1 /* This Source Code Form is subject to the terms of the Mozilla Public
2  * License, v. 2.0. If a copy of the MPL was not distributed with this
3  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
4 
5 /* General security error codes */
6 /* Caller must #include "secerr.h" */
7 
8 ER3(SEC_ERROR_IO, SEC_ERROR_BASE + 0,
9     "An I/O error occurred during security authorization.")
10 
11 ER3(SEC_ERROR_LIBRARY_FAILURE, SEC_ERROR_BASE + 1,
12     "security library failure.")
13 
14 ER3(SEC_ERROR_BAD_DATA, SEC_ERROR_BASE + 2,
15     "security library: received bad data.")
16 
17 ER3(SEC_ERROR_OUTPUT_LEN, SEC_ERROR_BASE + 3,
18     "security library: output length error.")
19 
20 ER3(SEC_ERROR_INPUT_LEN, SEC_ERROR_BASE + 4,
21     "security library has experienced an input length error.")
22 
23 ER3(SEC_ERROR_INVALID_ARGS, SEC_ERROR_BASE + 5,
24     "security library: invalid arguments.")
25 
26 ER3(SEC_ERROR_INVALID_ALGORITHM, SEC_ERROR_BASE + 6,
27     "security library: invalid algorithm.")
28 
29 ER3(SEC_ERROR_INVALID_AVA, SEC_ERROR_BASE + 7,
30     "security library: invalid AVA.")
31 
32 ER3(SEC_ERROR_INVALID_TIME, SEC_ERROR_BASE + 8,
33     "Improperly formatted time string.")
34 
35 ER3(SEC_ERROR_BAD_DER, SEC_ERROR_BASE + 9,
36     "security library: improperly formatted DER-encoded message.")
37 
38 ER3(SEC_ERROR_BAD_SIGNATURE, SEC_ERROR_BASE + 10,
39     "Peer's certificate has an invalid signature.")
40 
41 ER3(SEC_ERROR_EXPIRED_CERTIFICATE, SEC_ERROR_BASE + 11,
42     "Peer's Certificate has expired.")
43 
44 ER3(SEC_ERROR_REVOKED_CERTIFICATE, SEC_ERROR_BASE + 12,
45     "Peer's Certificate has been revoked.")
46 
47 ER3(SEC_ERROR_UNKNOWN_ISSUER, SEC_ERROR_BASE + 13,
48     "Peer's Certificate issuer is not recognized.")
49 
50 ER3(SEC_ERROR_BAD_KEY, SEC_ERROR_BASE + 14,
51     "Peer's public key is invalid.")
52 
53 ER3(SEC_ERROR_BAD_PASSWORD, SEC_ERROR_BASE + 15,
54     "The security password entered is incorrect.")
55 
56 ER3(SEC_ERROR_RETRY_PASSWORD, SEC_ERROR_BASE + 16,
57     "New password entered incorrectly. Please try again.")
58 
59 ER3(SEC_ERROR_NO_NODELOCK, SEC_ERROR_BASE + 17,
60     "security library: no nodelock.")
61 
62 ER3(SEC_ERROR_BAD_DATABASE, SEC_ERROR_BASE + 18,
63     "security library: bad database.")
64 
65 ER3(SEC_ERROR_NO_MEMORY, SEC_ERROR_BASE + 19,
66     "security library: memory allocation failure.")
67 
68 ER3(SEC_ERROR_UNTRUSTED_ISSUER, SEC_ERROR_BASE + 20,
69     "Peer's certificate issuer has been marked as not trusted by the user.")
70 
71 ER3(SEC_ERROR_UNTRUSTED_CERT, SEC_ERROR_BASE + 21,
72     "Peer's certificate has been marked as not trusted by the user.")
73 
74 ER3(SEC_ERROR_DUPLICATE_CERT, (SEC_ERROR_BASE + 22),
75     "Certificate already exists in your database.")
76 
77 ER3(SEC_ERROR_DUPLICATE_CERT_NAME, (SEC_ERROR_BASE + 23),
78     "Downloaded certificate's name duplicates one already in your database.")
79 
80 ER3(SEC_ERROR_ADDING_CERT, (SEC_ERROR_BASE + 24),
81     "Error adding certificate to database.")
82 
83 ER3(SEC_ERROR_FILING_KEY, (SEC_ERROR_BASE + 25),
84     "Error refiling the key for this certificate.")
85 
86 ER3(SEC_ERROR_NO_KEY, (SEC_ERROR_BASE + 26),
87     "The private key for this certificate cannot be found in key database")
88 
89 ER3(SEC_ERROR_CERT_VALID, (SEC_ERROR_BASE + 27),
90     "This certificate is valid.")
91 
92 ER3(SEC_ERROR_CERT_NOT_VALID, (SEC_ERROR_BASE + 28),
93     "This certificate is not valid.")
94 
95 ER3(SEC_ERROR_CERT_NO_RESPONSE, (SEC_ERROR_BASE + 29),
96     "Cert Library: No Response")
97 
98 ER3(SEC_ERROR_EXPIRED_ISSUER_CERTIFICATE, (SEC_ERROR_BASE + 30),
99     "The certificate issuer's certificate has expired. Check your system date and time.")
100 
101 ER3(SEC_ERROR_CRL_EXPIRED, (SEC_ERROR_BASE + 31),
102     "The CRL for the certificate's issuer has expired. Update it or check your system date and time.")
103 
104 ER3(SEC_ERROR_CRL_BAD_SIGNATURE, (SEC_ERROR_BASE + 32),
105     "The CRL for the certificate's issuer has an invalid signature.")
106 
107 ER3(SEC_ERROR_CRL_INVALID, (SEC_ERROR_BASE + 33),
108     "New CRL has an invalid format.")
109 
110 ER3(SEC_ERROR_EXTENSION_VALUE_INVALID, (SEC_ERROR_BASE + 34),
111     "Certificate extension value is invalid.")
112 
113 ER3(SEC_ERROR_EXTENSION_NOT_FOUND, (SEC_ERROR_BASE + 35),
114     "Certificate extension not found.")
115 
116 ER3(SEC_ERROR_CA_CERT_INVALID, (SEC_ERROR_BASE + 36),
117     "Issuer certificate is invalid.")
118 
119 ER3(SEC_ERROR_PATH_LEN_CONSTRAINT_INVALID, (SEC_ERROR_BASE + 37),
120     "Certificate path length constraint is invalid.")
121 
122 ER3(SEC_ERROR_CERT_USAGES_INVALID, (SEC_ERROR_BASE + 38),
123     "Certificate usages field is invalid.")
124 
125 ER3(SEC_INTERNAL_ONLY, (SEC_ERROR_BASE + 39),
126     "**Internal ONLY module**")
127 
128 ER3(SEC_ERROR_INVALID_KEY, (SEC_ERROR_BASE + 40),
129     "The key does not support the requested operation.")
130 
131 ER3(SEC_ERROR_UNKNOWN_CRITICAL_EXTENSION, (SEC_ERROR_BASE + 41),
132     "Certificate contains unknown critical extension.")
133 
134 ER3(SEC_ERROR_OLD_CRL, (SEC_ERROR_BASE + 42),
135     "New CRL is not later than the current one.")
136 
137 ER3(SEC_ERROR_NO_EMAIL_CERT, (SEC_ERROR_BASE + 43),
138     "Not encrypted or signed: you do not yet have an email certificate.")
139 
140 ER3(SEC_ERROR_NO_RECIPIENT_CERTS_QUERY, (SEC_ERROR_BASE + 44),
141     "Not encrypted: you do not have certificates for each of the recipients.")
142 
143 ER3(SEC_ERROR_NOT_A_RECIPIENT, (SEC_ERROR_BASE + 45),
144     "Cannot decrypt: you are not a recipient, or matching certificate and \
145 private key not found.")
146 
147 ER3(SEC_ERROR_PKCS7_KEYALG_MISMATCH, (SEC_ERROR_BASE + 46),
148     "Cannot decrypt: key encryption algorithm does not match your certificate.")
149 
150 ER3(SEC_ERROR_PKCS7_BAD_SIGNATURE, (SEC_ERROR_BASE + 47),
151     "Signature verification failed: no signer found, too many signers found, \
152 or improper or corrupted data.")
153 
154 ER3(SEC_ERROR_UNSUPPORTED_KEYALG, (SEC_ERROR_BASE + 48),
155     "Unsupported or unknown key algorithm.")
156 
157 ER3(SEC_ERROR_DECRYPTION_DISALLOWED, (SEC_ERROR_BASE + 49),
158     "Cannot decrypt: encrypted using a disallowed algorithm or key size.")
159 
160 /* Fortezza Alerts */
161 ER3(XP_SEC_FORTEZZA_BAD_CARD, (SEC_ERROR_BASE + 50),
162     "Fortezza card has not been properly initialized. \
163 Please remove it and return it to your issuer.")
164 
165 ER3(XP_SEC_FORTEZZA_NO_CARD, (SEC_ERROR_BASE + 51),
166     "No Fortezza cards Found")
167 
168 ER3(XP_SEC_FORTEZZA_NONE_SELECTED, (SEC_ERROR_BASE + 52),
169     "No Fortezza card selected")
170 
171 ER3(XP_SEC_FORTEZZA_MORE_INFO, (SEC_ERROR_BASE + 53),
172     "Please select a personality to get more info on")
173 
174 ER3(XP_SEC_FORTEZZA_PERSON_NOT_FOUND, (SEC_ERROR_BASE + 54),
175     "Personality not found")
176 
177 ER3(XP_SEC_FORTEZZA_NO_MORE_INFO, (SEC_ERROR_BASE + 55),
178     "No more information on that Personality")
179 
180 ER3(XP_SEC_FORTEZZA_BAD_PIN, (SEC_ERROR_BASE + 56),
181     "Invalid Pin")
182 
183 ER3(XP_SEC_FORTEZZA_PERSON_ERROR, (SEC_ERROR_BASE + 57),
184     "Couldn't initialize Fortezza personalities.")
185 /* end fortezza alerts. */
186 
187 ER3(SEC_ERROR_NO_KRL, (SEC_ERROR_BASE + 58),
188     "No KRL for this site's certificate has been found.")
189 
190 ER3(SEC_ERROR_KRL_EXPIRED, (SEC_ERROR_BASE + 59),
191     "The KRL for this site's certificate has expired.")
192 
193 ER3(SEC_ERROR_KRL_BAD_SIGNATURE, (SEC_ERROR_BASE + 60),
194     "The KRL for this site's certificate has an invalid signature.")
195 
196 ER3(SEC_ERROR_REVOKED_KEY, (SEC_ERROR_BASE + 61),
197     "The key for this site's certificate has been revoked.")
198 
199 ER3(SEC_ERROR_KRL_INVALID, (SEC_ERROR_BASE + 62),
200     "New KRL has an invalid format.")
201 
202 ER3(SEC_ERROR_NEED_RANDOM, (SEC_ERROR_BASE + 63),
203     "security library: need random data.")
204 
205 ER3(SEC_ERROR_NO_MODULE, (SEC_ERROR_BASE + 64),
206     "security library: no security module can perform the requested operation.")
207 
208 ER3(SEC_ERROR_NO_TOKEN, (SEC_ERROR_BASE + 65),
209     "The security card or token does not exist, needs to be initialized, or has been removed.")
210 
211 ER3(SEC_ERROR_READ_ONLY, (SEC_ERROR_BASE + 66),
212     "security library: read-only database.")
213 
214 ER3(SEC_ERROR_NO_SLOT_SELECTED, (SEC_ERROR_BASE + 67),
215     "No slot or token was selected.")
216 
217 ER3(SEC_ERROR_CERT_NICKNAME_COLLISION, (SEC_ERROR_BASE + 68),
218     "A certificate with the same nickname already exists.")
219 
220 ER3(SEC_ERROR_KEY_NICKNAME_COLLISION, (SEC_ERROR_BASE + 69),
221     "A key with the same nickname already exists.")
222 
223 ER3(SEC_ERROR_SAFE_NOT_CREATED, (SEC_ERROR_BASE + 70),
224     "error while creating safe object")
225 
226 ER3(SEC_ERROR_BAGGAGE_NOT_CREATED, (SEC_ERROR_BASE + 71),
227     "error while creating baggage object")
228 
229 ER3(XP_JAVA_REMOVE_PRINCIPAL_ERROR, (SEC_ERROR_BASE + 72),
230     "Couldn't remove the principal")
231 
232 ER3(XP_JAVA_DELETE_PRIVILEGE_ERROR, (SEC_ERROR_BASE + 73),
233     "Couldn't delete the privilege")
234 
235 ER3(XP_JAVA_CERT_NOT_EXISTS_ERROR, (SEC_ERROR_BASE + 74),
236     "This principal doesn't have a certificate")
237 
238 ER3(SEC_ERROR_BAD_EXPORT_ALGORITHM, (SEC_ERROR_BASE + 75),
239     "Required algorithm is not allowed.")
240 
241 ER3(SEC_ERROR_EXPORTING_CERTIFICATES, (SEC_ERROR_BASE + 76),
242     "Error attempting to export certificates.")
243 
244 ER3(SEC_ERROR_IMPORTING_CERTIFICATES, (SEC_ERROR_BASE + 77),
245     "Error attempting to import certificates.")
246 
247 ER3(SEC_ERROR_PKCS12_DECODING_PFX, (SEC_ERROR_BASE + 78),
248     "Unable to import. Decoding error. File not valid.")
249 
250 ER3(SEC_ERROR_PKCS12_INVALID_MAC, (SEC_ERROR_BASE + 79),
251     "Unable to import. Invalid MAC. Incorrect password or corrupt file.")
252 
253 ER3(SEC_ERROR_PKCS12_UNSUPPORTED_MAC_ALGORITHM, (SEC_ERROR_BASE + 80),
254     "Unable to import. MAC algorithm not supported.")
255 
256 ER3(SEC_ERROR_PKCS12_UNSUPPORTED_TRANSPORT_MODE, (SEC_ERROR_BASE + 81),
257     "Unable to import. Only password integrity and privacy modes supported.")
258 
259 ER3(SEC_ERROR_PKCS12_CORRUPT_PFX_STRUCTURE, (SEC_ERROR_BASE + 82),
260     "Unable to import. File structure is corrupt.")
261 
262 ER3(SEC_ERROR_PKCS12_UNSUPPORTED_PBE_ALGORITHM, (SEC_ERROR_BASE + 83),
263     "Unable to import. Encryption algorithm not supported.")
264 
265 ER3(SEC_ERROR_PKCS12_UNSUPPORTED_VERSION, (SEC_ERROR_BASE + 84),
266     "Unable to import. File version not supported.")
267 
268 ER3(SEC_ERROR_PKCS12_PRIVACY_PASSWORD_INCORRECT, (SEC_ERROR_BASE + 85),
269     "Unable to import. Incorrect privacy password.")
270 
271 ER3(SEC_ERROR_PKCS12_CERT_COLLISION, (SEC_ERROR_BASE + 86),
272     "Unable to import. Same nickname already exists in database.")
273 
274 ER3(SEC_ERROR_USER_CANCELLED, (SEC_ERROR_BASE + 87),
275     "The user pressed cancel.")
276 
277 ER3(SEC_ERROR_PKCS12_DUPLICATE_DATA, (SEC_ERROR_BASE + 88),
278     "Not imported, already in database.")
279 
280 ER3(SEC_ERROR_MESSAGE_SEND_ABORTED, (SEC_ERROR_BASE + 89),
281     "Message not sent.")
282 
283 ER3(SEC_ERROR_INADEQUATE_KEY_USAGE, (SEC_ERROR_BASE + 90),
284     "Certificate key usage inadequate for attempted operation.")
285 
286 ER3(SEC_ERROR_INADEQUATE_CERT_TYPE, (SEC_ERROR_BASE + 91),
287     "Certificate type not approved for application.")
288 
289 ER3(SEC_ERROR_CERT_ADDR_MISMATCH, (SEC_ERROR_BASE + 92),
290     "Address in signing certificate does not match address in message headers.")
291 
292 ER3(SEC_ERROR_PKCS12_UNABLE_TO_IMPORT_KEY, (SEC_ERROR_BASE + 93),
293     "Unable to import. Error attempting to import private key.")
294 
295 ER3(SEC_ERROR_PKCS12_IMPORTING_CERT_CHAIN, (SEC_ERROR_BASE + 94),
296     "Unable to import. Error attempting to import certificate chain.")
297 
298 ER3(SEC_ERROR_PKCS12_UNABLE_TO_LOCATE_OBJECT_BY_NAME, (SEC_ERROR_BASE + 95),
299     "Unable to export. Unable to locate certificate or key by nickname.")
300 
301 ER3(SEC_ERROR_PKCS12_UNABLE_TO_EXPORT_KEY, (SEC_ERROR_BASE + 96),
302     "Unable to export. Private Key could not be located and exported.")
303 
304 ER3(SEC_ERROR_PKCS12_UNABLE_TO_WRITE, (SEC_ERROR_BASE + 97),
305     "Unable to export. Unable to write the export file.")
306 
307 ER3(SEC_ERROR_PKCS12_UNABLE_TO_READ, (SEC_ERROR_BASE + 98),
308     "Unable to import. Unable to read the import file.")
309 
310 ER3(SEC_ERROR_PKCS12_KEY_DATABASE_NOT_INITIALIZED, (SEC_ERROR_BASE + 99),
311     "Unable to export. Key database corrupt or deleted.")
312 
313 ER3(SEC_ERROR_KEYGEN_FAIL, (SEC_ERROR_BASE + 100),
314     "Unable to generate public/private key pair.")
315 
316 ER3(SEC_ERROR_INVALID_PASSWORD, (SEC_ERROR_BASE + 101),
317     "Password entered is invalid. Please pick a different one.")
318 
319 ER3(SEC_ERROR_RETRY_OLD_PASSWORD, (SEC_ERROR_BASE + 102),
320     "Old password entered incorrectly. Please try again.")
321 
322 ER3(SEC_ERROR_BAD_NICKNAME, (SEC_ERROR_BASE + 103),
323     "Certificate nickname already in use.")
324 
325 ER3(SEC_ERROR_NOT_FORTEZZA_ISSUER, (SEC_ERROR_BASE + 104),
326     "Peer FORTEZZA chain has a non-FORTEZZA Certificate.")
327 
328 ER3(SEC_ERROR_CANNOT_MOVE_SENSITIVE_KEY, (SEC_ERROR_BASE + 105),
329     "A sensitive key cannot be moved to the slot where it is needed.")
330 
331 ER3(SEC_ERROR_JS_INVALID_MODULE_NAME, (SEC_ERROR_BASE + 106),
332     "Invalid module name.")
333 
334 ER3(SEC_ERROR_JS_INVALID_DLL, (SEC_ERROR_BASE + 107),
335     "Invalid module path/filename")
336 
337 ER3(SEC_ERROR_JS_ADD_MOD_FAILURE, (SEC_ERROR_BASE + 108),
338     "Unable to add module")
339 
340 ER3(SEC_ERROR_JS_DEL_MOD_FAILURE, (SEC_ERROR_BASE + 109),
341     "Unable to delete module")
342 
343 ER3(SEC_ERROR_OLD_KRL, (SEC_ERROR_BASE + 110),
344     "New KRL is not later than the current one.")
345 
346 ER3(SEC_ERROR_CKL_CONFLICT, (SEC_ERROR_BASE + 111),
347     "New CKL has different issuer than current CKL. Delete current CKL.")
348 
349 ER3(SEC_ERROR_CERT_NOT_IN_NAME_SPACE, (SEC_ERROR_BASE + 112),
350     "The Certifying Authority for this certificate is not permitted to issue a \
351 certificate with this name.")
352 
353 ER3(SEC_ERROR_KRL_NOT_YET_VALID, (SEC_ERROR_BASE + 113),
354     "The key revocation list for this certificate is not yet valid.")
355 
356 ER3(SEC_ERROR_CRL_NOT_YET_VALID, (SEC_ERROR_BASE + 114),
357     "The certificate revocation list for this certificate is not yet valid.")
358 
359 ER3(SEC_ERROR_UNKNOWN_CERT, (SEC_ERROR_BASE + 115),
360     "The requested certificate could not be found.")
361 
362 ER3(SEC_ERROR_UNKNOWN_SIGNER, (SEC_ERROR_BASE + 116),
363     "The signer's certificate could not be found.")
364 
365 ER3(SEC_ERROR_CERT_BAD_ACCESS_LOCATION, (SEC_ERROR_BASE + 117),
366     "The location for the certificate status server has invalid format.")
367 
368 ER3(SEC_ERROR_OCSP_UNKNOWN_RESPONSE_TYPE, (SEC_ERROR_BASE + 118),
369     "The OCSP response cannot be fully decoded; it is of an unknown type.")
370 
371 ER3(SEC_ERROR_OCSP_BAD_HTTP_RESPONSE, (SEC_ERROR_BASE + 119),
372     "The OCSP server returned unexpected/invalid HTTP data.")
373 
374 ER3(SEC_ERROR_OCSP_MALFORMED_REQUEST, (SEC_ERROR_BASE + 120),
375     "The OCSP server found the request to be corrupted or improperly formed.")
376 
377 ER3(SEC_ERROR_OCSP_SERVER_ERROR, (SEC_ERROR_BASE + 121),
378     "The OCSP server experienced an internal error.")
379 
380 ER3(SEC_ERROR_OCSP_TRY_SERVER_LATER, (SEC_ERROR_BASE + 122),
381     "The OCSP server suggests trying again later.")
382 
383 ER3(SEC_ERROR_OCSP_REQUEST_NEEDS_SIG, (SEC_ERROR_BASE + 123),
384     "The OCSP server requires a signature on this request.")
385 
386 ER3(SEC_ERROR_OCSP_UNAUTHORIZED_REQUEST, (SEC_ERROR_BASE + 124),
387     "The OCSP server has refused this request as unauthorized.")
388 
389 ER3(SEC_ERROR_OCSP_UNKNOWN_RESPONSE_STATUS, (SEC_ERROR_BASE + 125),
390     "The OCSP server returned an unrecognizable status.")
391 
392 ER3(SEC_ERROR_OCSP_UNKNOWN_CERT, (SEC_ERROR_BASE + 126),
393     "The OCSP server has no status for the certificate.")
394 
395 ER3(SEC_ERROR_OCSP_NOT_ENABLED, (SEC_ERROR_BASE + 127),
396     "You must enable OCSP before performing this operation.")
397 
398 ER3(SEC_ERROR_OCSP_NO_DEFAULT_RESPONDER, (SEC_ERROR_BASE + 128),
399     "You must set the OCSP default responder before performing this operation.")
400 
401 ER3(SEC_ERROR_OCSP_MALFORMED_RESPONSE, (SEC_ERROR_BASE + 129),
402     "The response from the OCSP server was corrupted or improperly formed.")
403 
404 ER3(SEC_ERROR_OCSP_UNAUTHORIZED_RESPONSE, (SEC_ERROR_BASE + 130),
405     "The signer of the OCSP response is not authorized to give status for \
406 this certificate.")
407 
408 ER3(SEC_ERROR_OCSP_FUTURE_RESPONSE, (SEC_ERROR_BASE + 131),
409     "The OCSP response is not yet valid (contains a date in the future).")
410 
411 ER3(SEC_ERROR_OCSP_OLD_RESPONSE, (SEC_ERROR_BASE + 132),
412     "The OCSP response contains out-of-date information.")
413 
414 ER3(SEC_ERROR_DIGEST_NOT_FOUND, (SEC_ERROR_BASE + 133),
415     "The CMS or PKCS #7 Digest was not found in signed message.")
416 
417 ER3(SEC_ERROR_UNSUPPORTED_MESSAGE_TYPE, (SEC_ERROR_BASE + 134),
418     "The CMS or PKCS #7 Message type is unsupported.")
419 
420 ER3(SEC_ERROR_MODULE_STUCK, (SEC_ERROR_BASE + 135),
421     "PKCS #11 module could not be removed because it is still in use.")
422 
423 ER3(SEC_ERROR_BAD_TEMPLATE, (SEC_ERROR_BASE + 136),
424     "Could not decode ASN.1 data. Specified template was invalid.")
425 
426 ER3(SEC_ERROR_CRL_NOT_FOUND, (SEC_ERROR_BASE + 137),
427     "No matching CRL was found.")
428 
429 ER3(SEC_ERROR_REUSED_ISSUER_AND_SERIAL, (SEC_ERROR_BASE + 138),
430     "You are attempting to import a cert with the same issuer/serial as \
431 an existing cert, but that is not the same cert.")
432 
433 ER3(SEC_ERROR_BUSY, (SEC_ERROR_BASE + 139),
434     "NSS could not shutdown. Objects are still in use.")
435 
436 ER3(SEC_ERROR_EXTRA_INPUT, (SEC_ERROR_BASE + 140),
437     "DER-encoded message contained extra unused data.")
438 
439 ER3(SEC_ERROR_UNSUPPORTED_ELLIPTIC_CURVE, (SEC_ERROR_BASE + 141),
440     "Unsupported elliptic curve.")
441 
442 ER3(SEC_ERROR_UNSUPPORTED_EC_POINT_FORM, (SEC_ERROR_BASE + 142),
443     "Unsupported elliptic curve point form.")
444 
445 ER3(SEC_ERROR_UNRECOGNIZED_OID, (SEC_ERROR_BASE + 143),
446     "Unrecognized Object Identifier.")
447 
448 ER3(SEC_ERROR_OCSP_INVALID_SIGNING_CERT, (SEC_ERROR_BASE + 144),
449     "Invalid OCSP signing certificate in OCSP response.")
450 
451 ER3(SEC_ERROR_REVOKED_CERTIFICATE_CRL, (SEC_ERROR_BASE + 145),
452     "Certificate is revoked in issuer's certificate revocation list.")
453 
454 ER3(SEC_ERROR_REVOKED_CERTIFICATE_OCSP, (SEC_ERROR_BASE + 146),
455     "Issuer's OCSP responder reports certificate is revoked.")
456 
457 ER3(SEC_ERROR_CRL_INVALID_VERSION, (SEC_ERROR_BASE + 147),
458     "Issuer's Certificate Revocation List has an unknown version number.")
459 
460 ER3(SEC_ERROR_CRL_V1_CRITICAL_EXTENSION, (SEC_ERROR_BASE + 148),
461     "Issuer's V1 Certificate Revocation List has a critical extension.")
462 
463 ER3(SEC_ERROR_CRL_UNKNOWN_CRITICAL_EXTENSION, (SEC_ERROR_BASE + 149),
464     "Issuer's V2 Certificate Revocation List has an unknown critical extension.")
465 
466 ER3(SEC_ERROR_UNKNOWN_OBJECT_TYPE, (SEC_ERROR_BASE + 150),
467     "Unknown object type specified.")
468 
469 ER3(SEC_ERROR_INCOMPATIBLE_PKCS11, (SEC_ERROR_BASE + 151),
470     "PKCS #11 driver violates the spec in an incompatible way.")
471 
472 ER3(SEC_ERROR_NO_EVENT, (SEC_ERROR_BASE + 152),
473     "No new slot event is available at this time.")
474 
475 ER3(SEC_ERROR_CRL_ALREADY_EXISTS, (SEC_ERROR_BASE + 153),
476     "CRL already exists.")
477 
478 ER3(SEC_ERROR_NOT_INITIALIZED, (SEC_ERROR_BASE + 154),
479     "NSS is not initialized.")
480 
481 ER3(SEC_ERROR_TOKEN_NOT_LOGGED_IN, (SEC_ERROR_BASE + 155),
482     "The operation failed because the PKCS#11 token is not logged in.")
483 
484 ER3(SEC_ERROR_OCSP_RESPONDER_CERT_INVALID, (SEC_ERROR_BASE + 156),
485     "Configured OCSP responder's certificate is invalid.")
486 
487 ER3(SEC_ERROR_OCSP_BAD_SIGNATURE, (SEC_ERROR_BASE + 157),
488     "OCSP response has an invalid signature.")
489 
490 ER3(SEC_ERROR_OUT_OF_SEARCH_LIMITS, (SEC_ERROR_BASE + 158),
491     "Cert validation search is out of search limits")
492 
493 ER3(SEC_ERROR_INVALID_POLICY_MAPPING, (SEC_ERROR_BASE + 159),
494     "Policy mapping contains anypolicy")
495 
496 ER3(SEC_ERROR_POLICY_VALIDATION_FAILED, (SEC_ERROR_BASE + 160),
497     "Cert chain fails policy validation")
498 
499 ER3(SEC_ERROR_UNKNOWN_AIA_LOCATION_TYPE, (SEC_ERROR_BASE + 161),
500     "Unknown location type in cert AIA extension")
501 
502 ER3(SEC_ERROR_BAD_HTTP_RESPONSE, (SEC_ERROR_BASE + 162),
503     "Server returned bad HTTP response")
504 
505 ER3(SEC_ERROR_BAD_LDAP_RESPONSE, (SEC_ERROR_BASE + 163),
506     "Server returned bad LDAP response")
507 
508 ER3(SEC_ERROR_FAILED_TO_ENCODE_DATA, (SEC_ERROR_BASE + 164),
509     "Failed to encode data with ASN1 encoder")
510 
511 ER3(SEC_ERROR_BAD_INFO_ACCESS_LOCATION, (SEC_ERROR_BASE + 165),
512     "Bad information access location in cert extension")
513 
514 ER3(SEC_ERROR_LIBPKIX_INTERNAL, (SEC_ERROR_BASE + 166),
515     "Libpkix internal error occurred during cert validation.")
516 
517 ER3(SEC_ERROR_PKCS11_GENERAL_ERROR, (SEC_ERROR_BASE + 167),
518     "A PKCS #11 module returned CKR_GENERAL_ERROR, indicating that an unrecoverable error has occurred.")
519 
520 ER3(SEC_ERROR_PKCS11_FUNCTION_FAILED, (SEC_ERROR_BASE + 168),
521     "A PKCS #11 module returned CKR_FUNCTION_FAILED, indicating that the requested function could not be performed. Trying the same operation again might succeed.")
522 
523 ER3(SEC_ERROR_PKCS11_DEVICE_ERROR, (SEC_ERROR_BASE + 169),
524     "A PKCS #11 module returned CKR_DEVICE_ERROR, indicating that a problem has occurred with the token or slot.")
525 
526 ER3(SEC_ERROR_BAD_INFO_ACCESS_METHOD, (SEC_ERROR_BASE + 170),
527     "Unknown information access method in certificate extension.")
528 
529 ER3(SEC_ERROR_CRL_IMPORT_FAILED, (SEC_ERROR_BASE + 171),
530     "Error attempting to import a CRL.")
531 
532 ER3(SEC_ERROR_EXPIRED_PASSWORD, (SEC_ERROR_BASE + 172),
533     "The password expired.")
534 
535 ER3(SEC_ERROR_LOCKED_PASSWORD, (SEC_ERROR_BASE + 173),
536     "The password is locked.")
537 
538 ER3(SEC_ERROR_UNKNOWN_PKCS11_ERROR, (SEC_ERROR_BASE + 174),
539     "Unknown PKCS #11 error.")
540 
541 ER3(SEC_ERROR_BAD_CRL_DP_URL, (SEC_ERROR_BASE + 175),
542     "Invalid or unsupported URL in CRL distribution point name.")
543 
544 ER3(SEC_ERROR_CERT_SIGNATURE_ALGORITHM_DISABLED, (SEC_ERROR_BASE + 176),
545     "The certificate was signed using a signature algorithm that is disabled because it is not secure.")
546 
547 ER3(SEC_ERROR_LEGACY_DATABASE, (SEC_ERROR_BASE + 177),
548     "The certificate/key database is in an old, unsupported format.")
549 
550 ER3(SEC_ERROR_APPLICATION_CALLBACK_ERROR, (SEC_ERROR_BASE + 178),
551     "The certificate was rejected by extra checks in the application.")
552