michael@0: /* This Source Code Form is subject to the terms of the Mozilla Public
michael@0:  * License, v. 2.0. If a copy of the MPL was not distributed with this
michael@0:  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
michael@0: 
michael@0: /* General security error codes  */
michael@0: /* Caller must #include "secerr.h" */
michael@0: 
michael@0: ER3(SEC_ERROR_IO,				SEC_ERROR_BASE + 0,
michael@0: "An I/O error occurred during security authorization.")
michael@0: 
michael@0: ER3(SEC_ERROR_LIBRARY_FAILURE,			SEC_ERROR_BASE + 1,
michael@0: "security library failure.")
michael@0: 
michael@0: ER3(SEC_ERROR_BAD_DATA,				SEC_ERROR_BASE + 2,
michael@0: "security library: received bad data.")
michael@0: 
michael@0: ER3(SEC_ERROR_OUTPUT_LEN,			SEC_ERROR_BASE + 3,
michael@0: "security library: output length error.")
michael@0: 
michael@0: ER3(SEC_ERROR_INPUT_LEN,			SEC_ERROR_BASE + 4,
michael@0: "security library has experienced an input length error.")
michael@0: 
michael@0: ER3(SEC_ERROR_INVALID_ARGS,			SEC_ERROR_BASE + 5,
michael@0: "security library: invalid arguments.")
michael@0: 
michael@0: ER3(SEC_ERROR_INVALID_ALGORITHM,		SEC_ERROR_BASE + 6,
michael@0: "security library: invalid algorithm.")
michael@0: 
michael@0: ER3(SEC_ERROR_INVALID_AVA,			SEC_ERROR_BASE + 7,
michael@0: "security library: invalid AVA.")
michael@0: 
michael@0: ER3(SEC_ERROR_INVALID_TIME,			SEC_ERROR_BASE + 8,
michael@0: "Improperly formatted time string.")
michael@0: 
michael@0: ER3(SEC_ERROR_BAD_DER,				SEC_ERROR_BASE + 9,
michael@0: "security library: improperly formatted DER-encoded message.")
michael@0: 
michael@0: ER3(SEC_ERROR_BAD_SIGNATURE,			SEC_ERROR_BASE + 10,
michael@0: "Peer's certificate has an invalid signature.")
michael@0: 
michael@0: ER3(SEC_ERROR_EXPIRED_CERTIFICATE,		SEC_ERROR_BASE + 11,
michael@0: "Peer's Certificate has expired.")
michael@0: 
michael@0: ER3(SEC_ERROR_REVOKED_CERTIFICATE,		SEC_ERROR_BASE + 12,
michael@0: "Peer's Certificate has been revoked.")
michael@0: 
michael@0: ER3(SEC_ERROR_UNKNOWN_ISSUER,			SEC_ERROR_BASE + 13,
michael@0: "Peer's Certificate issuer is not recognized.")
michael@0: 
michael@0: ER3(SEC_ERROR_BAD_KEY,				SEC_ERROR_BASE + 14,
michael@0: "Peer's public key is invalid.")
michael@0: 
michael@0: ER3(SEC_ERROR_BAD_PASSWORD,			SEC_ERROR_BASE + 15,
michael@0: "The security password entered is incorrect.")
michael@0: 
michael@0: ER3(SEC_ERROR_RETRY_PASSWORD,			SEC_ERROR_BASE + 16,
michael@0: "New password entered incorrectly.  Please try again.")
michael@0: 
michael@0: ER3(SEC_ERROR_NO_NODELOCK,			SEC_ERROR_BASE + 17,
michael@0: "security library: no nodelock.")
michael@0: 
michael@0: ER3(SEC_ERROR_BAD_DATABASE,			SEC_ERROR_BASE + 18,
michael@0: "security library: bad database.")
michael@0: 
michael@0: ER3(SEC_ERROR_NO_MEMORY,			SEC_ERROR_BASE + 19,
michael@0: "security library: memory allocation failure.")
michael@0: 
michael@0: ER3(SEC_ERROR_UNTRUSTED_ISSUER,			SEC_ERROR_BASE + 20,
michael@0: "Peer's certificate issuer has been marked as not trusted by the user.")
michael@0: 
michael@0: ER3(SEC_ERROR_UNTRUSTED_CERT,			SEC_ERROR_BASE + 21,
michael@0: "Peer's certificate has been marked as not trusted by the user.")
michael@0: 
michael@0: ER3(SEC_ERROR_DUPLICATE_CERT,			(SEC_ERROR_BASE + 22),
michael@0: "Certificate already exists in your database.")
michael@0: 
michael@0: ER3(SEC_ERROR_DUPLICATE_CERT_NAME,		(SEC_ERROR_BASE + 23),
michael@0: "Downloaded certificate's name duplicates one already in your database.")
michael@0: 
michael@0: ER3(SEC_ERROR_ADDING_CERT,			(SEC_ERROR_BASE + 24),
michael@0: "Error adding certificate to database.")
michael@0: 
michael@0: ER3(SEC_ERROR_FILING_KEY,			(SEC_ERROR_BASE + 25),
michael@0: "Error refiling the key for this certificate.")
michael@0: 
michael@0: ER3(SEC_ERROR_NO_KEY,				(SEC_ERROR_BASE + 26),
michael@0: "The private key for this certificate cannot be found in key database")
michael@0: 
michael@0: ER3(SEC_ERROR_CERT_VALID,			(SEC_ERROR_BASE + 27),
michael@0: "This certificate is valid.")
michael@0: 
michael@0: ER3(SEC_ERROR_CERT_NOT_VALID,			(SEC_ERROR_BASE + 28),
michael@0: "This certificate is not valid.")
michael@0: 
michael@0: ER3(SEC_ERROR_CERT_NO_RESPONSE,			(SEC_ERROR_BASE + 29),
michael@0: "Cert Library: No Response")
michael@0: 
michael@0: ER3(SEC_ERROR_EXPIRED_ISSUER_CERTIFICATE,	(SEC_ERROR_BASE + 30),
michael@0: "The certificate issuer's certificate has expired.  Check your system date and time.")
michael@0: 
michael@0: ER3(SEC_ERROR_CRL_EXPIRED,			(SEC_ERROR_BASE + 31),
michael@0: "The CRL for the certificate's issuer has expired.  Update it or check your system date and time.")
michael@0: 
michael@0: ER3(SEC_ERROR_CRL_BAD_SIGNATURE,		(SEC_ERROR_BASE + 32),
michael@0: "The CRL for the certificate's issuer has an invalid signature.")
michael@0: 
michael@0: ER3(SEC_ERROR_CRL_INVALID,			(SEC_ERROR_BASE + 33),
michael@0: "New CRL has an invalid format.")
michael@0: 
michael@0: ER3(SEC_ERROR_EXTENSION_VALUE_INVALID,		(SEC_ERROR_BASE + 34),
michael@0: "Certificate extension value is invalid.")
michael@0: 
michael@0: ER3(SEC_ERROR_EXTENSION_NOT_FOUND,		(SEC_ERROR_BASE + 35),
michael@0: "Certificate extension not found.")
michael@0: 
michael@0: ER3(SEC_ERROR_CA_CERT_INVALID,			(SEC_ERROR_BASE + 36),
michael@0: "Issuer certificate is invalid.")
michael@0:    
michael@0: ER3(SEC_ERROR_PATH_LEN_CONSTRAINT_INVALID,	(SEC_ERROR_BASE + 37),
michael@0: "Certificate path length constraint is invalid.")
michael@0: 
michael@0: ER3(SEC_ERROR_CERT_USAGES_INVALID,		(SEC_ERROR_BASE + 38),
michael@0: "Certificate usages field is invalid.")
michael@0: 
michael@0: ER3(SEC_INTERNAL_ONLY,				(SEC_ERROR_BASE + 39),
michael@0: "**Internal ONLY module**")
michael@0: 
michael@0: ER3(SEC_ERROR_INVALID_KEY,			(SEC_ERROR_BASE + 40),
michael@0: "The key does not support the requested operation.")
michael@0: 
michael@0: ER3(SEC_ERROR_UNKNOWN_CRITICAL_EXTENSION,	(SEC_ERROR_BASE + 41),
michael@0: "Certificate contains unknown critical extension.")
michael@0: 
michael@0: ER3(SEC_ERROR_OLD_CRL,				(SEC_ERROR_BASE + 42),
michael@0: "New CRL is not later than the current one.")
michael@0: 
michael@0: ER3(SEC_ERROR_NO_EMAIL_CERT,			(SEC_ERROR_BASE + 43),
michael@0: "Not encrypted or signed: you do not yet have an email certificate.")
michael@0: 
michael@0: ER3(SEC_ERROR_NO_RECIPIENT_CERTS_QUERY,		(SEC_ERROR_BASE + 44),
michael@0: "Not encrypted: you do not have certificates for each of the recipients.")
michael@0: 
michael@0: ER3(SEC_ERROR_NOT_A_RECIPIENT,			(SEC_ERROR_BASE + 45),
michael@0: "Cannot decrypt: you are not a recipient, or matching certificate and \
michael@0: private key not found.")
michael@0: 
michael@0: ER3(SEC_ERROR_PKCS7_KEYALG_MISMATCH,		(SEC_ERROR_BASE + 46),
michael@0: "Cannot decrypt: key encryption algorithm does not match your certificate.")
michael@0: 
michael@0: ER3(SEC_ERROR_PKCS7_BAD_SIGNATURE,		(SEC_ERROR_BASE + 47),
michael@0: "Signature verification failed: no signer found, too many signers found, \
michael@0: or improper or corrupted data.")
michael@0: 
michael@0: ER3(SEC_ERROR_UNSUPPORTED_KEYALG,		(SEC_ERROR_BASE + 48),
michael@0: "Unsupported or unknown key algorithm.")
michael@0: 
michael@0: ER3(SEC_ERROR_DECRYPTION_DISALLOWED,		(SEC_ERROR_BASE + 49),
michael@0: "Cannot decrypt: encrypted using a disallowed algorithm or key size.")
michael@0: 
michael@0: 
michael@0: /* Fortezza Alerts */
michael@0: ER3(XP_SEC_FORTEZZA_BAD_CARD,			(SEC_ERROR_BASE + 50),
michael@0: "Fortezza card has not been properly initialized.  \
michael@0: Please remove it and return it to your issuer.")
michael@0: 
michael@0: ER3(XP_SEC_FORTEZZA_NO_CARD,			(SEC_ERROR_BASE + 51),
michael@0: "No Fortezza cards Found")
michael@0: 
michael@0: ER3(XP_SEC_FORTEZZA_NONE_SELECTED,		(SEC_ERROR_BASE + 52),
michael@0: "No Fortezza card selected")
michael@0: 
michael@0: ER3(XP_SEC_FORTEZZA_MORE_INFO,			(SEC_ERROR_BASE + 53),
michael@0: "Please select a personality to get more info on")
michael@0: 
michael@0: ER3(XP_SEC_FORTEZZA_PERSON_NOT_FOUND,		(SEC_ERROR_BASE + 54),
michael@0: "Personality not found")
michael@0: 
michael@0: ER3(XP_SEC_FORTEZZA_NO_MORE_INFO,		(SEC_ERROR_BASE + 55),
michael@0: "No more information on that Personality")
michael@0: 
michael@0: ER3(XP_SEC_FORTEZZA_BAD_PIN,			(SEC_ERROR_BASE + 56),
michael@0: "Invalid Pin")
michael@0: 
michael@0: ER3(XP_SEC_FORTEZZA_PERSON_ERROR,		(SEC_ERROR_BASE + 57),
michael@0: "Couldn't initialize Fortezza personalities.")
michael@0: /* end fortezza alerts. */
michael@0: 
michael@0: ER3(SEC_ERROR_NO_KRL,				(SEC_ERROR_BASE + 58),
michael@0: "No KRL for this site's certificate has been found.")
michael@0: 
michael@0: ER3(SEC_ERROR_KRL_EXPIRED,			(SEC_ERROR_BASE + 59),
michael@0: "The KRL for this site's certificate has expired.")
michael@0: 
michael@0: ER3(SEC_ERROR_KRL_BAD_SIGNATURE,		(SEC_ERROR_BASE + 60),
michael@0: "The KRL for this site's certificate has an invalid signature.")
michael@0: 
michael@0: ER3(SEC_ERROR_REVOKED_KEY,			(SEC_ERROR_BASE + 61),
michael@0: "The key for this site's certificate has been revoked.")
michael@0: 
michael@0: ER3(SEC_ERROR_KRL_INVALID,			(SEC_ERROR_BASE + 62),
michael@0: "New KRL has an invalid format.")
michael@0: 
michael@0: ER3(SEC_ERROR_NEED_RANDOM,			(SEC_ERROR_BASE + 63),
michael@0: "security library: need random data.")
michael@0: 
michael@0: ER3(SEC_ERROR_NO_MODULE,			(SEC_ERROR_BASE + 64),
michael@0: "security library: no security module can perform the requested operation.")
michael@0: 
michael@0: ER3(SEC_ERROR_NO_TOKEN,				(SEC_ERROR_BASE + 65),
michael@0: "The security card or token does not exist, needs to be initialized, or has been removed.")
michael@0: 
michael@0: ER3(SEC_ERROR_READ_ONLY,			(SEC_ERROR_BASE + 66),
michael@0: "security library: read-only database.")
michael@0: 
michael@0: ER3(SEC_ERROR_NO_SLOT_SELECTED,			(SEC_ERROR_BASE + 67),
michael@0: "No slot or token was selected.")
michael@0: 
michael@0: ER3(SEC_ERROR_CERT_NICKNAME_COLLISION,		(SEC_ERROR_BASE + 68),
michael@0: "A certificate with the same nickname already exists.")
michael@0: 
michael@0: ER3(SEC_ERROR_KEY_NICKNAME_COLLISION,		(SEC_ERROR_BASE + 69),
michael@0: "A key with the same nickname already exists.")
michael@0: 
michael@0: ER3(SEC_ERROR_SAFE_NOT_CREATED,			(SEC_ERROR_BASE + 70),
michael@0: "error while creating safe object")
michael@0: 
michael@0: ER3(SEC_ERROR_BAGGAGE_NOT_CREATED,		(SEC_ERROR_BASE + 71),
michael@0: "error while creating baggage object")
michael@0: 
michael@0: ER3(XP_JAVA_REMOVE_PRINCIPAL_ERROR,		(SEC_ERROR_BASE + 72),
michael@0: "Couldn't remove the principal")
michael@0: 
michael@0: ER3(XP_JAVA_DELETE_PRIVILEGE_ERROR,		(SEC_ERROR_BASE + 73),
michael@0: "Couldn't delete the privilege")
michael@0: 
michael@0: ER3(XP_JAVA_CERT_NOT_EXISTS_ERROR,		(SEC_ERROR_BASE + 74),
michael@0: "This principal doesn't have a certificate")
michael@0: 
michael@0: ER3(SEC_ERROR_BAD_EXPORT_ALGORITHM,		(SEC_ERROR_BASE + 75),
michael@0: "Required algorithm is not allowed.")
michael@0: 
michael@0: ER3(SEC_ERROR_EXPORTING_CERTIFICATES,		(SEC_ERROR_BASE + 76),
michael@0: "Error attempting to export certificates.")
michael@0: 
michael@0: ER3(SEC_ERROR_IMPORTING_CERTIFICATES,		(SEC_ERROR_BASE + 77),
michael@0: "Error attempting to import certificates.")
michael@0: 
michael@0: ER3(SEC_ERROR_PKCS12_DECODING_PFX,		(SEC_ERROR_BASE + 78),
michael@0: "Unable to import.  Decoding error.  File not valid.")
michael@0: 
michael@0: ER3(SEC_ERROR_PKCS12_INVALID_MAC,		(SEC_ERROR_BASE + 79),
michael@0: "Unable to import.  Invalid MAC.  Incorrect password or corrupt file.")
michael@0: 
michael@0: ER3(SEC_ERROR_PKCS12_UNSUPPORTED_MAC_ALGORITHM,	(SEC_ERROR_BASE + 80),
michael@0: "Unable to import.  MAC algorithm not supported.")
michael@0: 
michael@0: ER3(SEC_ERROR_PKCS12_UNSUPPORTED_TRANSPORT_MODE,(SEC_ERROR_BASE + 81),
michael@0: "Unable to import.  Only password integrity and privacy modes supported.")
michael@0: 
michael@0: ER3(SEC_ERROR_PKCS12_CORRUPT_PFX_STRUCTURE,	(SEC_ERROR_BASE + 82),
michael@0: "Unable to import.  File structure is corrupt.")
michael@0: 
michael@0: ER3(SEC_ERROR_PKCS12_UNSUPPORTED_PBE_ALGORITHM, (SEC_ERROR_BASE + 83),
michael@0: "Unable to import.  Encryption algorithm not supported.")
michael@0: 
michael@0: ER3(SEC_ERROR_PKCS12_UNSUPPORTED_VERSION,	(SEC_ERROR_BASE + 84),
michael@0: "Unable to import.  File version not supported.")
michael@0: 
michael@0: ER3(SEC_ERROR_PKCS12_PRIVACY_PASSWORD_INCORRECT,(SEC_ERROR_BASE + 85),
michael@0: "Unable to import.  Incorrect privacy password.")
michael@0: 
michael@0: ER3(SEC_ERROR_PKCS12_CERT_COLLISION,		(SEC_ERROR_BASE + 86),
michael@0: "Unable to import.  Same nickname already exists in database.")
michael@0: 
michael@0: ER3(SEC_ERROR_USER_CANCELLED,			(SEC_ERROR_BASE + 87),
michael@0: "The user pressed cancel.")
michael@0: 
michael@0: ER3(SEC_ERROR_PKCS12_DUPLICATE_DATA,		(SEC_ERROR_BASE + 88),
michael@0: "Not imported, already in database.")
michael@0: 
michael@0: ER3(SEC_ERROR_MESSAGE_SEND_ABORTED,		(SEC_ERROR_BASE + 89),
michael@0: "Message not sent.")
michael@0: 
michael@0: ER3(SEC_ERROR_INADEQUATE_KEY_USAGE,		(SEC_ERROR_BASE + 90),
michael@0: "Certificate key usage inadequate for attempted operation.")
michael@0: 
michael@0: ER3(SEC_ERROR_INADEQUATE_CERT_TYPE,		(SEC_ERROR_BASE + 91),
michael@0: "Certificate type not approved for application.")
michael@0: 
michael@0: ER3(SEC_ERROR_CERT_ADDR_MISMATCH,		(SEC_ERROR_BASE + 92),
michael@0: "Address in signing certificate does not match address in message headers.")
michael@0: 
michael@0: ER3(SEC_ERROR_PKCS12_UNABLE_TO_IMPORT_KEY,	(SEC_ERROR_BASE + 93),
michael@0: "Unable to import.  Error attempting to import private key.")
michael@0: 
michael@0: ER3(SEC_ERROR_PKCS12_IMPORTING_CERT_CHAIN,	(SEC_ERROR_BASE + 94),
michael@0: "Unable to import.  Error attempting to import certificate chain.")
michael@0: 
michael@0: ER3(SEC_ERROR_PKCS12_UNABLE_TO_LOCATE_OBJECT_BY_NAME, (SEC_ERROR_BASE + 95),
michael@0: "Unable to export.  Unable to locate certificate or key by nickname.")
michael@0: 
michael@0: ER3(SEC_ERROR_PKCS12_UNABLE_TO_EXPORT_KEY,	(SEC_ERROR_BASE + 96),
michael@0: "Unable to export.  Private Key could not be located and exported.")
michael@0: 
michael@0: ER3(SEC_ERROR_PKCS12_UNABLE_TO_WRITE, 		(SEC_ERROR_BASE + 97),
michael@0: "Unable to export.  Unable to write the export file.")
michael@0: 
michael@0: ER3(SEC_ERROR_PKCS12_UNABLE_TO_READ,		(SEC_ERROR_BASE + 98),
michael@0: "Unable to import.  Unable to read the import file.")
michael@0: 
michael@0: ER3(SEC_ERROR_PKCS12_KEY_DATABASE_NOT_INITIALIZED, (SEC_ERROR_BASE + 99),
michael@0: "Unable to export.  Key database corrupt or deleted.")
michael@0: 
michael@0: ER3(SEC_ERROR_KEYGEN_FAIL,			(SEC_ERROR_BASE + 100),
michael@0: "Unable to generate public/private key pair.")
michael@0: 
michael@0: ER3(SEC_ERROR_INVALID_PASSWORD,			(SEC_ERROR_BASE + 101),
michael@0: "Password entered is invalid.  Please pick a different one.")
michael@0: 
michael@0: ER3(SEC_ERROR_RETRY_OLD_PASSWORD,		(SEC_ERROR_BASE + 102),
michael@0: "Old password entered incorrectly.  Please try again.")
michael@0: 
michael@0: ER3(SEC_ERROR_BAD_NICKNAME,			(SEC_ERROR_BASE + 103),
michael@0: "Certificate nickname already in use.")
michael@0: 
michael@0: ER3(SEC_ERROR_NOT_FORTEZZA_ISSUER,       	(SEC_ERROR_BASE + 104),
michael@0: "Peer FORTEZZA chain has a non-FORTEZZA Certificate.")
michael@0: 
michael@0: ER3(SEC_ERROR_CANNOT_MOVE_SENSITIVE_KEY, 	(SEC_ERROR_BASE + 105),
michael@0: "A sensitive key cannot be moved to the slot where it is needed.")
michael@0: 
michael@0: ER3(SEC_ERROR_JS_INVALID_MODULE_NAME, 		(SEC_ERROR_BASE + 106),
michael@0: "Invalid module name.")
michael@0: 
michael@0: ER3(SEC_ERROR_JS_INVALID_DLL, 			(SEC_ERROR_BASE + 107),
michael@0: "Invalid module path/filename")
michael@0: 
michael@0: ER3(SEC_ERROR_JS_ADD_MOD_FAILURE, 		(SEC_ERROR_BASE + 108),
michael@0: "Unable to add module")
michael@0: 
michael@0: ER3(SEC_ERROR_JS_DEL_MOD_FAILURE, 		(SEC_ERROR_BASE + 109),
michael@0: "Unable to delete module")
michael@0: 
michael@0: ER3(SEC_ERROR_OLD_KRL,	     			(SEC_ERROR_BASE + 110),
michael@0: "New KRL is not later than the current one.")
michael@0:  
michael@0: ER3(SEC_ERROR_CKL_CONFLICT,	     		(SEC_ERROR_BASE + 111),
michael@0: "New CKL has different issuer than current CKL.  Delete current CKL.")
michael@0: 
michael@0: ER3(SEC_ERROR_CERT_NOT_IN_NAME_SPACE, 		(SEC_ERROR_BASE + 112),
michael@0: "The Certifying Authority for this certificate is not permitted to issue a \
michael@0: certificate with this name.")
michael@0: 
michael@0: ER3(SEC_ERROR_KRL_NOT_YET_VALID,		(SEC_ERROR_BASE + 113),
michael@0: "The key revocation list for this certificate is not yet valid.")
michael@0: 
michael@0: ER3(SEC_ERROR_CRL_NOT_YET_VALID,		(SEC_ERROR_BASE + 114),
michael@0: "The certificate revocation list for this certificate is not yet valid.")
michael@0: 
michael@0: ER3(SEC_ERROR_UNKNOWN_CERT,			(SEC_ERROR_BASE + 115),
michael@0: "The requested certificate could not be found.")
michael@0: 
michael@0: ER3(SEC_ERROR_UNKNOWN_SIGNER,			(SEC_ERROR_BASE + 116),
michael@0: "The signer's certificate could not be found.")
michael@0: 
michael@0: ER3(SEC_ERROR_CERT_BAD_ACCESS_LOCATION,		(SEC_ERROR_BASE + 117),
michael@0: "The location for the certificate status server has invalid format.")
michael@0: 
michael@0: ER3(SEC_ERROR_OCSP_UNKNOWN_RESPONSE_TYPE,	(SEC_ERROR_BASE + 118),
michael@0: "The OCSP response cannot be fully decoded; it is of an unknown type.")
michael@0: 
michael@0: ER3(SEC_ERROR_OCSP_BAD_HTTP_RESPONSE,		(SEC_ERROR_BASE + 119),
michael@0: "The OCSP server returned unexpected/invalid HTTP data.")
michael@0: 
michael@0: ER3(SEC_ERROR_OCSP_MALFORMED_REQUEST,		(SEC_ERROR_BASE + 120),
michael@0: "The OCSP server found the request to be corrupted or improperly formed.")
michael@0: 
michael@0: ER3(SEC_ERROR_OCSP_SERVER_ERROR,		(SEC_ERROR_BASE + 121),
michael@0: "The OCSP server experienced an internal error.")
michael@0: 
michael@0: ER3(SEC_ERROR_OCSP_TRY_SERVER_LATER,		(SEC_ERROR_BASE + 122),
michael@0: "The OCSP server suggests trying again later.")
michael@0: 
michael@0: ER3(SEC_ERROR_OCSP_REQUEST_NEEDS_SIG,		(SEC_ERROR_BASE + 123),
michael@0: "The OCSP server requires a signature on this request.")
michael@0: 
michael@0: ER3(SEC_ERROR_OCSP_UNAUTHORIZED_REQUEST,	(SEC_ERROR_BASE + 124),
michael@0: "The OCSP server has refused this request as unauthorized.")
michael@0: 
michael@0: ER3(SEC_ERROR_OCSP_UNKNOWN_RESPONSE_STATUS,	(SEC_ERROR_BASE + 125),
michael@0: "The OCSP server returned an unrecognizable status.")
michael@0: 
michael@0: ER3(SEC_ERROR_OCSP_UNKNOWN_CERT,		(SEC_ERROR_BASE + 126),
michael@0: "The OCSP server has no status for the certificate.")
michael@0: 
michael@0: ER3(SEC_ERROR_OCSP_NOT_ENABLED,			(SEC_ERROR_BASE + 127),
michael@0: "You must enable OCSP before performing this operation.")
michael@0: 
michael@0: ER3(SEC_ERROR_OCSP_NO_DEFAULT_RESPONDER,	(SEC_ERROR_BASE + 128),
michael@0: "You must set the OCSP default responder before performing this operation.")
michael@0: 
michael@0: ER3(SEC_ERROR_OCSP_MALFORMED_RESPONSE,		(SEC_ERROR_BASE + 129),
michael@0: "The response from the OCSP server was corrupted or improperly formed.")
michael@0: 
michael@0: ER3(SEC_ERROR_OCSP_UNAUTHORIZED_RESPONSE,	(SEC_ERROR_BASE + 130),
michael@0: "The signer of the OCSP response is not authorized to give status for \
michael@0: this certificate.")
michael@0: 
michael@0: ER3(SEC_ERROR_OCSP_FUTURE_RESPONSE,		(SEC_ERROR_BASE + 131),
michael@0: "The OCSP response is not yet valid (contains a date in the future).")
michael@0: 
michael@0: ER3(SEC_ERROR_OCSP_OLD_RESPONSE,		(SEC_ERROR_BASE + 132),
michael@0: "The OCSP response contains out-of-date information.")
michael@0: 
michael@0: ER3(SEC_ERROR_DIGEST_NOT_FOUND,			(SEC_ERROR_BASE + 133),
michael@0: "The CMS or PKCS #7 Digest was not found in signed message.")
michael@0: 
michael@0: ER3(SEC_ERROR_UNSUPPORTED_MESSAGE_TYPE,		(SEC_ERROR_BASE + 134),
michael@0: "The CMS or PKCS #7 Message type is unsupported.")
michael@0: 
michael@0: ER3(SEC_ERROR_MODULE_STUCK,			(SEC_ERROR_BASE + 135),
michael@0: "PKCS #11 module could not be removed because it is still in use.")
michael@0: 
michael@0: ER3(SEC_ERROR_BAD_TEMPLATE,			(SEC_ERROR_BASE + 136),
michael@0: "Could not decode ASN.1 data. Specified template was invalid.")
michael@0: 
michael@0: ER3(SEC_ERROR_CRL_NOT_FOUND,			(SEC_ERROR_BASE + 137),
michael@0: "No matching CRL was found.")
michael@0: 
michael@0: ER3(SEC_ERROR_REUSED_ISSUER_AND_SERIAL,        (SEC_ERROR_BASE + 138),
michael@0: "You are attempting to import a cert with the same issuer/serial as \
michael@0: an existing cert, but that is not the same cert.")
michael@0: 
michael@0: ER3(SEC_ERROR_BUSY,				(SEC_ERROR_BASE + 139),
michael@0: "NSS could not shutdown. Objects are still in use.")
michael@0: 
michael@0: ER3(SEC_ERROR_EXTRA_INPUT,			(SEC_ERROR_BASE + 140),
michael@0: "DER-encoded message contained extra unused data.")
michael@0: 
michael@0: ER3(SEC_ERROR_UNSUPPORTED_ELLIPTIC_CURVE,	(SEC_ERROR_BASE + 141),
michael@0: "Unsupported elliptic curve.")
michael@0: 
michael@0: ER3(SEC_ERROR_UNSUPPORTED_EC_POINT_FORM,	(SEC_ERROR_BASE + 142),
michael@0: "Unsupported elliptic curve point form.")
michael@0: 
michael@0: ER3(SEC_ERROR_UNRECOGNIZED_OID,			(SEC_ERROR_BASE + 143),
michael@0: "Unrecognized Object Identifier.")
michael@0: 
michael@0: ER3(SEC_ERROR_OCSP_INVALID_SIGNING_CERT,	(SEC_ERROR_BASE + 144),
michael@0: "Invalid OCSP signing certificate in OCSP response.")
michael@0: 
michael@0: ER3(SEC_ERROR_REVOKED_CERTIFICATE_CRL,          (SEC_ERROR_BASE + 145),
michael@0: "Certificate is revoked in issuer's certificate revocation list.")
michael@0: 
michael@0: ER3(SEC_ERROR_REVOKED_CERTIFICATE_OCSP,         (SEC_ERROR_BASE + 146),
michael@0: "Issuer's OCSP responder reports certificate is revoked.")
michael@0: 
michael@0: ER3(SEC_ERROR_CRL_INVALID_VERSION,              (SEC_ERROR_BASE + 147),
michael@0: "Issuer's Certificate Revocation List has an unknown version number.")
michael@0: 
michael@0: ER3(SEC_ERROR_CRL_V1_CRITICAL_EXTENSION,        (SEC_ERROR_BASE + 148),
michael@0: "Issuer's V1 Certificate Revocation List has a critical extension.")
michael@0: 
michael@0: ER3(SEC_ERROR_CRL_UNKNOWN_CRITICAL_EXTENSION,   (SEC_ERROR_BASE + 149),
michael@0: "Issuer's V2 Certificate Revocation List has an unknown critical extension.")
michael@0: 
michael@0: ER3(SEC_ERROR_UNKNOWN_OBJECT_TYPE,	        (SEC_ERROR_BASE + 150),
michael@0: "Unknown object type specified.")
michael@0: 
michael@0: ER3(SEC_ERROR_INCOMPATIBLE_PKCS11,	        (SEC_ERROR_BASE + 151),
michael@0: "PKCS #11 driver violates the spec in an incompatible way.")
michael@0: 
michael@0: ER3(SEC_ERROR_NO_EVENT,	        		(SEC_ERROR_BASE + 152),
michael@0: "No new slot event is available at this time.")
michael@0: 
michael@0: ER3(SEC_ERROR_CRL_ALREADY_EXISTS,      		(SEC_ERROR_BASE + 153),
michael@0: "CRL already exists.")
michael@0: 
michael@0: ER3(SEC_ERROR_NOT_INITIALIZED,      		(SEC_ERROR_BASE + 154),
michael@0: "NSS is not initialized.")
michael@0: 
michael@0: ER3(SEC_ERROR_TOKEN_NOT_LOGGED_IN,  		(SEC_ERROR_BASE + 155),
michael@0: "The operation failed because the PKCS#11 token is not logged in.")
michael@0: 
michael@0: ER3(SEC_ERROR_OCSP_RESPONDER_CERT_INVALID,  	(SEC_ERROR_BASE + 156),
michael@0: "Configured OCSP responder's certificate is invalid.")
michael@0: 
michael@0: ER3(SEC_ERROR_OCSP_BAD_SIGNATURE,      		(SEC_ERROR_BASE + 157),
michael@0: "OCSP response has an invalid signature.")
michael@0: 
michael@0: ER3(SEC_ERROR_OUT_OF_SEARCH_LIMITS,      		(SEC_ERROR_BASE + 158),
michael@0: "Cert validation search is out of search limits")
michael@0: 
michael@0: ER3(SEC_ERROR_INVALID_POLICY_MAPPING,      		(SEC_ERROR_BASE + 159),
michael@0: "Policy mapping contains anypolicy")
michael@0: 
michael@0: ER3(SEC_ERROR_POLICY_VALIDATION_FAILED,    		(SEC_ERROR_BASE + 160),
michael@0: "Cert chain fails policy validation")
michael@0: 
michael@0: ER3(SEC_ERROR_UNKNOWN_AIA_LOCATION_TYPE,    		(SEC_ERROR_BASE + 161),
michael@0: "Unknown location type in cert AIA extension")
michael@0: 
michael@0: ER3(SEC_ERROR_BAD_HTTP_RESPONSE,    		(SEC_ERROR_BASE + 162),
michael@0: "Server returned bad HTTP response")
michael@0: 
michael@0: ER3(SEC_ERROR_BAD_LDAP_RESPONSE,    		(SEC_ERROR_BASE + 163),
michael@0: "Server returned bad LDAP response")
michael@0: 
michael@0: ER3(SEC_ERROR_FAILED_TO_ENCODE_DATA,    		(SEC_ERROR_BASE + 164),
michael@0: "Failed to encode data with ASN1 encoder")
michael@0: 
michael@0: ER3(SEC_ERROR_BAD_INFO_ACCESS_LOCATION,    		(SEC_ERROR_BASE + 165),
michael@0: "Bad information access location in cert extension")
michael@0: 
michael@0: ER3(SEC_ERROR_LIBPKIX_INTERNAL,      		(SEC_ERROR_BASE + 166),
michael@0: "Libpkix internal error occurred during cert validation.")
michael@0: 
michael@0: ER3(SEC_ERROR_PKCS11_GENERAL_ERROR,      		(SEC_ERROR_BASE + 167),
michael@0: "A PKCS #11 module returned CKR_GENERAL_ERROR, indicating that an unrecoverable error has occurred.")
michael@0: 
michael@0: ER3(SEC_ERROR_PKCS11_FUNCTION_FAILED,      		(SEC_ERROR_BASE + 168),
michael@0: "A PKCS #11 module returned CKR_FUNCTION_FAILED, indicating that the requested function could not be performed.  Trying the same operation again might succeed.")
michael@0: 
michael@0: ER3(SEC_ERROR_PKCS11_DEVICE_ERROR,      		(SEC_ERROR_BASE + 169),
michael@0: "A PKCS #11 module returned CKR_DEVICE_ERROR, indicating that a problem has occurred with the token or slot.")
michael@0: 
michael@0: ER3(SEC_ERROR_BAD_INFO_ACCESS_METHOD,      		(SEC_ERROR_BASE + 170),
michael@0: "Unknown information access method in certificate extension.")
michael@0: 
michael@0: ER3(SEC_ERROR_CRL_IMPORT_FAILED,        		(SEC_ERROR_BASE + 171),
michael@0: "Error attempting to import a CRL.")
michael@0: 
michael@0: ER3(SEC_ERROR_EXPIRED_PASSWORD,        		(SEC_ERROR_BASE + 172),
michael@0: "The password expired.")
michael@0: 
michael@0: ER3(SEC_ERROR_LOCKED_PASSWORD,        		(SEC_ERROR_BASE + 173),
michael@0: "The password is locked.")
michael@0: 
michael@0: ER3(SEC_ERROR_UNKNOWN_PKCS11_ERROR,        		(SEC_ERROR_BASE + 174),
michael@0: "Unknown PKCS #11 error.")
michael@0: 
michael@0: ER3(SEC_ERROR_BAD_CRL_DP_URL,			(SEC_ERROR_BASE + 175),
michael@0: "Invalid or unsupported URL in CRL distribution point name.")
michael@0: 
michael@0: ER3(SEC_ERROR_CERT_SIGNATURE_ALGORITHM_DISABLED,	(SEC_ERROR_BASE + 176),
michael@0: "The certificate was signed using a signature algorithm that is disabled because it is not secure.")
michael@0: 
michael@0: ER3(SEC_ERROR_LEGACY_DATABASE,			(SEC_ERROR_BASE + 177),
michael@0: "The certificate/key database is in an old, unsupported format.")
michael@0: 
michael@0: ER3(SEC_ERROR_APPLICATION_CALLBACK_ERROR,        (SEC_ERROR_BASE + 178),
michael@0: "The certificate was rejected by extra checks in the application.")
michael@0: