 251 ER3(SEC_ERROR_PKCS12_INVALID_MAC, (SEC_ERROR_BASE + 79), | |
| 252 "Unable to import. Invalid MAC. Incorrect password or corrupt file.") | |
| 253 | |
| 254 ER3(SEC_ERROR_PKCS12_UNSUPPORTED_MAC_ALGORITHM, (SEC_ERROR_BASE + 80), | |
| 255 "Unable to import. MAC algorithm not supported.") | |
| 256 | |
| 257 ER3(SEC_ERROR_PKCS12_UNSUPPORTED_TRANSPORT_MODE,(SEC_ERROR_BASE + 81), | |
| 258 "Unable to import. Only password integrity and privacy modes supported.") | |
| 259 | |
| 260 ER3(SEC_ERROR_PKCS12_CORRUPT_PFX_STRUCTURE, (SEC_ERROR_BASE + 82), | |
| 261 "Unable to import. File structure is corrupt.") | |
| 262 | |
| 263 ER3(SEC_ERROR_PKCS12_UNSUPPORTED_PBE_ALGORITHM, (SEC_ERROR_BASE + 83), | |
| 264 "Unable to import. Encryption algorithm not supported.") | |
| 265 | |
| 266 ER3(SEC_ERROR_PKCS12_UNSUPPORTED_VERSION, (SEC_ERROR_BASE + 84), | |
| 267 "Unable to import. File version not supported.") | |
| 268 | |
| 269 ER3(SEC_ERROR_PKCS12_PRIVACY_PASSWORD_INCORRECT,(SEC_ERROR_BASE + 85), | |
| 270 "Unable to import. Incorrect privacy password.") | |
| 271 | |
| 272 ER3(SEC_ERROR_PKCS12_CERT_COLLISION, (SEC_ERROR_BASE + 86), | |
| 273 "Unable to import. Same nickname already exists in database.") | |
| 274 | |
| 275 ER3(SEC_ERROR_USER_CANCELLED, (SEC_ERROR_BASE + 87), | |
| 276 "The user pressed cancel.") | |
| 277 | |
| 278 ER3(SEC_ERROR_PKCS12_DUPLICATE_DATA, (SEC_ERROR_BASE + 88), | |
| 279 "Not imported, already in database.") | |
| 280 | |
| 281 ER3(SEC_ERROR_MESSAGE_SEND_ABORTED, (SEC_ERROR_BASE + 89), | |
| 282 "Message not sent.") | |
| 283 | |
| 284 ER3(SEC_ERROR_INADEQUATE_KEY_USAGE, (SEC_ERROR_BASE + 90), | |
| 285 "Certificate key usage inadequate for attempted operation.") | |
| 286 | |
| 287 ER3(SEC_ERROR_INADEQUATE_CERT_TYPE, (SEC_ERROR_BASE + 91), | |
| 288 "Certificate type not approved for application.") | |
| 289 | |
| 290 ER3(SEC_ERROR_CERT_ADDR_MISMATCH, (SEC_ERROR_BASE + 92), | |
| 291 "Address in signing certificate does not match address in message headers.") | |
| 292 | |
| 293 ER3(SEC_ERROR_PKCS12_UNABLE_TO_IMPORT_KEY, (SEC_ERROR_BASE + 93), | |
| 294 "Unable to import. Error attempting to import private key.") | |
| 295 | |
| 296 ER3(SEC_ERROR_PKCS12_IMPORTING_CERT_CHAIN, (SEC_ERROR_BASE + 94), | |
| 297 "Unable to import. Error attempting to import certificate chain.") | |
| 298 | |
| 299 ER3(SEC_ERROR_PKCS12_UNABLE_TO_LOCATE_OBJECT_BY_NAME, (SEC_ERROR_BASE + 95), | |
| 300 "Unable to export. Unable to locate certificate or key by nickname.") | |
| 301 | |
| 302 ER3(SEC_ERROR_PKCS12_UNABLE_TO_EXPORT_KEY, (SEC_ERROR_BASE + 96), | |
| 303 "Unable to export. Private Key could not be located and exported.") | |
| 304 | |
| 305 ER3(SEC_ERROR_PKCS12_UNABLE_TO_WRITE, (SEC_ERROR_BASE + 97), | |
| 306 "Unable to export. Unable to write the export file.") | |
| 307 | |
| 308 ER3(SEC_ERROR_PKCS12_UNABLE_TO_READ, (SEC_ERROR_BASE + 98), | |
| 309 "Unable to import. Unable to read the import file.") | |
| 310 | |
| 311 ER3(SEC_ERROR_PKCS12_KEY_DATABASE_NOT_INITIALIZED, (SEC_ERROR_BASE + 99), | |
| 312 "Unable to export. Key database corrupt or deleted.") | |
| 313 | |
| 314 ER3(SEC_ERROR_KEYGEN_FAIL, (SEC_ERROR_BASE + 100), | |
| 315 "Unable to generate public/private key pair.") | |
| 316 | |
| 317 ER3(SEC_ERROR_INVALID_PASSWORD, (SEC_ERROR_BASE + 101), | |
| 318 "Password entered is invalid. Please pick a different one.") | |
| 319 | |
| 320 ER3(SEC_ERROR_RETRY_OLD_PASSWORD, (SEC_ERROR_BASE + 102), | |
| 321 "Old password entered incorrectly. Please try again.") | |
| 322 | |
| 323 ER3(SEC_ERROR_BAD_NICKNAME, (SEC_ERROR_BASE + 103), | |
| 324 "Certificate nickname already in use.") | |
| 325 | |
| 326 ER3(SEC_ERROR_NOT_FORTEZZA_ISSUER, (SEC_ERROR_BASE + 104), | |
| 327 "Peer FORTEZZA chain has a non-FORTEZZA Certificate.") | |
| 328 | |
| 329 ER3(SEC_ERROR_CANNOT_MOVE_SENSITIVE_KEY, (SEC_ERROR_BASE + 105), | |
| 330 "A sensitive key cannot be moved to the slot where it is needed.") | |
| 331 | |
| 332 ER3(SEC_ERROR_JS_INVALID_MODULE_NAME, (SEC_ERROR_BASE + 106), | |
| 333 "Invalid module name.") | |
| 334 | |
| 335 ER3(SEC_ERROR_JS_INVALID_DLL, (SEC_ERROR_BASE + 107), | |
| 336 "Invalid module path/filename") | |
| 337 | |
| 338 ER3(SEC_ERROR_JS_ADD_MOD_FAILURE, (SEC_ERROR_BASE + 108), | |
| 339 "Unable to add module") | |
| 340 | |
| 341 ER3(SEC_ERROR_JS_DEL_MOD_FAILURE, (SEC_ERROR_BASE + 109), | |
| 342 "Unable to delete module") | |
| 343 | |
| 344 ER3(SEC_ERROR_OLD_KRL, (SEC_ERROR_BASE + 110), | |
| 345 "New KRL is not later than the current one.") | |
| 346 | |
| 347 ER3(SEC_ERROR_CKL_CONFLICT, (SEC_ERROR_BASE + 111), | |
| 348 "New CKL has different issuer than current CKL. Delete current CKL.") | |
| 349 | |
| 350 ER3(SEC_ERROR_CERT_NOT_IN_NAME_SPACE, (SEC_ERROR_BASE + 112), | |
| 351 "The Certifying Authority for this certificate is not permitted to issue a \ | |
| 352 certificate with this name.") | |
| 353 | |
| 354 ER3(SEC_ERROR_KRL_NOT_YET_VALID, (SEC_ERROR_BASE + 113), | |
| 355 "The key revocation list for this certificate is not yet valid.") | |
| 356 | |
| 357 ER3(SEC_ERROR_CRL_NOT_YET_VALID, (SEC_ERROR_BASE + 114), | |
| 358 "The certificate revocation list for this certificate is not yet valid.") | |
| 359 | |
| 360 ER3(SEC_ERROR_UNKNOWN_CERT, (SEC_ERROR_BASE + 115), | |
| 361 "The requested certificate could not be found.") | |
| 362 | |
| 363 ER3(SEC_ERROR_UNKNOWN_SIGNER, (SEC_ERROR_BASE + 116), | |
| 364 "The signer's certificate could not be found.") | |
| 365 | |
| 366 ER3(SEC_ERROR_CERT_BAD_ACCESS_LOCATION, (SEC_ERROR_BASE + 117), | |
| 367 "The location for the certificate status server has invalid format.") | |
| 368 | |
| 369 ER3(SEC_ERROR_OCSP_UNKNOWN_RESPONSE_TYPE, (SEC_ERROR_BASE + 118), | |
| 370 "The OCSP response cannot be fully decoded; it is of an unknown type.") | |
| 371 | |
| 372 ER3(SEC_ERROR_OCSP_BAD_HTTP_RESPONSE, (SEC_ERROR_BASE + 119), | |
| 373 "The OCSP server returned unexpected/invalid HTTP data.") | |
| 374 | |
| 375 ER3(SEC_ERROR_OCSP_MALFORMED_REQUEST, (SEC_ERROR_BASE + 120), | |
| 376 "The OCSP server found the request to be corrupted or improperly formed.") | |
| 377 | |
| 378 ER3(SEC_ERROR_OCSP_SERVER_ERROR, (SEC_ERROR_BASE + 121), | |
| 379 "The OCSP server experienced an internal error.") | |
| 380 | |
| 381 ER3(SEC_ERROR_OCSP_TRY_SERVER_LATER, (SEC_ERROR_BASE + 122), | |
| 382 "The OCSP server suggests trying again later.") | |
| 383 | |
| 384 ER3(SEC_ERROR_OCSP_REQUEST_NEEDS_SIG, (SEC_ERROR_BASE + 123), | |
| 385 "The OCSP server requires a signature on this request.") | |
| 386 | |
| 387 ER3(SEC_ERROR_OCSP_UNAUTHORIZED_REQUEST, (SEC_ERROR_BASE + 124), | |
| 388 "The OCSP server has refused this request as unauthorized.") | |
| 389 | |
| 390 ER3(SEC_ERROR_OCSP_UNKNOWN_RESPONSE_STATUS, (SEC_ERROR_BASE + 125), | |
| 391 "The OCSP server returned an unrecognizable status.") | |
| 392 | |
| 393 ER3(SEC_ERROR_OCSP_UNKNOWN_CERT, (SEC_ERROR_BASE + 126), | |
| 394 "The OCSP server has no status for the certificate.") | |
| 395 | |
| 396 ER3(SEC_ERROR_OCSP_NOT_ENABLED, (SEC_ERROR_BASE + 127), | |
| 397 "You must enable OCSP before performing this operation.") | |
| 398 | |
| 399 ER3(SEC_ERROR_OCSP_NO_DEFAULT_RESPONDER, (SEC_ERROR_BASE + 128), | |
| 400 "You must set the OCSP default responder before performing this operation.") | |
| 401 | |
| 402 ER3(SEC_ERROR_OCSP_MALFORMED_RESPONSE, (SEC_ERROR_BASE + 129), | |
| 403 "The response from the OCSP server was corrupted or improperly formed.") | |
| 404 | |
| 405 ER3(SEC_ERROR_OCSP_UNAUTHORIZED_RESPONSE, (SEC_ERROR_BASE + 130), | |
| 406 "The signer of the OCSP response is not authorized to give status for \ | |
| 407 this certificate.") | |
| 408 | |
| 409 ER3(SEC_ERROR_OCSP_FUTURE_RESPONSE, (SEC_ERROR_BASE + 131), | |
| 410 "The OCSP response is not yet valid (contains a date in the future).") | |
| 411 | |
| 412 ER3(SEC_ERROR_OCSP_OLD_RESPONSE, (SEC_ERROR_BASE + 132), | |
| 413 "The OCSP response contains out-of-date information.") | |
| 414 | |
| 415 ER3(SEC_ERROR_DIGEST_NOT_FOUND, (SEC_ERROR_BASE + 133), | |
| 416 "The CMS or PKCS #7 Digest was not found in signed message.") | |
| 417 | |
| 418 ER3(SEC_ERROR_UNSUPPORTED_MESSAGE_TYPE, (SEC_ERROR_BASE + 134), | |
| 419 "The CMS or PKCS #7 Message type is unsupported.") | |
| 420 | |
| 421 ER3(SEC_ERROR_MODULE_STUCK, (SEC_ERROR_BASE + 135), | |
| 422 "PKCS #11 module could not be removed because it is still in use.") | |
| 423 | |
| 424 ER3(SEC_ERROR_BAD_TEMPLATE, (SEC_ERROR_BASE + 136), | |
| 425 "Could not decode ASN.1 data. Specified template was invalid.") | |
| 426 | |
| 427 ER3(SEC_ERROR_CRL_NOT_FOUND, (SEC_ERROR_BASE + 137), | |
| 428 "No matching CRL was found.") | |
| 429 | |
| 430 ER3(SEC_ERROR_REUSED_ISSUER_AND_SERIAL, (SEC_ERROR_BASE + 138), | |
| 431 "You are attempting to import a cert with the same issuer/serial as \ | |
| 432 an existing cert, but that is not the same cert.") | |
| 433 | |
| 434 ER3(SEC_ERROR_BUSY, (SEC_ERROR_BASE + 139), | |
| 435 "NSS could not shutdown. Objects are still in use.") | |
| 436 | |
| 437 ER3(SEC_ERROR_EXTRA_INPUT, (SEC_ERROR_BASE + 140), | |
| 438 "DER-encoded message contained extra unused data.") | |
| 439 | |
| 440 ER3(SEC_ERROR_UNSUPPORTED_ELLIPTIC_CURVE, (SEC_ERROR_BASE + 141), | |
| 441 "Unsupported elliptic curve.") | |
| 442 | |
| 443 ER3(SEC_ERROR_UNSUPPORTED_EC_POINT_FORM, (SEC_ERROR_BASE + 142), | |
| 444 "Unsupported elliptic curve point form.") | |
| 445 | |
| 446 ER3(SEC_ERROR_UNRECOGNIZED_OID, (SEC_ERROR_BASE + 143), | |
| 447 "Unrecognized Object Identifier.") | |
| 448 | |
| 449 ER3(SEC_ERROR_OCSP_INVALID_SIGNING_CERT, (SEC_ERROR_BASE + 144), | |
| 450 "Invalid OCSP signing certificate in OCSP response.") | |
| 451 | |
| 452 ER3(SEC_ERROR_REVOKED_CERTIFICATE_CRL, (SEC_ERROR_BASE + 145), | |
| 453 "Certificate is revoked in issuer's certificate revocation list.") | |
| 454 | |
| 455 ER3(SEC_ERROR_REVOKED_CERTIFICATE_OCSP, (SEC_ERROR_BASE + 146), | |
| 456 "Issuer's OCSP responder reports certificate is revoked.") | |
| 457 | |
| 458 ER3(SEC_ERROR_CRL_INVALID_VERSION, (SEC_ERROR_BASE + 147), | |
| 459 "Issuer's Certificate Revocation List has an unknown version number.") | |
| 460 | |
| 461 ER3(SEC_ERROR_CRL_V1_CRITICAL_EXTENSION, (SEC_ERROR_BASE + 148), | |
| 462 "Issuer's V1 Certificate Revocation List has a critical extension.") | |
| 463 | |
| 464 ER3(SEC_ERROR_CRL_UNKNOWN_CRITICAL_EXTENSION, (SEC_ERROR_BASE + 149), | |
| 465 "Issuer's V2 Certificate Revocation List has an unknown critical extension.") | |
| 466 | |
| 467 ER3(SEC_ERROR_UNKNOWN_OBJECT_TYPE, (SEC_ERROR_BASE + 150), | |
| 468 "Unknown object type specified.") | |
| 469 | |
| 470 ER3(SEC_ERROR_INCOMPATIBLE_PKCS11, (SEC_ERROR_BASE + 151), | |
| 471 "PKCS #11 driver violates the spec in an incompatible way.") | |
| 472 | |
| 473 ER3(SEC_ERROR_NO_EVENT, (SEC_ERROR_BASE + 152), | |
| 474 "No new slot event is available at this time.") | |
| 475 | |
| 476 ER3(SEC_ERROR_CRL_ALREADY_EXISTS, (SEC_ERROR_BASE + 153), | |
| 477 "CRL already exists.") | |
| 478 | |
| 479 ER3(SEC_ERROR_NOT_INITIALIZED, (SEC_ERROR_BASE + 154), | |
| 480 "NSS is not initialized.") | |
| 481 | |
| 482 ER3(SEC_ERROR_TOKEN_NOT_LOGGED_IN, (SEC_ERROR_BASE + 155), | |
| 483 "The operation failed because the PKCS#11 token is not logged in.") | |
| 484 | |
| 485 ER3(SEC_ERROR_OCSP_RESPONDER_CERT_INVALID, (SEC_ERROR_BASE + 156), | |
| 486 "Configured OCSP responder's certificate is invalid.") | |
| 487 | |
| 488 ER3(SEC_ERROR_OCSP_BAD_SIGNATURE, (SEC_ERROR_BASE + 157), | |
| 489 "OCSP response has an invalid signature.") | |
| 490 | |
| 491 ER3(SEC_ERROR_OUT_OF_SEARCH_LIMITS, (SEC_ERROR_BASE + 158), | |
| 492 "Cert validation search is out of search limits") | |
| 493 | |
| 494 ER3(SEC_ERROR_INVALID_POLICY_MAPPING, (SEC_ERROR_BASE + 159), | |
| 495 "Policy mapping contains anypolicy") | |
| 496 | |
| 497 ER3(SEC_ERROR_POLICY_VALIDATION_FAILED, (SEC_ERROR_BASE + 160), | |
| 498 "Cert chain fails policy validation") | |
| 499 | |
| 500 ER3(SEC_ERROR_UNKNOWN_AIA_LOCATION_TYPE, (SEC_ERROR_BASE + 161), | |
| 501 "Unknown location type in cert AIA extension") | |
| 502 | |
| 503 ER3(SEC_ERROR_BAD_HTTP_RESPONSE, (SEC_ERROR_BASE + 162), | |
| 504 "Server returned bad HTTP response") | |
| 505 | |
| 506 ER3(SEC_ERROR_BAD_LDAP_RESPONSE, (SEC_ERROR_BASE + 163), | |
| 507 "Server returned bad LDAP response") | |
| 508 | |
| 509 ER3(SEC_ERROR_FAILED_TO_ENCODE_DATA, (SEC_ERROR_BASE + 164), | |
| 510 "Failed to encode data with ASN1 encoder") | |
| 511 | |
| 512 ER3(SEC_ERROR_BAD_INFO_ACCESS_LOCATION, (SEC_ERROR_BASE + 165), | |
| 513 "Bad information access location in cert extension") | |
| 514 | |
| 515 ER3(SEC_ERROR_LIBPKIX_INTERNAL, (SEC_ERROR_BASE + 166), | |
| 516 "Libpkix internal error occurred during cert validation.") | |
| 517 | |
| 518 ER3(SEC_ERROR_PKCS11_GENERAL_ERROR, (SEC_ERROR_BASE + 167), | |
| 519 "A PKCS #11 module returned CKR_GENERAL_ERROR, indicating that an unrecoverable
error has occurred.") | |
| 520 | |
| 521 ER3(SEC_ERROR_PKCS11_FUNCTION_FAILED, (SEC_ERROR_BASE + 168), | |
| 522 "A PKCS #11 module returned CKR_FUNCTION_FAILED, indicating that the requested f
unction could not be performed. Trying the same operation again might succeed."
) | |
| 523 | |
| 524 ER3(SEC_ERROR_PKCS11_DEVICE_ERROR, (SEC_ERROR_BASE + 169), | |
| 525 "A PKCS #11 module returned CKR_DEVICE_ERROR, indicating that a problem has occu
rred with the token or slot.") | |
| 526 | |
| 527 ER3(SEC_ERROR_BAD_INFO_ACCESS_METHOD, (SEC_ERROR_BASE + 170), | |
| 528 "Unknown information access method in certificate extension.") | |
| 529 | |
| 530 ER3(SEC_ERROR_CRL_IMPORT_FAILED, (SEC_ERROR_BASE + 171), | |
| 531 "Error attempting to import a CRL.") | |
| 532 | |
| 533 ER3(SEC_ERROR_EXPIRED_PASSWORD, (SEC_ERROR_BASE + 172), | |
| 534 "The password expired.") | |
| 535 | |
| 536 ER3(SEC_ERROR_LOCKED_PASSWORD, (SEC_ERROR_BASE + 173), | |
| 537 "The password is locked.") | |
| 538 | |
| 539 ER3(SEC_ERROR_UNKNOWN_PKCS11_ERROR, (SEC_ERROR_BASE + 174), | |
| 540 "Unknown PKCS #11 error.") | |
| 541 | |
| 542 ER3(SEC_ERROR_BAD_CRL_DP_URL, (SEC_ERROR_BASE + 175), | |
| 543 "Invalid or unsupported URL in CRL distribution point name.") | |
| 544 | |
| 545 ER3(SEC_ERROR_CERT_SIGNATURE_ALGORITHM_DISABLED, (SEC_ERROR_BASE + 176), | |
| 546 "The certificate was signed using a signature algorithm that is disabled because
it is not secure.") | |
| 547 | |
| 548 ER3(SEC_ERROR_LEGACY_DATABASE, (SEC_ERROR_BASE + 177), | |
| 549 "The certificate/key database is in an old, unsupported format.") | |
| 550 | |
| 551 ER3(SEC_ERROR_APPLICATION_CALLBACK_ERROR, (SEC_ERROR_BASE + 178), | |
| 552 "The certificate was rejected by extra checks in the application.") | |
| 553 | |
| OLD | NEW |