1/* $OpenBSD: x509_err.c,v 1.23 2024/06/24 06:43:23 tb Exp $ */ 2/* ==================================================================== 3 * Copyright (c) 1999-2006 The OpenSSL Project. All rights reserved. 4 * 5 * Redistribution and use in source and binary forms, with or without 6 * modification, are permitted provided that the following conditions 7 * are met: 8 * 9 * 1. Redistributions of source code must retain the above copyright 10 * notice, this list of conditions and the following disclaimer. 11 * 12 * 2. Redistributions in binary form must reproduce the above copyright 13 * notice, this list of conditions and the following disclaimer in 14 * the documentation and/or other materials provided with the 15 * distribution. 16 * 17 * 3. All advertising materials mentioning features or use of this 18 * software must display the following acknowledgment: 19 * "This product includes software developed by the OpenSSL Project 20 * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)" 21 * 22 * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to 23 * endorse or promote products derived from this software without 24 * prior written permission. For written permission, please contact 25 * openssl-core@OpenSSL.org. 26 * 27 * 5. Products derived from this software may not be called "OpenSSL" 28 * nor may "OpenSSL" appear in their names without prior written 29 * permission of the OpenSSL Project. 30 * 31 * 6. Redistributions of any form whatsoever must retain the following 32 * acknowledgment: 33 * "This product includes software developed by the OpenSSL Project 34 * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)" 35 * 36 * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY 37 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 38 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 39 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR 40 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 41 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 42 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; 43 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 44 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, 45 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 46 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED 47 * OF THE POSSIBILITY OF SUCH DAMAGE. 48 * ==================================================================== 49 * 50 * This product includes cryptographic software written by Eric Young 51 * (eay@cryptsoft.com). This product includes software written by Tim 52 * Hudson (tjh@cryptsoft.com). 53 * 54 */ 55 56#include <stdio.h> 57 58#include <openssl/opensslconf.h> 59 60#include <openssl/err.h> 61#include <openssl/x509.h> 62#include <openssl/x509v3.h> 63 64#include "err_local.h" 65 66#ifndef OPENSSL_NO_ERR 67 68#define ERR_FUNC(func) ERR_PACK(ERR_LIB_X509,func,0) 69#define ERR_REASON(reason) ERR_PACK(ERR_LIB_X509,0,reason) 70 71static const ERR_STRING_DATA X509_str_functs[] = { 72 {ERR_FUNC(0xfff), "CRYPTO_internal"}, 73 {0, NULL} 74}; 75 76static const ERR_STRING_DATA X509_str_reasons[] = { 77 {ERR_REASON(X509_R_BAD_X509_FILETYPE) , "bad x509 filetype"}, 78 {ERR_REASON(X509_R_BASE64_DECODE_ERROR) , "base64 decode error"}, 79 {ERR_REASON(X509_R_CANT_CHECK_DH_KEY) , "cant check dh key"}, 80 {ERR_REASON(X509_R_CERT_ALREADY_IN_HASH_TABLE), "cert already in hash table"}, 81 {ERR_REASON(X509_R_ERR_ASN1_LIB) , "err asn1 lib"}, 82 {ERR_REASON(X509_R_INVALID_DIRECTORY) , "invalid directory"}, 83 {ERR_REASON(X509_R_INVALID_FIELD_NAME) , "invalid field name"}, 84 {ERR_REASON(X509_R_INVALID_TRUST) , "invalid trust"}, 85 {ERR_REASON(X509_R_INVALID_VERSION) , "invalid x509 version"}, 86 {ERR_REASON(X509_R_KEY_TYPE_MISMATCH) , "key type mismatch"}, 87 {ERR_REASON(X509_R_KEY_VALUES_MISMATCH) , "key values mismatch"}, 88 {ERR_REASON(X509_R_LOADING_CERT_DIR) , "loading cert dir"}, 89 {ERR_REASON(X509_R_LOADING_DEFAULTS) , "loading defaults"}, 90 {ERR_REASON(X509_R_METHOD_NOT_SUPPORTED) , "method not supported"}, 91 {ERR_REASON(X509_R_NO_CERTIFICATE_OR_CRL_FOUND), "no certificate or crl found"}, 92 {ERR_REASON(X509_R_NO_CERT_SET_FOR_US_TO_VERIFY), "no cert set for us to verify"}, 93 {ERR_REASON(X509_R_PUBLIC_KEY_DECODE_ERROR), "public key decode error"}, 94 {ERR_REASON(X509_R_PUBLIC_KEY_ENCODE_ERROR), "public key encode error"}, 95 {ERR_REASON(X509_R_SHOULD_RETRY) , "should retry"}, 96 {ERR_REASON(X509_R_UNABLE_TO_FIND_PARAMETERS_IN_CHAIN), "unable to find parameters in chain"}, 97 {ERR_REASON(X509_R_UNABLE_TO_GET_CERTS_PUBLIC_KEY), "unable to get certs public key"}, 98 {ERR_REASON(X509_R_UNKNOWN_KEY_TYPE) , "unknown key type"}, 99 {ERR_REASON(X509_R_UNKNOWN_NID) , "unknown nid"}, 100 {ERR_REASON(X509_R_UNKNOWN_PURPOSE_ID) , "unknown purpose id"}, 101 {ERR_REASON(X509_R_UNKNOWN_TRUST_ID) , "unknown trust id"}, 102 {ERR_REASON(X509_R_UNSUPPORTED_ALGORITHM), "unsupported algorithm"}, 103 {ERR_REASON(X509_R_WRONG_LOOKUP_TYPE) , "wrong lookup type"}, 104 {ERR_REASON(X509_R_WRONG_TYPE) , "wrong type"}, 105 {0, NULL} 106}; 107 108#undef ERR_FUNC 109#undef ERR_REASON 110#define ERR_FUNC(func) ERR_PACK(ERR_LIB_X509V3,func,0) 111#define ERR_REASON(reason) ERR_PACK(ERR_LIB_X509V3,0,reason) 112 113static const ERR_STRING_DATA X509V3_str_functs[] = { 114 {ERR_FUNC(0xfff), "CRYPTO_internal"}, 115 {0, NULL} 116}; 117 118static const ERR_STRING_DATA X509V3_str_reasons[] = { 119 {ERR_REASON(X509V3_R_BAD_IP_ADDRESS) , "bad ip address"}, 120 {ERR_REASON(X509V3_R_BAD_OBJECT) , "bad object"}, 121 {ERR_REASON(X509V3_R_BN_DEC2BN_ERROR) , "bn dec2bn error"}, 122 {ERR_REASON(X509V3_R_BN_TO_ASN1_INTEGER_ERROR), "bn to asn1 integer error"}, 123 {ERR_REASON(X509V3_R_DIRNAME_ERROR) , "dirname error"}, 124 {ERR_REASON(X509V3_R_DISTPOINT_ALREADY_SET), "distpoint already set"}, 125 {ERR_REASON(X509V3_R_DUPLICATE_ZONE_ID) , "duplicate zone id"}, 126 {ERR_REASON(X509V3_R_ERROR_CONVERTING_ZONE), "error converting zone"}, 127 {ERR_REASON(X509V3_R_ERROR_CREATING_EXTENSION), "error creating extension"}, 128 {ERR_REASON(X509V3_R_ERROR_IN_EXTENSION) , "error in extension"}, 129 {ERR_REASON(X509V3_R_EXPECTED_A_SECTION_NAME), "expected a section name"}, 130 {ERR_REASON(X509V3_R_EXTENSION_EXISTS) , "extension exists"}, 131 {ERR_REASON(X509V3_R_EXTENSION_NAME_ERROR), "extension name error"}, 132 {ERR_REASON(X509V3_R_EXTENSION_NOT_FOUND), "extension not found"}, 133 {ERR_REASON(X509V3_R_EXTENSION_SETTING_NOT_SUPPORTED), "extension setting not supported"}, 134 {ERR_REASON(X509V3_R_EXTENSION_VALUE_ERROR), "extension value error"}, 135 {ERR_REASON(X509V3_R_ILLEGAL_EMPTY_EXTENSION), "illegal empty extension"}, 136 {ERR_REASON(X509V3_R_ILLEGAL_HEX_DIGIT) , "illegal hex digit"}, 137 {ERR_REASON(X509V3_R_INCORRECT_POLICY_SYNTAX_TAG), "incorrect policy syntax tag"}, 138 {ERR_REASON(X509V3_R_INVALID_MULTIPLE_RDNS), "invalid multiple rdns"}, 139 {ERR_REASON(X509V3_R_INVALID_ASNUMBER) , "invalid asnumber"}, 140 {ERR_REASON(X509V3_R_INVALID_ASRANGE) , "invalid asrange"}, 141 {ERR_REASON(X509V3_R_INVALID_BOOLEAN_STRING), "invalid boolean string"}, 142 {ERR_REASON(X509V3_R_INVALID_EXTENSION_STRING), "invalid extension string"}, 143 {ERR_REASON(X509V3_R_INVALID_INHERITANCE), "invalid inheritance"}, 144 {ERR_REASON(X509V3_R_INVALID_IPADDRESS) , "invalid ipaddress"}, 145 {ERR_REASON(X509V3_R_INVALID_NAME) , "invalid name"}, 146 {ERR_REASON(X509V3_R_INVALID_NULL_ARGUMENT), "invalid null argument"}, 147 {ERR_REASON(X509V3_R_INVALID_NULL_NAME) , "invalid null name"}, 148 {ERR_REASON(X509V3_R_INVALID_NULL_VALUE) , "invalid null value"}, 149 {ERR_REASON(X509V3_R_INVALID_NUMBER) , "invalid number"}, 150 {ERR_REASON(X509V3_R_INVALID_NUMBERS) , "invalid numbers"}, 151 {ERR_REASON(X509V3_R_INVALID_OBJECT_IDENTIFIER), "invalid object identifier"}, 152 {ERR_REASON(X509V3_R_INVALID_OPTION) , "invalid option"}, 153 {ERR_REASON(X509V3_R_INVALID_POLICY_IDENTIFIER), "invalid policy identifier"}, 154 {ERR_REASON(X509V3_R_INVALID_PROXY_POLICY_SETTING), "invalid proxy policy setting"}, 155 {ERR_REASON(X509V3_R_INVALID_PURPOSE) , "invalid purpose"}, 156 {ERR_REASON(X509V3_R_INVALID_SAFI) , "invalid safi"}, 157 {ERR_REASON(X509V3_R_INVALID_SECTION) , "invalid section"}, 158 {ERR_REASON(X509V3_R_INVALID_SYNTAX) , "invalid syntax"}, 159 {ERR_REASON(X509V3_R_ISSUER_DECODE_ERROR), "issuer decode error"}, 160 {ERR_REASON(X509V3_R_MISSING_VALUE) , "missing value"}, 161 {ERR_REASON(X509V3_R_NEED_ORGANIZATION_AND_NUMBERS), "need organization and numbers"}, 162 {ERR_REASON(X509V3_R_NO_CONFIG_DATABASE) , "no config database"}, 163 {ERR_REASON(X509V3_R_NO_ISSUER_CERTIFICATE), "no issuer certificate"}, 164 {ERR_REASON(X509V3_R_NO_ISSUER_DETAILS) , "no issuer details"}, 165 {ERR_REASON(X509V3_R_NO_POLICY_IDENTIFIER), "no policy identifier"}, 166 {ERR_REASON(X509V3_R_NO_PROXY_CERT_POLICY_LANGUAGE_DEFINED), "no proxy cert policy language defined"}, 167 {ERR_REASON(X509V3_R_NO_PUBLIC_KEY) , "no public key"}, 168 {ERR_REASON(X509V3_R_NO_SUBJECT_DETAILS) , "no subject details"}, 169 {ERR_REASON(X509V3_R_ODD_NUMBER_OF_DIGITS), "odd number of digits"}, 170 {ERR_REASON(X509V3_R_OPERATION_NOT_DEFINED), "operation not defined"}, 171 {ERR_REASON(X509V3_R_OTHERNAME_ERROR) , "othername error"}, 172 {ERR_REASON(X509V3_R_POLICY_LANGUAGE_ALREADY_DEFINED), "policy language already defined"}, 173 {ERR_REASON(X509V3_R_POLICY_PATH_LENGTH) , "policy path length"}, 174 {ERR_REASON(X509V3_R_POLICY_PATH_LENGTH_ALREADY_DEFINED), "policy path length already defined"}, 175 {ERR_REASON(X509V3_R_POLICY_SYNTAX_NOT_CURRENTLY_SUPPORTED), "policy syntax not currently supported"}, 176 {ERR_REASON(X509V3_R_POLICY_WHEN_PROXY_LANGUAGE_REQUIRES_NO_POLICY), "policy when proxy language requires no policy"}, 177 {ERR_REASON(X509V3_R_SECTION_NOT_FOUND) , "section not found"}, 178 {ERR_REASON(X509V3_R_UNABLE_TO_GET_ISSUER_DETAILS), "unable to get issuer details"}, 179 {ERR_REASON(X509V3_R_UNABLE_TO_GET_ISSUER_KEYID), "unable to get issuer keyid"}, 180 {ERR_REASON(X509V3_R_UNKNOWN_BIT_STRING_ARGUMENT), "unknown bit string argument"}, 181 {ERR_REASON(X509V3_R_UNKNOWN_EXTENSION) , "unknown extension"}, 182 {ERR_REASON(X509V3_R_UNKNOWN_EXTENSION_NAME), "unknown extension name"}, 183 {ERR_REASON(X509V3_R_UNKNOWN_OPTION) , "unknown option"}, 184 {ERR_REASON(X509V3_R_UNSUPPORTED_OPTION) , "unsupported option"}, 185 {ERR_REASON(X509V3_R_UNSUPPORTED_TYPE) , "unsupported type"}, 186 {ERR_REASON(X509V3_R_USER_TOO_LONG) , "user too long"}, 187 {0, NULL} 188}; 189 190#endif 191 192void 193ERR_load_X509_strings(void) 194{ 195#ifndef OPENSSL_NO_ERR 196 if (ERR_func_error_string(X509_str_functs[0].error) == NULL) { 197 ERR_load_const_strings(X509_str_functs); 198 ERR_load_const_strings(X509_str_reasons); 199 } 200#endif 201} 202LCRYPTO_ALIAS(ERR_load_X509_strings); 203 204 205void 206ERR_load_X509V3_strings(void) 207{ 208#ifndef OPENSSL_NO_ERR 209 if (ERR_func_error_string(X509V3_str_functs[0].error) == NULL) { 210 ERR_load_const_strings(X509V3_str_functs); 211 ERR_load_const_strings(X509V3_str_reasons); 212 } 213#endif 214} 215LCRYPTO_ALIAS(ERR_load_X509V3_strings); 216