mirror of
https://github.com/netbirdio/plugins.git
synced 2026-05-22 18:44:07 -07:00
228 lines
7.2 KiB
Plaintext
228 lines
7.2 KiB
Plaintext
name: SQUID_X509_V_ERR_INFINITE_VALIDATION
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "Cert validation infinite loop detected"
|
|
|
|
name: SQUID_TLS_ERR_ACCEPT
|
|
detail: "%ssl_error_descr: %ssl_lib_error"
|
|
descr: "Failed to accept a secure connection"
|
|
|
|
name: SQUID_TLS_ERR_CONNECT
|
|
detail: "%ssl_error_descr: %ssl_lib_error"
|
|
descr: "Failed to establish a secure connection"
|
|
|
|
name: SQUID_X509_V_ERR_DOMAIN_MISMATCH
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "Certificate does not match domainname"
|
|
|
|
name: X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT
|
|
detail: "SSL Certificate error: certificate issuer (CA) not known: %ssl_ca_name"
|
|
descr: "Unable to get issuer certificate"
|
|
|
|
name: X509_V_ERR_UNABLE_TO_GET_CRL
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "Unable to get certificate CRL"
|
|
|
|
name: X509_V_ERR_UNABLE_TO_DECRYPT_CERT_SIGNATURE
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "Unable to decrypt certificate's signature"
|
|
|
|
name: X509_V_ERR_UNABLE_TO_DECRYPT_CRL_SIGNATURE
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "Unable to decrypt CRL's signature"
|
|
|
|
name: X509_V_ERR_UNABLE_TO_DECODE_ISSUER_PUBLIC_KEY
|
|
detail: "Unable to decode issuer (CA) public key: %ssl_ca_name"
|
|
descr: "Unable to decode issuer public key"
|
|
|
|
name: X509_V_ERR_CERT_SIGNATURE_FAILURE
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "Certificate signature failure"
|
|
|
|
name: X509_V_ERR_CRL_SIGNATURE_FAILURE
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "CRL signature failure"
|
|
|
|
name: X509_V_ERR_CERT_NOT_YET_VALID
|
|
detail: "SSL Certificate is not valid before: %ssl_notbefore"
|
|
descr: "Certificate is not yet valid"
|
|
|
|
name: X509_V_ERR_CERT_HAS_EXPIRED
|
|
detail: "SSL Certificate expired on: %ssl_notafter"
|
|
descr: "Certificate has expired"
|
|
|
|
name: X509_V_ERR_CRL_NOT_YET_VALID
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "CRL is not yet valid"
|
|
|
|
name: X509_V_ERR_CRL_HAS_EXPIRED
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "CRL has expired"
|
|
|
|
name: X509_V_ERR_ERROR_IN_CERT_NOT_BEFORE_FIELD
|
|
detail: "SSL Certificate has invalid start date (the 'not before' field): %ssl_subject"
|
|
descr: "Format error in certificate's notBefore field"
|
|
|
|
name: X509_V_ERR_ERROR_IN_CERT_NOT_AFTER_FIELD
|
|
detail: "SSL Certificate has invalid expiration date (the 'not after' field): %ssl_subject"
|
|
descr: "Format error in certificate's notAfter field"
|
|
|
|
name: X509_V_ERR_ERROR_IN_CRL_LAST_UPDATE_FIELD
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "Format error in CRL's lastUpdate field"
|
|
|
|
name: X509_V_ERR_ERROR_IN_CRL_NEXT_UPDATE_FIELD
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "Format error in CRL's nextUpdate field"
|
|
|
|
name: X509_V_ERR_OUT_OF_MEM
|
|
detail: "%ssl_error_descr"
|
|
descr: "Out of memory"
|
|
|
|
name: X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT
|
|
detail: "Self-signed SSL Certificate: %ssl_subject"
|
|
descr: "Self signed certificate"
|
|
|
|
name: X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN
|
|
detail: "Self-signed SSL Certificate in chain: %ssl_subject"
|
|
descr: "Self signed certificate in certificate chain"
|
|
|
|
name: X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY
|
|
detail: "SSL Certificate error: certificate issuer (CA) not known: %ssl_ca_name"
|
|
descr: "Unable to get local issuer certificate"
|
|
|
|
name: X509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "Unable to verify the first certificate"
|
|
|
|
name: X509_V_ERR_CERT_CHAIN_TOO_LONG
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "Certificate chain too long"
|
|
|
|
name: X509_V_ERR_CERT_REVOKED
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "Certificate revoked"
|
|
|
|
name: X509_V_ERR_INVALID_CA
|
|
detail: "%ssl_error_descr: %ssl_ca_name"
|
|
descr: "Invalid CA certificate"
|
|
|
|
name: X509_V_ERR_PATH_LENGTH_EXCEEDED
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "Path length constraint exceeded"
|
|
|
|
name: X509_V_ERR_INVALID_PURPOSE
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "Unsupported certificate purpose"
|
|
|
|
name: X509_V_ERR_CERT_UNTRUSTED
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "Certificate not trusted"
|
|
|
|
name: X509_V_ERR_CERT_REJECTED
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "Certificate rejected"
|
|
|
|
name: X509_V_ERR_SUBJECT_ISSUER_MISMATCH
|
|
detail: "%ssl_error_descr: %ssl_ca_name"
|
|
descr: "Subject issuer mismatch"
|
|
|
|
name: X509_V_ERR_AKID_SKID_MISMATCH
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "Authority and subject key identifier mismatch"
|
|
|
|
name: X509_V_ERR_AKID_ISSUER_SERIAL_MISMATCH
|
|
detail: "%ssl_error_descr: %ssl_ca_name"
|
|
descr: "Authority and issuer serial number mismatch"
|
|
|
|
name: X509_V_ERR_KEYUSAGE_NO_CERTSIGN
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "Key usage does not include certificate signing"
|
|
|
|
name: X509_V_ERR_UNABLE_TO_GET_CRL_ISSUER
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "unable to get CRL issuer certificate"
|
|
|
|
name: X509_V_ERR_UNHANDLED_CRITICAL_EXTENSION
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "unhandled critical extension"
|
|
|
|
name: X509_V_ERR_KEYUSAGE_NO_CRL_SIGN
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "key usage does not include CRL signing"
|
|
|
|
name: X509_V_ERR_UNHANDLED_CRITICAL_CRL_EXTENSION
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "unhandled critical CRL extension"
|
|
|
|
name: X509_V_ERR_INVALID_NON_CA
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "invalid non-CA certificate (has CA markings)"
|
|
|
|
name: X509_V_ERR_PROXY_PATH_LENGTH_EXCEEDED
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "proxy path length constraint exceeded"
|
|
|
|
name: X509_V_ERR_KEYUSAGE_NO_DIGITAL_SIGNATURE
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "key usage does not include digital signature"
|
|
|
|
name: X509_V_ERR_PROXY_CERTIFICATES_NOT_ALLOWED
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "proxy certificates not allowed, please set the appropriate flag"
|
|
|
|
name: X509_V_ERR_INVALID_EXTENSION
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "invalid or inconsistent certificate extension"
|
|
|
|
name: X509_V_ERR_INVALID_POLICY_EXTENSION
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "invalid or inconsistent certificate policy extension"
|
|
|
|
name: X509_V_ERR_NO_EXPLICIT_POLICY
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "no explicit policy"
|
|
|
|
name: X509_V_ERR_DIFFERENT_CRL_SCOPE
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "Different CRL scope"
|
|
|
|
name: X509_V_ERR_UNSUPPORTED_EXTENSION_FEATURE
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "Unsupported extension feature"
|
|
|
|
name: X509_V_ERR_UNNESTED_RESOURCE
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "RFC 3779 resource not subset of parent's resources"
|
|
|
|
name: X509_V_ERR_PERMITTED_VIOLATION
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "permitted subtree violation"
|
|
|
|
name: X509_V_ERR_EXCLUDED_VIOLATION
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "excluded subtree violation"
|
|
|
|
name: X509_V_ERR_SUBTREE_MINMAX
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "name constraints minimum and maximum not supported"
|
|
|
|
name: X509_V_ERR_UNSUPPORTED_CONSTRAINT_TYPE
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "unsupported name constraint type"
|
|
|
|
name: X509_V_ERR_UNSUPPORTED_CONSTRAINT_SYNTAX
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "unsupported or invalid name constraint syntax"
|
|
|
|
name: X509_V_ERR_UNSUPPORTED_NAME_SYNTAX
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "unsupported or invalid name syntax"
|
|
|
|
name: X509_V_ERR_CRL_PATH_VALIDATION_ERROR
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "CRL path validation error"
|
|
|
|
name: X509_V_ERR_APPLICATION_VERIFICATION
|
|
detail: "%ssl_error_descr: %ssl_subject"
|
|
descr: "Application verification failure"
|