1 | /* error-ssl.h
|
---|
2 | *
|
---|
3 | * Copyright (C) 2006-2017 wolfSSL Inc.
|
---|
4 | *
|
---|
5 | * This file is part of wolfSSL.
|
---|
6 | *
|
---|
7 | * wolfSSL is free software; you can redistribute it and/or modify
|
---|
8 | * it under the terms of the GNU General Public License as published by
|
---|
9 | * the Free Software Foundation; either version 2 of the License, or
|
---|
10 | * (at your option) any later version.
|
---|
11 | *
|
---|
12 | * wolfSSL is distributed in the hope that it will be useful,
|
---|
13 | * but WITHOUT ANY WARRANTY; without even the implied warranty of
|
---|
14 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
---|
15 | * GNU General Public License for more details.
|
---|
16 | *
|
---|
17 | * You should have received a copy of the GNU General Public License
|
---|
18 | * along with this program; if not, write to the Free Software
|
---|
19 | * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1335, USA
|
---|
20 | */
|
---|
21 |
|
---|
22 |
|
---|
23 |
|
---|
24 | #ifndef WOLFSSL_ERROR_H
|
---|
25 | #define WOLFSSL_ERROR_H
|
---|
26 |
|
---|
27 | #include <wolfssl/wolfcrypt/error-crypt.h> /* pull in wolfCrypt errors */
|
---|
28 |
|
---|
29 | #ifdef __cplusplus
|
---|
30 | extern "C" {
|
---|
31 | #endif
|
---|
32 |
|
---|
33 | enum wolfSSL_ErrorCodes {
|
---|
34 | INPUT_CASE_ERROR = -301, /* process input state error */
|
---|
35 | PREFIX_ERROR = -302, /* bad index to key rounds */
|
---|
36 | MEMORY_ERROR = -303, /* out of memory */
|
---|
37 | VERIFY_FINISHED_ERROR = -304, /* verify problem on finished */
|
---|
38 | VERIFY_MAC_ERROR = -305, /* verify mac problem */
|
---|
39 | PARSE_ERROR = -306, /* parse error on header */
|
---|
40 | UNKNOWN_HANDSHAKE_TYPE = -307, /* weird handshake type */
|
---|
41 | SOCKET_ERROR_E = -308, /* error state on socket */
|
---|
42 | SOCKET_NODATA = -309, /* expected data, not there */
|
---|
43 | INCOMPLETE_DATA = -310, /* don't have enough data to
|
---|
44 | complete task */
|
---|
45 | UNKNOWN_RECORD_TYPE = -311, /* unknown type in record hdr */
|
---|
46 | DECRYPT_ERROR = -312, /* error during decryption */
|
---|
47 | FATAL_ERROR = -313, /* recvd alert fatal error */
|
---|
48 | ENCRYPT_ERROR = -314, /* error during encryption */
|
---|
49 | FREAD_ERROR = -315, /* fread problem */
|
---|
50 | NO_PEER_KEY = -316, /* need peer's key */
|
---|
51 | NO_PRIVATE_KEY = -317, /* need the private key */
|
---|
52 | RSA_PRIVATE_ERROR = -318, /* error during rsa priv op */
|
---|
53 | NO_DH_PARAMS = -319, /* server missing DH params */
|
---|
54 | BUILD_MSG_ERROR = -320, /* build message failure */
|
---|
55 |
|
---|
56 | BAD_HELLO = -321, /* client hello malformed */
|
---|
57 | DOMAIN_NAME_MISMATCH = -322, /* peer subject name mismatch */
|
---|
58 | WANT_READ = -323, /* want read, call again */
|
---|
59 | NOT_READY_ERROR = -324, /* handshake layer not ready */
|
---|
60 |
|
---|
61 | VERSION_ERROR = -326, /* record layer version error */
|
---|
62 | WANT_WRITE = -327, /* want write, call again */
|
---|
63 | BUFFER_ERROR = -328, /* malformed buffer input */
|
---|
64 | VERIFY_CERT_ERROR = -329, /* verify cert error */
|
---|
65 | VERIFY_SIGN_ERROR = -330, /* verify sign error */
|
---|
66 | CLIENT_ID_ERROR = -331, /* psk client identity error */
|
---|
67 | SERVER_HINT_ERROR = -332, /* psk server hint error */
|
---|
68 | PSK_KEY_ERROR = -333, /* psk key error */
|
---|
69 |
|
---|
70 | GETTIME_ERROR = -337, /* gettimeofday failed ??? */
|
---|
71 | GETITIMER_ERROR = -338, /* getitimer failed ??? */
|
---|
72 | SIGACT_ERROR = -339, /* sigaction failed ??? */
|
---|
73 | SETITIMER_ERROR = -340, /* setitimer failed ??? */
|
---|
74 | LENGTH_ERROR = -341, /* record layer length error */
|
---|
75 | PEER_KEY_ERROR = -342, /* can't decode peer key */
|
---|
76 | ZERO_RETURN = -343, /* peer sent close notify */
|
---|
77 | SIDE_ERROR = -344, /* wrong client/server type */
|
---|
78 | NO_PEER_CERT = -345, /* peer didn't send key */
|
---|
79 | NTRU_KEY_ERROR = -346, /* NTRU key error */
|
---|
80 | NTRU_DRBG_ERROR = -347, /* NTRU drbg error */
|
---|
81 | NTRU_ENCRYPT_ERROR = -348, /* NTRU encrypt error */
|
---|
82 | NTRU_DECRYPT_ERROR = -349, /* NTRU decrypt error */
|
---|
83 | ECC_CURVETYPE_ERROR = -350, /* Bad ECC Curve Type */
|
---|
84 | ECC_CURVE_ERROR = -351, /* Bad ECC Curve */
|
---|
85 | ECC_PEERKEY_ERROR = -352, /* Bad Peer ECC Key */
|
---|
86 | ECC_MAKEKEY_ERROR = -353, /* Bad Make ECC Key */
|
---|
87 | ECC_EXPORT_ERROR = -354, /* Bad ECC Export Key */
|
---|
88 | ECC_SHARED_ERROR = -355, /* Bad ECC Shared Secret */
|
---|
89 | NOT_CA_ERROR = -357, /* Not a CA cert error */
|
---|
90 |
|
---|
91 | BAD_CERT_MANAGER_ERROR = -359, /* Bad Cert Manager */
|
---|
92 | OCSP_CERT_REVOKED = -360, /* OCSP Certificate revoked */
|
---|
93 | CRL_CERT_REVOKED = -361, /* CRL Certificate revoked */
|
---|
94 | CRL_MISSING = -362, /* CRL Not loaded */
|
---|
95 | MONITOR_SETUP_E = -363, /* CRL Monitor setup error */
|
---|
96 | THREAD_CREATE_E = -364, /* Thread Create Error */
|
---|
97 | OCSP_NEED_URL = -365, /* OCSP need an URL for lookup */
|
---|
98 | OCSP_CERT_UNKNOWN = -366, /* OCSP responder doesn't know */
|
---|
99 | OCSP_LOOKUP_FAIL = -367, /* OCSP lookup not successful */
|
---|
100 | MAX_CHAIN_ERROR = -368, /* max chain depth exceeded */
|
---|
101 | COOKIE_ERROR = -369, /* dtls cookie error */
|
---|
102 | SEQUENCE_ERROR = -370, /* dtls sequence error */
|
---|
103 | SUITES_ERROR = -371, /* suites pointer error */
|
---|
104 |
|
---|
105 | OUT_OF_ORDER_E = -373, /* out of order message */
|
---|
106 | BAD_KEA_TYPE_E = -374, /* bad KEA type found */
|
---|
107 | SANITY_CIPHER_E = -375, /* sanity check on cipher error */
|
---|
108 | RECV_OVERFLOW_E = -376, /* RXCB returned more than rqed */
|
---|
109 | GEN_COOKIE_E = -377, /* Generate Cookie Error */
|
---|
110 | NO_PEER_VERIFY = -378, /* Need peer cert verify Error */
|
---|
111 | FWRITE_ERROR = -379, /* fwrite problem */
|
---|
112 | CACHE_MATCH_ERROR = -380, /* chache hdr match error */
|
---|
113 | UNKNOWN_SNI_HOST_NAME_E = -381, /* Unrecognized host name Error */
|
---|
114 | UNKNOWN_MAX_FRAG_LEN_E = -382, /* Unrecognized max frag len Error */
|
---|
115 | KEYUSE_SIGNATURE_E = -383, /* KeyUse digSignature error */
|
---|
116 | KEYUSE_ENCIPHER_E = -385, /* KeyUse keyEncipher error */
|
---|
117 | EXTKEYUSE_AUTH_E = -386, /* ExtKeyUse server|client_auth */
|
---|
118 | SEND_OOB_READ_E = -387, /* Send Cb out of bounds read */
|
---|
119 | SECURE_RENEGOTIATION_E = -388, /* Invalid Renegotiation Info */
|
---|
120 | SESSION_TICKET_LEN_E = -389, /* Session Ticket too large */
|
---|
121 | SESSION_TICKET_EXPECT_E = -390, /* Session Ticket missing */
|
---|
122 | SCR_DIFFERENT_CERT_E = -391, /* SCR Different cert error */
|
---|
123 | SESSION_SECRET_CB_E = -392, /* Session secret Cb fcn failure */
|
---|
124 | NO_CHANGE_CIPHER_E = -393, /* Finished before change cipher */
|
---|
125 | SANITY_MSG_E = -394, /* Sanity check on msg order error */
|
---|
126 | DUPLICATE_MSG_E = -395, /* Duplicate message error */
|
---|
127 | SNI_UNSUPPORTED = -396, /* SSL 3.0 does not support SNI */
|
---|
128 | SOCKET_PEER_CLOSED_E = -397, /* Underlying transport closed */
|
---|
129 |
|
---|
130 | BAD_TICKET_KEY_CB_SZ = -398, /* Bad session ticket key cb size */
|
---|
131 | BAD_TICKET_MSG_SZ = -399, /* Bad session ticket msg size */
|
---|
132 | BAD_TICKET_ENCRYPT = -400, /* Bad user ticket encrypt */
|
---|
133 |
|
---|
134 | DH_KEY_SIZE_E = -401, /* DH Key too small */
|
---|
135 | SNI_ABSENT_ERROR = -402, /* No SNI request. */
|
---|
136 | RSA_SIGN_FAULT = -403, /* RSA Sign fault */
|
---|
137 | HANDSHAKE_SIZE_ERROR = -404, /* Handshake message too large */
|
---|
138 |
|
---|
139 | UNKNOWN_ALPN_PROTOCOL_NAME_E = -405, /* Unrecognized protocol name Error*/
|
---|
140 | BAD_CERTIFICATE_STATUS_ERROR = -406, /* Bad certificate status message */
|
---|
141 | OCSP_INVALID_STATUS = -407, /* Invalid OCSP Status */
|
---|
142 | OCSP_WANT_READ = -408, /* OCSP callback response WOLFSSL_CBIO_ERR_WANT_READ */
|
---|
143 | RSA_KEY_SIZE_E = -409, /* RSA key too small */
|
---|
144 | ECC_KEY_SIZE_E = -410, /* ECC key too small */
|
---|
145 |
|
---|
146 | DTLS_EXPORT_VER_E = -411, /* export version error */
|
---|
147 | INPUT_SIZE_E = -412, /* input size too big error */
|
---|
148 | CTX_INIT_MUTEX_E = -413, /* initialize ctx mutex error */
|
---|
149 | EXT_MASTER_SECRET_NEEDED_E = -414, /* need EMS enabled to resume */
|
---|
150 | DTLS_POOL_SZ_E = -415, /* exceeded DTLS pool size */
|
---|
151 | DECODE_E = -416, /* decode handshake message error */
|
---|
152 | HTTP_TIMEOUT = -417, /* HTTP timeout for OCSP or CRL req */
|
---|
153 | WRITE_DUP_READ_E = -418, /* Write dup write side can't read */
|
---|
154 | WRITE_DUP_WRITE_E = -419, /* Write dup read side can't write */
|
---|
155 | INVALID_CERT_CTX_E = -420, /* TLS cert ctx not matching */
|
---|
156 | BAD_KEY_SHARE_DATA = -421, /* Key Share data invalid */
|
---|
157 | MISSING_HANDSHAKE_DATA = -422, /* Handshake message missing data */
|
---|
158 | BAD_BINDER = -423, /* Binder does not match */
|
---|
159 | EXT_NOT_ALLOWED = -424, /* Extension not allowed in msg */
|
---|
160 | INVALID_PARAMETER = -425, /* Security parameter invalid */
|
---|
161 | MCAST_HIGHWATER_CB_E = -426, /* Multicast highwater cb err */
|
---|
162 | ALERT_COUNT_E = -427, /* Alert Count exceeded err */
|
---|
163 | EXT_MISSING = -428, /* Required extension not found */
|
---|
164 | UNSUPPORTED_EXTENSION = -429, /* TLSX not requested by client */
|
---|
165 | /* add strings to wolfSSL_ERR_reason_error_string in internal.c !!!!! */
|
---|
166 |
|
---|
167 | /* begin negotiation parameter errors */
|
---|
168 | UNSUPPORTED_SUITE = -500, /* unsupported cipher suite */
|
---|
169 | MATCH_SUITE_ERROR = -501, /* can't match cipher suite */
|
---|
170 | COMPRESSION_ERROR = -502, /* compression mismatch */
|
---|
171 | KEY_SHARE_ERROR = -503, /* key share mismatch */
|
---|
172 | POST_HAND_AUTH_ERROR = -504, /* client won't do post-hand auth */
|
---|
173 | HRR_COOKIE_ERROR = -505 /* HRR msg cookie mismatch */
|
---|
174 | /* end negotiation parameter errors only 10 for now */
|
---|
175 | /* add strings to wolfSSL_ERR_reason_error_string in internal.c !!!!! */
|
---|
176 |
|
---|
177 | /* no error stings go down here, add above negotiation errors !!!! */
|
---|
178 | };
|
---|
179 |
|
---|
180 |
|
---|
181 | #if defined(WOLFSSL_CALLBACKS) || defined(OPENSSL_EXTRA)
|
---|
182 | enum {
|
---|
183 | MIN_PARAM_ERR = UNSUPPORTED_SUITE,
|
---|
184 | MAX_PARAM_ERR = MIN_PARAM_ERR - 10
|
---|
185 | };
|
---|
186 | #endif
|
---|
187 |
|
---|
188 |
|
---|
189 | WOLFSSL_LOCAL
|
---|
190 | void SetErrorString(int err, char* buff);
|
---|
191 |
|
---|
192 |
|
---|
193 | #ifdef __cplusplus
|
---|
194 | } /* extern "C" */
|
---|
195 | #endif
|
---|
196 |
|
---|
197 |
|
---|
198 | #endif /* wolfSSL_ERROR_H */
|
---|