PLCnext API Documentation 25.0.2.69
TlsVerificationError.hpp
1
2//
3// Copyright Phoenix Contact GmbH & Co. KG
4//
6#pragma once
8#include "Arp/System/Core/Enum.hxx"
9
10namespace Arp { namespace System { namespace Commons { namespace Net
11{
12
18{
22 None = 0,
26 Ok = 1,
27
31 Unspecified = 2,
32
37
42
49
54
59
64
69
73 CertNotYetValid = 10,
74
78 CertHasExpired = 11,
79
83 CrlNotYetValid = 12,
84
88 CrlHasExpired = 13,
89
94
99
104
109
113 OutOfMem = 18,
114
119
124
129
134
138 CertChainTooLong = 23,
139
143 CertRevoked = 24,
144
148 InvalidCa = 25,
149
154
158 InvalidPurpose = 27,
159
163 CertUntrusted = 28,
164
168 CertRejected = 29,
169
174
178 AkidSkidMismatch = 31,
179
184
189
194
199
204
209
213 InvalidNonCa = 38,
214
219
224
229
233 InvalidExtension = 42,
234
239
243 NoExplicitPolicy = 44,
244
249
254
258 UnnestedResource = 47,
259
264
269
273 SubtreeMinmax = 50,
274
279
284
289
294
299
303 PathLoop = 56,
304
309
314
319
324
329
334
338 HostnameMismatch = 63,
339
343 EmailMismatch = 64,
344
349
353 DaneNoMatch = 66,
354
358 EeKeyTooSmall = 67,
359
363 CaKeyTooSmall = 68,
364
368 CaMdTooWeak = 69,
369
373 InvalidCall = 70,
374
378 StoreLookup = 71,
379
383 NoValidScts = 72,
384
389
393 OcspVerifyNeeded = 74, /* Need OCSP verification */
394
398 OcspVerifyFailed = 75, /* Couldn't verify cert through OCSP */
399
403 OcspCertUnknown = 76, /* Certificate wasn't recognized by the OCSP responder */
404
409
414
419
424
429
434
439
443 IssuerNameEmpty = 84,
444
448 SubjectNameEmpty = 85,
449
454
459
464
469
474
479
484
489
494
499};
500
502// global stream operators of enum TlsVerificationError for logging and parsing
503ARP_CXX_SYMBOL_EXPORT std::ostream& operator<<(std::ostream& os, TlsVerificationError value);
504ARP_CXX_SYMBOL_EXPORT std::istream& operator>>(std::istream& is, TlsVerificationError& value);
505
506}}}} // end of namespace Arp::System::Commons::Net
507
508template<> struct fmt::formatter<Arp::System::Commons::Net::TlsVerificationError>: public fmt::ostream_formatter {};
TlsVerificationError
This enum list possible error codes which further specifies an certificate verification error....
Definition: TlsVerificationError.hpp:18
@ ErrorInCrlNextUpdateField
The CRL nextUpdate field contains an invalid time.
@ CertRevoked
The certificate has been revoked.
@ ApplicationVerification
Application verification failure. Unused.
@ UnableToDecryptCertSignature
The certificate signature could not be decrypted. This means that the actual signature value could no...
@ OcspVerifyNeeded
Returned by the verify callback to indicate an OCSP verification is needed.
@ UnableToGetCrl
The CRL of a certificate could not be found.
@ ProxySubjectNameViolation
Proxy subject name violation.
@ SubtreeMinmax
Name constraints minimum and maximum not supported.
@ ErrorInCertNotBeforeField
The certificate notBefore field contains an invalid time.
@ CertUntrusted
The root CA is not marked as trusted for the specified purpose.
@ CertNotYetValid
The certificate is not yet valid: the notBefore date is after the current time.
@ UnsupportedExtensionFeature
Unsupported extension feature.
@ UnableToGetIssuerCert
The issuer certificate of a looked up certificate could not be found. This normally means the list of...
@ SignatureAlgorithmMismatch
The issuer's public key is not of the type required by the signature in the subject's certificate.
@ NoIssuerPublicKey
The issuer certificate does not have a public key.
@ UnableToVerifyLeafSignature
No signatures could be verified because the chain contains only one certificate and it is not self si...
@ UnsupportedConstraintSyntax
Unsupported or invalid name constraint syntax.
@ CertSignatureFailure
The signature of the certificate is invalid.
@ UnableToDecodeIssuerPublicKey
The public key in the certificate SubjectPublicKeyInfo could not be read.
@ CaMdTooWeak
CA signature digest algorithm too weak.
@ UnnestedResource
RFC 3779 resource not subset of parent's resources.
@ CrlPathValidationError
CRL path validation error.
@ ExcludedViolation
Excluded subtree violation.
@ PermittedViolation
Permitted subtree violation.
@ InvalidPolicyExtension
Invalid or inconsistent certificate policy extension.
@ NoValidScts
Certificate Transparency required, but no valid SCTs found.
@ KeyusageNoCrlSign
Key usage does not include CRL signing.
@ ErrorInCrlLastUpdateField
The CRL lastUpdate field contains an invalid time.
@ CertRejected
The root CA is marked to reject the specified purpose.
@ SuiteBInvalidAlgorithm
Suite B: invalid public key algorithm.
@ InvalidNonCa
Invalid non-CA certificate has CA markings.
@ CertHasExpired
The certificate has expired: that is the notAfter date is before the current time.
@ KeyusageNoDigitalSignature
Key usage does not include digital signature.
@ InvalidExtension
Invalid or inconsistent certificate extension.
@ OutOfMem
An error occurred trying to allocate memory. This should never happen.
@ SuiteBInvalidVersion
Suite B: certificate version invalid.
@ UnhandledCriticalCrlExtension
Unhandled critical CRL extension.
@ ProxyCertificatesNotAllowed
Proxy certificates not allowed
@ DepthZeroSelfSignedCert
The passed certificate is self-signed and the same certificate cannot be found in the list of trusted...
@ DaneNoMatch
DANE TLSA authentication is enabled, but no TLSA records matched the certificate chain....
@ OcspCertUnknown
Returned by the verify callback to indicate that the certificate is not recognized by the OCSP respon...
@ UnableToDecryptCrlSignature
The CRL signature could not be decrypted: this means that the actual signature value could not be det...
@ CrlSignatureFailure
The signature of the certificate is invalid.
@ EeKeyTooSmall
EE certificate key too weak.
@ PathLengthExceeded
The basicConstraints pathlength parameter has been exceeded.
@ StoreLookup
Issuer certificate lookup error.
@ UnhandledCriticalExtension
Unhandled critical extension.
@ UnableToGetIssuerCertLocally
The issuer certificate could not be found: this occurs if the issuer certificate of an untrusted cert...
@ CaKeyTooSmall
CA certificate key too weak.
@ SelfSignedCertInChain
The certificate chain could be built up using the untrusted certificates but the root could not be fo...
@ SuiteBInvalidCurve
Suite B: invalid ECC curve.
@ InvalidCall
invalid certificate verification context.
@ SuiteBCannotSignP384WithP256
Suite B: cannot sign P-384 with P-256.
@ InvalidPurpose
The supplied certificate cannot be used for the specified purpose.
@ InvalidCa
A CA certificate is invalid. Either it is not a CA or its extensions are not consistent with the supp...
@ ErrorInCertNotAfterField
The certificate notAfter field contains an invalid time.
@ ProxyPathLengthExceeded
Proxy path length constraint exceeded.
@ UnsupportedConstraintType
Unsupported name constraint type.
@ SuiteBLosNotAllowed
Suite B: curve not allowed for this LOS.
@ UnsupportedNameSyntax
Unsupported or invalid name syntax.
@ CertChainTooLong
The certificate chain length is greater than the supplied maximum depth. Unused.
@ UnableToGetCrlIssuer
Unable to get CRL issuer certificate.
@ OcspVerifyFailed
Returned by the verify callback to indicate OCSP verification failed.
@ SuiteBInvalidSignatureAlgorithm
Suite B: invalid signature algorithm.
std::ostream & operator<<(std::ostream &os, const IpAddress &ipAddress)
The ostream operator is used for logging and string formatting.
Definition: IpAddress.cpp:76
std::istream & operator>>(std::istream &is, IpAddress &ipAddress)
The istream operator is used for string parsing.
Definition: IpAddress.cpp:83
Root namespace for the PLCnext API