DANE support for X509_verify_cert()
[openssl.git] / crypto / x509 / x509_err.c
1 /* crypto/x509/x509_err.c */
2 /* ====================================================================
3  * Copyright (c) 1999-2015 The OpenSSL Project.  All rights reserved.
4  *
5  * Redistribution and use in source and binary forms, with or without
6  * modification, are permitted provided that the following conditions
7  * are met:
8  *
9  * 1. Redistributions of source code must retain the above copyright
10  *    notice, this list of conditions and the following disclaimer.
11  *
12  * 2. Redistributions in binary form must reproduce the above copyright
13  *    notice, this list of conditions and the following disclaimer in
14  *    the documentation and/or other materials provided with the
15  *    distribution.
16  *
17  * 3. All advertising materials mentioning features or use of this
18  *    software must display the following acknowledgment:
19  *    "This product includes software developed by the OpenSSL Project
20  *    for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
21  *
22  * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
23  *    endorse or promote products derived from this software without
24  *    prior written permission. For written permission, please contact
25  *    openssl-core@OpenSSL.org.
26  *
27  * 5. Products derived from this software may not be called "OpenSSL"
28  *    nor may "OpenSSL" appear in their names without prior written
29  *    permission of the OpenSSL Project.
30  *
31  * 6. Redistributions of any form whatsoever must retain the following
32  *    acknowledgment:
33  *    "This product includes software developed by the OpenSSL Project
34  *    for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
35  *
36  * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
37  * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
38  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
39  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
40  * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
41  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
42  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
43  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
44  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
45  * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
46  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
47  * OF THE POSSIBILITY OF SUCH DAMAGE.
48  * ====================================================================
49  *
50  * This product includes cryptographic software written by Eric Young
51  * (eay@cryptsoft.com).  This product includes software written by Tim
52  * Hudson (tjh@cryptsoft.com).
53  *
54  */
55
56 /*
57  * NOTE: this file was auto generated by the mkerr.pl script: any changes
58  * made to it will be overwritten when the script next updates this file,
59  * only reason strings will be preserved.
60  */
61
62 #include <stdio.h>
63 #include <openssl/err.h>
64 #include <openssl/x509.h>
65
66 /* BEGIN ERROR CODES */
67 #ifndef OPENSSL_NO_ERR
68
69 # define ERR_FUNC(func) ERR_PACK(ERR_LIB_X509,func,0)
70 # define ERR_REASON(reason) ERR_PACK(ERR_LIB_X509,0,reason)
71
72 static ERR_STRING_DATA X509_str_functs[] = {
73     {ERR_FUNC(X509_F_ADD_CERT_DIR), "add_cert_dir"},
74     {ERR_FUNC(X509_F_BUILD_CHAIN), "build_chain"},
75     {ERR_FUNC(X509_F_BY_FILE_CTRL), "by_file_ctrl"},
76     {ERR_FUNC(X509_F_CHECK_POLICY), "check_policy"},
77     {ERR_FUNC(X509_F_DANE_I2D), "dane_i2d"},
78     {ERR_FUNC(X509_F_DIR_CTRL), "dir_ctrl"},
79     {ERR_FUNC(X509_F_GET_CERT_BY_SUBJECT), "get_cert_by_subject"},
80     {ERR_FUNC(X509_F_NETSCAPE_SPKI_B64_DECODE), "NETSCAPE_SPKI_b64_decode"},
81     {ERR_FUNC(X509_F_NETSCAPE_SPKI_B64_ENCODE), "NETSCAPE_SPKI_b64_encode"},
82     {ERR_FUNC(X509_F_X509AT_ADD1_ATTR), "X509at_add1_attr"},
83     {ERR_FUNC(X509_F_X509V3_ADD_EXT), "X509v3_add_ext"},
84     {ERR_FUNC(X509_F_X509_ATTRIBUTE_CREATE_BY_NID),
85      "X509_ATTRIBUTE_create_by_NID"},
86     {ERR_FUNC(X509_F_X509_ATTRIBUTE_CREATE_BY_OBJ),
87      "X509_ATTRIBUTE_create_by_OBJ"},
88     {ERR_FUNC(X509_F_X509_ATTRIBUTE_CREATE_BY_TXT),
89      "X509_ATTRIBUTE_create_by_txt"},
90     {ERR_FUNC(X509_F_X509_ATTRIBUTE_GET0_DATA), "X509_ATTRIBUTE_get0_data"},
91     {ERR_FUNC(X509_F_X509_ATTRIBUTE_SET1_DATA), "X509_ATTRIBUTE_set1_data"},
92     {ERR_FUNC(X509_F_X509_CHECK_PRIVATE_KEY), "X509_check_private_key"},
93     {ERR_FUNC(X509_F_X509_CRL_DIFF), "X509_CRL_diff"},
94     {ERR_FUNC(X509_F_X509_CRL_PRINT_FP), "X509_CRL_print_fp"},
95     {ERR_FUNC(X509_F_X509_EXTENSION_CREATE_BY_NID),
96      "X509_EXTENSION_create_by_NID"},
97     {ERR_FUNC(X509_F_X509_EXTENSION_CREATE_BY_OBJ),
98      "X509_EXTENSION_create_by_OBJ"},
99     {ERR_FUNC(X509_F_X509_GET_PUBKEY_PARAMETERS),
100      "X509_get_pubkey_parameters"},
101     {ERR_FUNC(X509_F_X509_LOAD_CERT_CRL_FILE), "X509_load_cert_crl_file"},
102     {ERR_FUNC(X509_F_X509_LOAD_CERT_FILE), "X509_load_cert_file"},
103     {ERR_FUNC(X509_F_X509_LOAD_CRL_FILE), "X509_load_crl_file"},
104     {ERR_FUNC(X509_F_X509_NAME_ADD_ENTRY), "X509_NAME_add_entry"},
105     {ERR_FUNC(X509_F_X509_NAME_ENTRY_CREATE_BY_NID),
106      "X509_NAME_ENTRY_create_by_NID"},
107     {ERR_FUNC(X509_F_X509_NAME_ENTRY_CREATE_BY_TXT),
108      "X509_NAME_ENTRY_create_by_txt"},
109     {ERR_FUNC(X509_F_X509_NAME_ENTRY_SET_OBJECT),
110      "X509_NAME_ENTRY_set_object"},
111     {ERR_FUNC(X509_F_X509_NAME_ONELINE), "X509_NAME_oneline"},
112     {ERR_FUNC(X509_F_X509_NAME_PRINT), "X509_NAME_print"},
113     {ERR_FUNC(X509_F_X509_PRINT_EX_FP), "X509_print_ex_fp"},
114     {ERR_FUNC(X509_F_X509_PUBKEY_GET0), "X509_PUBKEY_get0"},
115     {ERR_FUNC(X509_F_X509_PUBKEY_SET), "X509_PUBKEY_set"},
116     {ERR_FUNC(X509_F_X509_REQ_CHECK_PRIVATE_KEY),
117      "X509_REQ_check_private_key"},
118     {ERR_FUNC(X509_F_X509_REQ_PRINT_EX), "X509_REQ_print_ex"},
119     {ERR_FUNC(X509_F_X509_REQ_PRINT_FP), "X509_REQ_print_fp"},
120     {ERR_FUNC(X509_F_X509_REQ_TO_X509), "X509_REQ_to_X509"},
121     {ERR_FUNC(X509_F_X509_STORE_ADD_CERT), "X509_STORE_add_cert"},
122     {ERR_FUNC(X509_F_X509_STORE_ADD_CRL), "X509_STORE_add_crl"},
123     {ERR_FUNC(X509_F_X509_STORE_CTX_GET1_ISSUER),
124      "X509_STORE_CTX_get1_issuer"},
125     {ERR_FUNC(X509_F_X509_STORE_CTX_INIT), "X509_STORE_CTX_init"},
126     {ERR_FUNC(X509_F_X509_STORE_CTX_NEW), "X509_STORE_CTX_new"},
127     {ERR_FUNC(X509_F_X509_STORE_CTX_PURPOSE_INHERIT),
128      "X509_STORE_CTX_purpose_inherit"},
129     {ERR_FUNC(X509_F_X509_TO_X509_REQ), "X509_to_X509_REQ"},
130     {ERR_FUNC(X509_F_X509_TRUST_ADD), "X509_TRUST_add"},
131     {ERR_FUNC(X509_F_X509_TRUST_SET), "X509_TRUST_set"},
132     {ERR_FUNC(X509_F_X509_VERIFY_CERT), "X509_verify_cert"},
133     {0, NULL}
134 };
135
136 static ERR_STRING_DATA X509_str_reasons[] = {
137     {ERR_REASON(X509_R_AKID_MISMATCH), "akid mismatch"},
138     {ERR_REASON(X509_R_BAD_SELECTOR), "bad selector"},
139     {ERR_REASON(X509_R_BAD_X509_FILETYPE), "bad x509 filetype"},
140     {ERR_REASON(X509_R_BASE64_DECODE_ERROR), "base64 decode error"},
141     {ERR_REASON(X509_R_CANT_CHECK_DH_KEY), "cant check dh key"},
142     {ERR_REASON(X509_R_CERT_ALREADY_IN_HASH_TABLE),
143      "cert already in hash table"},
144     {ERR_REASON(X509_R_CRL_ALREADY_DELTA), "crl already delta"},
145     {ERR_REASON(X509_R_CRL_VERIFY_FAILURE), "crl verify failure"},
146     {ERR_REASON(X509_R_ERR_ASN1_LIB), "err asn1 lib"},
147     {ERR_REASON(X509_R_IDP_MISMATCH), "idp mismatch"},
148     {ERR_REASON(X509_R_INVALID_DIRECTORY), "invalid directory"},
149     {ERR_REASON(X509_R_INVALID_FIELD_NAME), "invalid field name"},
150     {ERR_REASON(X509_R_INVALID_TRUST), "invalid trust"},
151     {ERR_REASON(X509_R_ISSUER_MISMATCH), "issuer mismatch"},
152     {ERR_REASON(X509_R_KEY_TYPE_MISMATCH), "key type mismatch"},
153     {ERR_REASON(X509_R_KEY_VALUES_MISMATCH), "key values mismatch"},
154     {ERR_REASON(X509_R_LOADING_CERT_DIR), "loading cert dir"},
155     {ERR_REASON(X509_R_LOADING_DEFAULTS), "loading defaults"},
156     {ERR_REASON(X509_R_METHOD_NOT_SUPPORTED), "method not supported"},
157     {ERR_REASON(X509_R_NEWER_CRL_NOT_NEWER), "newer crl not newer"},
158     {ERR_REASON(X509_R_NO_CERT_SET_FOR_US_TO_VERIFY),
159      "no cert set for us to verify"},
160     {ERR_REASON(X509_R_NO_CRL_NUMBER), "no crl number"},
161     {ERR_REASON(X509_R_PUBLIC_KEY_DECODE_ERROR), "public key decode error"},
162     {ERR_REASON(X509_R_PUBLIC_KEY_ENCODE_ERROR), "public key encode error"},
163     {ERR_REASON(X509_R_SHOULD_RETRY), "should retry"},
164     {ERR_REASON(X509_R_UNABLE_TO_FIND_PARAMETERS_IN_CHAIN),
165      "unable to find parameters in chain"},
166     {ERR_REASON(X509_R_UNABLE_TO_GET_CERTS_PUBLIC_KEY),
167      "unable to get certs public key"},
168     {ERR_REASON(X509_R_UNKNOWN_KEY_TYPE), "unknown key type"},
169     {ERR_REASON(X509_R_UNKNOWN_NID), "unknown nid"},
170     {ERR_REASON(X509_R_UNKNOWN_PURPOSE_ID), "unknown purpose id"},
171     {ERR_REASON(X509_R_UNKNOWN_TRUST_ID), "unknown trust id"},
172     {ERR_REASON(X509_R_UNSUPPORTED_ALGORITHM), "unsupported algorithm"},
173     {ERR_REASON(X509_R_WRONG_LOOKUP_TYPE), "wrong lookup type"},
174     {ERR_REASON(X509_R_WRONG_TYPE), "wrong type"},
175     {0, NULL}
176 };
177
178 #endif
179
180 void ERR_load_X509_strings(void)
181 {
182 #ifndef OPENSSL_NO_ERR
183
184     if (ERR_func_error_string(X509_str_functs[0].error) == NULL) {
185         ERR_load_strings(0, X509_str_functs);
186         ERR_load_strings(0, X509_str_reasons);
187     }
188 #endif
189 }