error-ssl.h
1 /* error-ssl.h
2  *
3  * Copyright (C) 2006-2020 wolfSSL Inc.
4  *
5  * This file is part of wolfSSL.
6  *
7  * wolfSSL is free software; you can redistribute it and/or modify
8  * it under the terms of the GNU General Public License as published by
9  * the Free Software Foundation; either version 2 of the License, or
10  * (at your option) any later version.
11  *
12  * wolfSSL is distributed in the hope that it will be useful,
13  * but WITHOUT ANY WARRANTY; without even the implied warranty of
14  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15  * GNU General Public License for more details.
16  *
17  * You should have received a copy of the GNU General Public License
18  * along with this program; if not, write to the Free Software
19  * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1335, USA
20  */
21 
22 
23 
24 #ifndef WOLFSSL_ERROR_H
25 #define WOLFSSL_ERROR_H
26 
27 #include <wolfssl/wolfcrypt/error-crypt.h> /* pull in wolfCrypt errors */
28 
29 #ifdef __cplusplus
30  extern "C" {
31 #endif
32 
33 enum wolfSSL_ErrorCodes {
34  INPUT_CASE_ERROR = -301, /* process input state error */
35  PREFIX_ERROR = -302, /* bad index to key rounds */
36  MEMORY_ERROR = -303, /* out of memory */
37  VERIFY_FINISHED_ERROR = -304, /* verify problem on finished */
38  VERIFY_MAC_ERROR = -305, /* verify mac problem */
39  PARSE_ERROR = -306, /* parse error on header */
40  UNKNOWN_HANDSHAKE_TYPE = -307, /* weird handshake type */
41  SOCKET_ERROR_E = -308, /* error state on socket */
42  SOCKET_NODATA = -309, /* expected data, not there */
43  INCOMPLETE_DATA = -310, /* don't have enough data to
44  complete task */
45  UNKNOWN_RECORD_TYPE = -311, /* unknown type in record hdr */
46  DECRYPT_ERROR = -312, /* error during decryption */
47  FATAL_ERROR = -313, /* recvd alert fatal error */
48  ENCRYPT_ERROR = -314, /* error during encryption */
49  FREAD_ERROR = -315, /* fread problem */
50  NO_PEER_KEY = -316, /* need peer's key */
51  NO_PRIVATE_KEY = -317, /* need the private key */
52  RSA_PRIVATE_ERROR = -318, /* error during rsa priv op */
53  NO_DH_PARAMS = -319, /* server missing DH params */
54  BUILD_MSG_ERROR = -320, /* build message failure */
55 
56  BAD_HELLO = -321, /* client hello malformed */
57  DOMAIN_NAME_MISMATCH = -322, /* peer subject name mismatch */
58  WANT_READ = -323, /* want read, call again */
59  NOT_READY_ERROR = -324, /* handshake layer not ready */
60  IPADDR_MISMATCH = -325, /* peer ip address mismatch */
61  VERSION_ERROR = -326, /* record layer version error */
62  WANT_WRITE = -327, /* want write, call again */
63  BUFFER_ERROR = -328, /* malformed buffer input */
64  VERIFY_CERT_ERROR = -329, /* verify cert error */
65  VERIFY_SIGN_ERROR = -330, /* verify sign error */
66  CLIENT_ID_ERROR = -331, /* psk client identity error */
67  SERVER_HINT_ERROR = -332, /* psk server hint error */
68  PSK_KEY_ERROR = -333, /* psk key error */
69 
70  GETTIME_ERROR = -337, /* gettimeofday failed ??? */
71  GETITIMER_ERROR = -338, /* getitimer failed ??? */
72  SIGACT_ERROR = -339, /* sigaction failed ??? */
73  SETITIMER_ERROR = -340, /* setitimer failed ??? */
74  LENGTH_ERROR = -341, /* record layer length error */
75  PEER_KEY_ERROR = -342, /* can't decode peer key */
76  ZERO_RETURN = -343, /* peer sent close notify */
77  SIDE_ERROR = -344, /* wrong client/server type */
78  NO_PEER_CERT = -345, /* peer didn't send key */
79  NTRU_KEY_ERROR = -346, /* NTRU key error */
80  NTRU_DRBG_ERROR = -347, /* NTRU drbg error */
81  NTRU_ENCRYPT_ERROR = -348, /* NTRU encrypt error */
82  NTRU_DECRYPT_ERROR = -349, /* NTRU decrypt error */
83  ECC_CURVETYPE_ERROR = -350, /* Bad ECC Curve Type */
84  ECC_CURVE_ERROR = -351, /* Bad ECC Curve */
85  ECC_PEERKEY_ERROR = -352, /* Bad Peer ECC Key */
86  ECC_MAKEKEY_ERROR = -353, /* Bad Make ECC Key */
87  ECC_EXPORT_ERROR = -354, /* Bad ECC Export Key */
88  ECC_SHARED_ERROR = -355, /* Bad ECC Shared Secret */
89  NOT_CA_ERROR = -357, /* Not a CA cert error */
90 
91  BAD_CERT_MANAGER_ERROR = -359, /* Bad Cert Manager */
92  OCSP_CERT_REVOKED = -360, /* OCSP Certificate revoked */
93  CRL_CERT_REVOKED = -361, /* CRL Certificate revoked */
94  CRL_MISSING = -362, /* CRL Not loaded */
95  MONITOR_SETUP_E = -363, /* CRL Monitor setup error */
96  THREAD_CREATE_E = -364, /* Thread Create Error */
97  OCSP_NEED_URL = -365, /* OCSP need an URL for lookup */
98  OCSP_CERT_UNKNOWN = -366, /* OCSP responder doesn't know */
99  OCSP_LOOKUP_FAIL = -367, /* OCSP lookup not successful */
100  MAX_CHAIN_ERROR = -368, /* max chain depth exceeded */
101  COOKIE_ERROR = -369, /* dtls cookie error */
102  SEQUENCE_ERROR = -370, /* dtls sequence error */
103  SUITES_ERROR = -371, /* suites pointer error */
104 
105  OUT_OF_ORDER_E = -373, /* out of order message */
106  BAD_KEA_TYPE_E = -374, /* bad KEA type found */
107  SANITY_CIPHER_E = -375, /* sanity check on cipher error */
108  RECV_OVERFLOW_E = -376, /* RXCB returned more than read */
109  GEN_COOKIE_E = -377, /* Generate Cookie Error */
110  NO_PEER_VERIFY = -378, /* Need peer cert verify Error */
111  FWRITE_ERROR = -379, /* fwrite problem */
112  CACHE_MATCH_ERROR = -380, /* Cache hdr match error */
113  UNKNOWN_SNI_HOST_NAME_E = -381, /* Unrecognized host name Error */
114  UNKNOWN_MAX_FRAG_LEN_E = -382, /* Unrecognized max frag len Error */
115  KEYUSE_SIGNATURE_E = -383, /* KeyUse digSignature error */
116  KEYUSE_ENCIPHER_E = -385, /* KeyUse keyEncipher error */
117  EXTKEYUSE_AUTH_E = -386, /* ExtKeyUse server|client_auth */
118  SEND_OOB_READ_E = -387, /* Send Cb out of bounds read */
119  SECURE_RENEGOTIATION_E = -388, /* Invalid Renegotiation Info */
120  SESSION_TICKET_LEN_E = -389, /* Session Ticket too large */
121  SESSION_TICKET_EXPECT_E = -390, /* Session Ticket missing */
122  SCR_DIFFERENT_CERT_E = -391, /* SCR Different cert error */
123  SESSION_SECRET_CB_E = -392, /* Session secret Cb fcn failure */
124  NO_CHANGE_CIPHER_E = -393, /* Finished before change cipher */
125  SANITY_MSG_E = -394, /* Sanity check on msg order error */
126  DUPLICATE_MSG_E = -395, /* Duplicate message error */
127  SNI_UNSUPPORTED = -396, /* SSL 3.0 does not support SNI */
128  SOCKET_PEER_CLOSED_E = -397, /* Underlying transport closed */
129  BAD_TICKET_KEY_CB_SZ = -398, /* Bad session ticket key cb size */
130  BAD_TICKET_MSG_SZ = -399, /* Bad session ticket msg size */
131  BAD_TICKET_ENCRYPT = -400, /* Bad user ticket encrypt */
132  DH_KEY_SIZE_E = -401, /* DH Key too small */
133  SNI_ABSENT_ERROR = -402, /* No SNI request. */
134  RSA_SIGN_FAULT = -403, /* RSA Sign fault */
135  HANDSHAKE_SIZE_ERROR = -404, /* Handshake message too large */
136  UNKNOWN_ALPN_PROTOCOL_NAME_E = -405, /* Unrecognized protocol name Error*/
137  BAD_CERTIFICATE_STATUS_ERROR = -406, /* Bad certificate status message */
138  OCSP_INVALID_STATUS = -407, /* Invalid OCSP Status */
139  OCSP_WANT_READ = -408, /* OCSP callback response WOLFSSL_CBIO_ERR_WANT_READ */
140  RSA_KEY_SIZE_E = -409, /* RSA key too small */
141  ECC_KEY_SIZE_E = -410, /* ECC key too small */
142  DTLS_EXPORT_VER_E = -411, /* export version error */
143  INPUT_SIZE_E = -412, /* input size too big error */
144  CTX_INIT_MUTEX_E = -413, /* initialize ctx mutex error */
145  EXT_MASTER_SECRET_NEEDED_E = -414, /* need EMS enabled to resume */
146  DTLS_POOL_SZ_E = -415, /* exceeded DTLS pool size */
147  DECODE_E = -416, /* decode handshake message error */
148  HTTP_TIMEOUT = -417, /* HTTP timeout for OCSP or CRL req */
149  WRITE_DUP_READ_E = -418, /* Write dup write side can't read */
150  WRITE_DUP_WRITE_E = -419, /* Write dup read side can't write */
151  INVALID_CERT_CTX_E = -420, /* TLS cert ctx not matching */
152  BAD_KEY_SHARE_DATA = -421, /* Key Share data invalid */
153  MISSING_HANDSHAKE_DATA = -422, /* Handshake message missing data */
154  BAD_BINDER = -423, /* Binder does not match */
155  EXT_NOT_ALLOWED = -424, /* Extension not allowed in msg */
156  INVALID_PARAMETER = -425, /* Security parameter invalid */
157  MCAST_HIGHWATER_CB_E = -426, /* Multicast highwater cb err */
158  ALERT_COUNT_E = -427, /* Alert Count exceeded err */
159  EXT_MISSING = -428, /* Required extension not found */
160  UNSUPPORTED_EXTENSION = -429, /* TLSX not requested by client */
161  PRF_MISSING = -430, /* PRF not compiled in */
162  DTLS_RETX_OVER_TX = -431, /* Retransmit DTLS flight over */
163  DH_PARAMS_NOT_FFDHE_E = -432, /* DH params from server not FFDHE */
164  TCA_INVALID_ID_TYPE = -433, /* TLSX TCA ID type invalid */
165  TCA_ABSENT_ERROR = -434, /* TLSX TCA ID no response */
166  TSIP_MAC_DIGSZ_E = -435, /* Invalid MAC size for TSIP */
167  CLIENT_CERT_CB_ERROR = -436, /* Client cert callback error */
168  SSL_SHUTDOWN_ALREADY_DONE_E = -437, /* Shutdown called redundantly */
169  TLS13_SECRET_CB_E = -438, /* TLS1.3 secret Cb fcn failure */
170 
171  /* add strings to wolfSSL_ERR_reason_error_string in internal.c !!!!! */
172 
173  /* begin negotiation parameter errors */
174  UNSUPPORTED_SUITE = -500, /* unsupported cipher suite */
175  MATCH_SUITE_ERROR = -501, /* can't match cipher suite */
176  COMPRESSION_ERROR = -502, /* compression mismatch */
177  KEY_SHARE_ERROR = -503, /* key share mismatch */
178  POST_HAND_AUTH_ERROR = -504, /* client won't do post-hand auth */
179  HRR_COOKIE_ERROR = -505 /* HRR msg cookie mismatch */
180  /* end negotiation parameter errors only 10 for now */
181  /* add strings to wolfSSL_ERR_reason_error_string in internal.c !!!!! */
182 
183  /* no error stings go down here, add above negotiation errors !!!! */
184 };
185 
186 
187 #if defined(WOLFSSL_CALLBACKS) || defined(OPENSSL_EXTRA)
188  enum {
189  MIN_PARAM_ERR = UNSUPPORTED_SUITE,
190  MAX_PARAM_ERR = MIN_PARAM_ERR - 10
191  };
192 #endif
193 
194 
195 WOLFSSL_LOCAL
196 void SetErrorString(int err, char* buff);
197 
198 
199 #ifdef __cplusplus
200  } /* extern "C" */
201 #endif
202 
203 
204 #endif /* wolfSSL_ERROR_H */