1 /* $OpenBSD: x509_err.c,v 1.23 2024/06/24 06:43:23 tb Exp $ */
2 /* ====================================================================
3 * Copyright (c) 1999-2006 The OpenSSL Project. All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
7 * are met:
8 *
9 * 1. Redistributions of source code must retain the above copyright
10 * notice, this list of conditions and the following disclaimer.
11 *
12 * 2. Redistributions in binary form must reproduce the above copyright
13 * notice, this list of conditions and the following disclaimer in
14 * the documentation and/or other materials provided with the
15 * distribution.
16 *
17 * 3. All advertising materials mentioning features or use of this
18 * software must display the following acknowledgment:
19 * "This product includes software developed by the OpenSSL Project
20 * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
21 *
22 * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
23 * endorse or promote products derived from this software without
24 * prior written permission. For written permission, please contact
25 * openssl-core@OpenSSL.org.
26 *
27 * 5. Products derived from this software may not be called "OpenSSL"
28 * nor may "OpenSSL" appear in their names without prior written
29 * permission of the OpenSSL Project.
30 *
31 * 6. Redistributions of any form whatsoever must retain the following
32 * acknowledgment:
33 * "This product includes software developed by the OpenSSL Project
34 * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
35 *
36 * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
37 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
38 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
39 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
40 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
41 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
42 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
43 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
44 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
45 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
46 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
47 * OF THE POSSIBILITY OF SUCH DAMAGE.
48 * ====================================================================
49 *
50 * This product includes cryptographic software written by Eric Young
51 * (eay@cryptsoft.com). This product includes software written by Tim
52 * Hudson (tjh@cryptsoft.com).
53 *
54 */
55
56 #include <stdio.h>
57
58 #include <openssl/opensslconf.h>
59
60 #include <openssl/err.h>
61 #include <openssl/x509.h>
62 #include <openssl/x509v3.h>
63
64 #include "err_local.h"
65
66 #ifndef OPENSSL_NO_ERR
67
68 #define ERR_FUNC(func) ERR_PACK(ERR_LIB_X509,func,0)
69 #define ERR_REASON(reason) ERR_PACK(ERR_LIB_X509,0,reason)
70
71 static const ERR_STRING_DATA X509_str_functs[] = {
72 {ERR_FUNC(0xfff), "CRYPTO_internal"},
73 {0, NULL}
74 };
75
76 static const ERR_STRING_DATA X509_str_reasons[] = {
77 {ERR_REASON(X509_R_BAD_X509_FILETYPE) , "bad x509 filetype"},
78 {ERR_REASON(X509_R_BASE64_DECODE_ERROR) , "base64 decode error"},
79 {ERR_REASON(X509_R_CANT_CHECK_DH_KEY) , "cant check dh key"},
80 {ERR_REASON(X509_R_CERT_ALREADY_IN_HASH_TABLE), "cert already in hash table"},
81 {ERR_REASON(X509_R_ERR_ASN1_LIB) , "err asn1 lib"},
82 {ERR_REASON(X509_R_INVALID_DIRECTORY) , "invalid directory"},
83 {ERR_REASON(X509_R_INVALID_FIELD_NAME) , "invalid field name"},
84 {ERR_REASON(X509_R_INVALID_TRUST) , "invalid trust"},
85 {ERR_REASON(X509_R_INVALID_VERSION) , "invalid x509 version"},
86 {ERR_REASON(X509_R_KEY_TYPE_MISMATCH) , "key type mismatch"},
87 {ERR_REASON(X509_R_KEY_VALUES_MISMATCH) , "key values mismatch"},
88 {ERR_REASON(X509_R_LOADING_CERT_DIR) , "loading cert dir"},
89 {ERR_REASON(X509_R_LOADING_DEFAULTS) , "loading defaults"},
90 {ERR_REASON(X509_R_METHOD_NOT_SUPPORTED) , "method not supported"},
91 {ERR_REASON(X509_R_NO_CERTIFICATE_OR_CRL_FOUND), "no certificate or crl found"},
92 {ERR_REASON(X509_R_NO_CERT_SET_FOR_US_TO_VERIFY), "no cert set for us to verify"},
93 {ERR_REASON(X509_R_PUBLIC_KEY_DECODE_ERROR), "public key decode error"},
94 {ERR_REASON(X509_R_PUBLIC_KEY_ENCODE_ERROR), "public key encode error"},
95 {ERR_REASON(X509_R_SHOULD_RETRY) , "should retry"},
96 {ERR_REASON(X509_R_UNABLE_TO_FIND_PARAMETERS_IN_CHAIN), "unable to find parameters in chain"},
97 {ERR_REASON(X509_R_UNABLE_TO_GET_CERTS_PUBLIC_KEY), "unable to get certs public key"},
98 {ERR_REASON(X509_R_UNKNOWN_KEY_TYPE) , "unknown key type"},
99 {ERR_REASON(X509_R_UNKNOWN_NID) , "unknown nid"},
100 {ERR_REASON(X509_R_UNKNOWN_PURPOSE_ID) , "unknown purpose id"},
101 {ERR_REASON(X509_R_UNKNOWN_TRUST_ID) , "unknown trust id"},
102 {ERR_REASON(X509_R_UNSUPPORTED_ALGORITHM), "unsupported algorithm"},
103 {ERR_REASON(X509_R_WRONG_LOOKUP_TYPE) , "wrong lookup type"},
104 {ERR_REASON(X509_R_WRONG_TYPE) , "wrong type"},
105 {0, NULL}
106 };
107
108 #undef ERR_FUNC
109 #undef ERR_REASON
110 #define ERR_FUNC(func) ERR_PACK(ERR_LIB_X509V3,func,0)
111 #define ERR_REASON(reason) ERR_PACK(ERR_LIB_X509V3,0,reason)
112
113 static const ERR_STRING_DATA X509V3_str_functs[] = {
114 {ERR_FUNC(0xfff), "CRYPTO_internal"},
115 {0, NULL}
116 };
117
118 static const ERR_STRING_DATA X509V3_str_reasons[] = {
119 {ERR_REASON(X509V3_R_BAD_IP_ADDRESS) , "bad ip address"},
120 {ERR_REASON(X509V3_R_BAD_OBJECT) , "bad object"},
121 {ERR_REASON(X509V3_R_BN_DEC2BN_ERROR) , "bn dec2bn error"},
122 {ERR_REASON(X509V3_R_BN_TO_ASN1_INTEGER_ERROR), "bn to asn1 integer error"},
123 {ERR_REASON(X509V3_R_DIRNAME_ERROR) , "dirname error"},
124 {ERR_REASON(X509V3_R_DISTPOINT_ALREADY_SET), "distpoint already set"},
125 {ERR_REASON(X509V3_R_DUPLICATE_ZONE_ID) , "duplicate zone id"},
126 {ERR_REASON(X509V3_R_ERROR_CONVERTING_ZONE), "error converting zone"},
127 {ERR_REASON(X509V3_R_ERROR_CREATING_EXTENSION), "error creating extension"},
128 {ERR_REASON(X509V3_R_ERROR_IN_EXTENSION) , "error in extension"},
129 {ERR_REASON(X509V3_R_EXPECTED_A_SECTION_NAME), "expected a section name"},
130 {ERR_REASON(X509V3_R_EXTENSION_EXISTS) , "extension exists"},
131 {ERR_REASON(X509V3_R_EXTENSION_NAME_ERROR), "extension name error"},
132 {ERR_REASON(X509V3_R_EXTENSION_NOT_FOUND), "extension not found"},
133 {ERR_REASON(X509V3_R_EXTENSION_SETTING_NOT_SUPPORTED), "extension setting not supported"},
134 {ERR_REASON(X509V3_R_EXTENSION_VALUE_ERROR), "extension value error"},
135 {ERR_REASON(X509V3_R_ILLEGAL_EMPTY_EXTENSION), "illegal empty extension"},
136 {ERR_REASON(X509V3_R_ILLEGAL_HEX_DIGIT) , "illegal hex digit"},
137 {ERR_REASON(X509V3_R_INCORRECT_POLICY_SYNTAX_TAG), "incorrect policy syntax tag"},
138 {ERR_REASON(X509V3_R_INVALID_MULTIPLE_RDNS), "invalid multiple rdns"},
139 {ERR_REASON(X509V3_R_INVALID_ASNUMBER) , "invalid asnumber"},
140 {ERR_REASON(X509V3_R_INVALID_ASRANGE) , "invalid asrange"},
141 {ERR_REASON(X509V3_R_INVALID_BOOLEAN_STRING), "invalid boolean string"},
142 {ERR_REASON(X509V3_R_INVALID_EXTENSION_STRING), "invalid extension string"},
143 {ERR_REASON(X509V3_R_INVALID_INHERITANCE), "invalid inheritance"},
144 {ERR_REASON(X509V3_R_INVALID_IPADDRESS) , "invalid ipaddress"},
145 {ERR_REASON(X509V3_R_INVALID_NAME) , "invalid name"},
146 {ERR_REASON(X509V3_R_INVALID_NULL_ARGUMENT), "invalid null argument"},
147 {ERR_REASON(X509V3_R_INVALID_NULL_NAME) , "invalid null name"},
148 {ERR_REASON(X509V3_R_INVALID_NULL_VALUE) , "invalid null value"},
149 {ERR_REASON(X509V3_R_INVALID_NUMBER) , "invalid number"},
150 {ERR_REASON(X509V3_R_INVALID_NUMBERS) , "invalid numbers"},
151 {ERR_REASON(X509V3_R_INVALID_OBJECT_IDENTIFIER), "invalid object identifier"},
152 {ERR_REASON(X509V3_R_INVALID_OPTION) , "invalid option"},
153 {ERR_REASON(X509V3_R_INVALID_POLICY_IDENTIFIER), "invalid policy identifier"},
154 {ERR_REASON(X509V3_R_INVALID_PROXY_POLICY_SETTING), "invalid proxy policy setting"},
155 {ERR_REASON(X509V3_R_INVALID_PURPOSE) , "invalid purpose"},
156 {ERR_REASON(X509V3_R_INVALID_SAFI) , "invalid safi"},
157 {ERR_REASON(X509V3_R_INVALID_SECTION) , "invalid section"},
158 {ERR_REASON(X509V3_R_INVALID_SYNTAX) , "invalid syntax"},
159 {ERR_REASON(X509V3_R_ISSUER_DECODE_ERROR), "issuer decode error"},
160 {ERR_REASON(X509V3_R_MISSING_VALUE) , "missing value"},
161 {ERR_REASON(X509V3_R_NEED_ORGANIZATION_AND_NUMBERS), "need organization and numbers"},
162 {ERR_REASON(X509V3_R_NO_CONFIG_DATABASE) , "no config database"},
163 {ERR_REASON(X509V3_R_NO_ISSUER_CERTIFICATE), "no issuer certificate"},
164 {ERR_REASON(X509V3_R_NO_ISSUER_DETAILS) , "no issuer details"},
165 {ERR_REASON(X509V3_R_NO_POLICY_IDENTIFIER), "no policy identifier"},
166 {ERR_REASON(X509V3_R_NO_PROXY_CERT_POLICY_LANGUAGE_DEFINED), "no proxy cert policy language defined"},
167 {ERR_REASON(X509V3_R_NO_PUBLIC_KEY) , "no public key"},
168 {ERR_REASON(X509V3_R_NO_SUBJECT_DETAILS) , "no subject details"},
169 {ERR_REASON(X509V3_R_ODD_NUMBER_OF_DIGITS), "odd number of digits"},
170 {ERR_REASON(X509V3_R_OPERATION_NOT_DEFINED), "operation not defined"},
171 {ERR_REASON(X509V3_R_OTHERNAME_ERROR) , "othername error"},
172 {ERR_REASON(X509V3_R_POLICY_LANGUAGE_ALREADY_DEFINED), "policy language already defined"},
173 {ERR_REASON(X509V3_R_POLICY_PATH_LENGTH) , "policy path length"},
174 {ERR_REASON(X509V3_R_POLICY_PATH_LENGTH_ALREADY_DEFINED), "policy path length already defined"},
175 {ERR_REASON(X509V3_R_POLICY_SYNTAX_NOT_CURRENTLY_SUPPORTED), "policy syntax not currently supported"},
176 {ERR_REASON(X509V3_R_POLICY_WHEN_PROXY_LANGUAGE_REQUIRES_NO_POLICY), "policy when proxy language requires no policy"},
177 {ERR_REASON(X509V3_R_SECTION_NOT_FOUND) , "section not found"},
178 {ERR_REASON(X509V3_R_UNABLE_TO_GET_ISSUER_DETAILS), "unable to get issuer details"},
179 {ERR_REASON(X509V3_R_UNABLE_TO_GET_ISSUER_KEYID), "unable to get issuer keyid"},
180 {ERR_REASON(X509V3_R_UNKNOWN_BIT_STRING_ARGUMENT), "unknown bit string argument"},
181 {ERR_REASON(X509V3_R_UNKNOWN_EXTENSION) , "unknown extension"},
182 {ERR_REASON(X509V3_R_UNKNOWN_EXTENSION_NAME), "unknown extension name"},
183 {ERR_REASON(X509V3_R_UNKNOWN_OPTION) , "unknown option"},
184 {ERR_REASON(X509V3_R_UNSUPPORTED_OPTION) , "unsupported option"},
185 {ERR_REASON(X509V3_R_UNSUPPORTED_TYPE) , "unsupported type"},
186 {ERR_REASON(X509V3_R_USER_TOO_LONG) , "user too long"},
187 {0, NULL}
188 };
189
190 #endif
191
192 void
ERR_load_X509_strings(void)193 ERR_load_X509_strings(void)
194 {
195 #ifndef OPENSSL_NO_ERR
196 if (ERR_func_error_string(X509_str_functs[0].error) == NULL) {
197 ERR_load_const_strings(X509_str_functs);
198 ERR_load_const_strings(X509_str_reasons);
199 }
200 #endif
201 }
202 LCRYPTO_ALIAS(ERR_load_X509_strings);
203
204
205 void
ERR_load_X509V3_strings(void)206 ERR_load_X509V3_strings(void)
207 {
208 #ifndef OPENSSL_NO_ERR
209 if (ERR_func_error_string(X509V3_str_functs[0].error) == NULL) {
210 ERR_load_const_strings(X509V3_str_functs);
211 ERR_load_const_strings(X509V3_str_reasons);
212 }
213 #endif
214 }
215 LCRYPTO_ALIAS(ERR_load_X509V3_strings);
216