SSL Error Codes

Table 8.1 Error codes defined in sslerr.h

Constant	Description
SSL_ERROR_EXPORT_ONLY_SERVER	"Unable to communicate securely. Peer does not support high-grade encryption." The local system was configured to support the cipher suites permitted for domestic use. The remote system was configured to support only the cipher suites permitted for export use.
SSL_ERROR_US_ONLY_SERVER	"Unable to communicate securely. Peer requires high-grade encryption which is not supported." The remote system was configured to support the cipher suites permitted for domestic use. The local system was configured to support only the cipher suites permitted for export use.
SSL_ERROR_NO_CYPHER_OVERLAP	"Cannot communicate securely with peer: no common encryption algorithm(s)." The local and remote systems share no cipher suites in common. This can be due to a misconfiguration at either end. It can be due to a server being misconfigured to use a non-RSA certificate with the RSA key exchange algorithm.
SSL_ERROR_NO_CERTIFICATE	"Unable to find the certificate or key necessary for authentication." This error has many potential causes; for example:  Certificate or key not found in database.  Certificate not marked trusted in database and Certificate's issuer not marked trusted in database.  Wrong password for key database.  Missing database.
SSL_ERROR_BAD_CERTIFICATE	"Unable to communicate securely with peer: peers's certificate was rejected." A certificate was received from the remote system and was passed to the certificate authentication callback function provided by the local application. That callback function returned SECFailure, and the bad certificate callback function either was not configured or did not choose to override the error code returned by the certificate authentication callback function.
SSL_ERROR_BAD_CLIENT	"The server has encountered bad data from the client." This error code should occur only on sockets that are acting as servers. It is a generic error, used when none of the other more specific error codes defined in this file applies.
SSL_ERROR_BAD_SERVER	"The client has encountered bad data from the server." This error code should occur only on sockets that are acting as clients. It is a generic error, used when none of the other more specific error codes defined in this file applies.
SSL_ERROR_UNSUPPORTED_CERTIFICATE_TYPE	"Unsupported certificate type." The operation encountered a certificate that was not one of the well known certificate types handled by the certificate library.
SSL_ERROR_UNSUPPORTED_VERSION	"Peer using unsupported version of security protocol." On a client socket, this means the remote server has attempted to negotiate the use of a version of SSL that is not supported by the NSS library, probably an invalid version number. On a server socket, this means the remote client has requested the use of a version of SSL older than version 2.
SSL_ERROR_BAD_CERT_DOMAIN	"Unable to communicate securely with peer: requested domain name does not match the server's certificate." This error code should be returned by the certificate authentication callback function when it detects that the Common Name in the remote server's certificate does not match the hostname sought by the local client, according to the matching rules specified for CERT_VerifyCertName.
SSL_ERROR_SSL2_DISABLED	"Peer only supports SSL version 2, which is locally disabled." The remote server has asked to use SSL version 2, and SSL version 2 is disabled in the local client's configuration.
SSL_ERROR_BAD_MAC_READ	"SSL received a record with an incorrect Message Authentication Code." This usually indicates that the client and server have failed to come to agreement on the set of keys used to encrypt the application data and to check message integrity. If this occurs frequently on a server, an active attack (such as the "million question" attack) may be underway against the server.
SSL_ERROR_BAD_MAC_ALERT	"SSL peer reports incorrect Message Authentication Code." The remote system has reported that it received a message with a bad Message Authentication Code from the local system. This may indicate that an attack on that server is underway.
SSL_ERROR_BAD_CERT_ALERT	"SSL peer cannot verify your certificate." The remote system has received a certificate from the local system, and has rejected it for some reason.
SSL_ERROR_REVOKED_CERT_ALERT	"SSL peer rejected your certificate as revoked." The remote system has received a certificate from the local system, and has determined that the certificate has been revoked.
SSL_ERROR_EXPIRED_CERT_ALERT	"SSL peer rejected your certificate as expired." The remote system has received a certificate from the local system, and has determined that the certificate has expired.
SSL_ERROR_SSL_DISABLED	"Cannot connect: SSL is disabled." The local socket is configured in such a way that it cannot use any of the SSL cipher suites. Possible causes include: (a) both SSL2 and SSL3 are disabled, (b) All the individual SSL cipher suites are disabled, or (c) the socket is configured to handshake as a server, but the certificate associated with that socket is inappropriate for the Key Exchange Algorithm selected.
SSL_ERROR_FORTEZZA_PQG	"Cannot connect: SSL peer is in another FORTEZZA domain." The local system and the remote system are in different FORTEZZA domains. They must be in the same domain to communicate.
SSL_ERROR_UNKNOWN_CIPHER_SUITE	"An unknown SSL cipher suite has been requested." The application has attempted to configure SSL to use an unknown cipher suite.
SSL_ERROR_NO_CIPHERS_SUPPORTED	"No cipher suites are present and enabled in this program." Possible causes: (a) all cipher suites have been configured to be disabled, (b) the only cipher suites that are configured to be enabled are those that are disallowed by cipher export policy, (c) the socket is configured to handshake as a server, but the certificate associated with that socket is inappropriate for the Key Exchange Algorithm selected.
SSL_ERROR_BAD_BLOCK_PADDING	"SSL received a record with bad block padding." SSL was using a Block cipher, and the last block in an SSL record had incorrect padding information in it. This usually indicates that the client and server have failed to come to agreement on the set of keys used to encrypt the application data and to check message integrity. If this occurs frequently on a server, an active attack (such as the "million question" attack) may be underway against the server.
SSL_ERROR_RX_RECORD_TOO_LONG	"SSL received a record that exceeded the maximum permissible length." This generally indicates that the remote peer system has a flawed implementation of SSL, and is violating the SSL specification.
SSL_ERROR_TX_RECORD_TOO_LONG	"SSL attempted to send a record that exceeded the maximum permissible length." This error should never occur. If it does, it indicates a flaw in the NSS SSL library.
SSL_ERROR_CLOSE_NOTIFY_ALERT	"SSL peer has closed this connection." The local socket received an SSL3 alert record from the remote peer, reporting that the remote peer has chosen to end the connection. The receipt of this alert is an error only if it occurs while a handshake is in progress.
SSL_ERROR_PUB_KEY_SIZE_LIMIT_EXCEEDED	"SSL Server attempted to use domestic-grade public key with export cipher suite." On a client socket, this error reports that the remote server has failed to perform an "SSL Step down" for an export cipher. It has sent a certificate bearing a domestic-grade public key, but has not sent a ServerKeyExchange message containing an export-grade public key for the key exchange algorithm. Such a connection cannot be permitted without violating U.S. export policies. On a server socket, this indicates a failure of the local library.
SSL_ERROR_NO_SERVER_KEY_FOR_ALG	"Server has no key for the attempted key exchange algorithm." An SSL client has requested an SSL cipher suite that uses a Key Exchange Algorithm for which the local server has no appropriate public key. This indicates a configuration error on the local server.
SSL_ERROR_TOKEN_INSERTION_REMOVAL	"PKCS #11 token was inserted or removed while operation was in progress." A cryptographic operation required to complete the handshake failed because the token that was performing it was removed while the handshake was underway. Another token may also have been inserted into the same slot.
SSL_ERROR_TOKEN_SLOT_NOT_FOUND	"No PKCS#11 token could be found to do a required operation." A cryptographic operation required a PKCS#11 token with specific abilities, and no token could be found in any slot, including the "soft token" in the internal virtual slot, that could do the job. May indicate a server configuration error, such as having a certificate that is inappropriate for the Key Exchange Algorithm selected.
Received a malformed (too long or short or invalid content) SSL handshake: All the error codes in the following block indicate that the local socket received an improperly formatted SSL3 handshake message from the remote peer. This probably indicates a flaw in the remote peer's implementation.
SSL_ERROR_RX_MALFORMED_HELLO_REQUEST	"SSL received a malformed Hello Request handshake message."
SSL_ERROR_RX_MALFORMED_CLIENT_HELLO	"SSL received a malformed Client Hello handshake message."
SSL_ERROR_RX_MALFORMED_SERVER_HELLO	"SSL received a malformed Server Hello handshake message."
SSL_ERROR_RX_MALFORMED_CERTIFICATE	"SSL received a malformed Certificate handshake message."
SSL_ERROR_RX_MALFORMED_SERVER_KEY_EXCH	"SSL received a malformed Server Key Exchange handshake message."
SSL_ERROR_RX_MALFORMED_CERT_REQUEST	"SSL received a malformed Certificate Request handshake message."
SSL_ERROR_RX_MALFORMED_HELLO_DONE	"SSL received a malformed Server Hello Done handshake message."
SSL_ERROR_RX_MALFORMED_CERT_VERIFY	"SSL received a malformed Certificate Verify handshake message."
SSL_ERROR_RX_MALFORMED_CLIENT_KEY_EXCH	"SSL received a malformed Client Key Exchange handshake message."
SSL_ERROR_RX_MALFORMED_FINISHED	"SSL received a malformed Finished handshake message."
Received a malformed (too long or short) SSL record: All the error codes in the following block indicate that the local socket received an improperly formatted SSL3 record from the remote peer. This probably indicates a flaw in the remote peer's implementation.
SSL_ERROR_RX_MALFORMED_CHANGE_CIPHER	"SSL received a malformed Change Cipher Spec record."
SSL_ERROR_RX_MALFORMED_ALERT	"SSL received a malformed Alert record."
SSL_ERROR_RX_MALFORMED_HANDSHAKE	"SSL received a malformed Handshake record."
SSL_ERROR_RX_MALFORMED_APPLICATION_DATA	"SSL received a malformed Application Data record."
Received an SSL handshake that was inappropriate for the current state: All the error codes in the following block indicate that the local socket received an SSL3 handshake message from the remote peer at a time when it was inappropriate for the peer to have sent this message. For example, a server received a message from another server. This probably indicates a flaw in the remote peer's implementation.
SSL_ERROR_RX_UNEXPECTED_HELLO_REQUEST	"SSL received an unexpected Hello Request handshake message."
SSL_ERROR_RX_UNEXPECTED_CLIENT_HELLO	"SSL received an unexpected Client Hello handshake message."
SSL_ERROR_RX_UNEXPECTED_SERVER_HELLO	"SSL received an unexpected Server Hello handshake message."
SSL_ERROR_RX_UNEXPECTED_CERTIFICATE	"SSL received an unexpected Certificate handshake message."
SSL_ERROR_RX_UNEXPECTED_SERVER_KEY_EXCH	"SSL received an unexpected Server Key Exchange handshake message."
SSL_ERROR_RX_UNEXPECTED_CERT_REQUEST	"SSL received an unexpected Certificate Request handshake message."
SSL_ERROR_RX_UNEXPECTED_HELLO_DONE	"SSL received an unexpected Server Hello Done handshake message."
SSL_ERROR_RX_UNEXPECTED_CERT_VERIFY	"SSL received an unexpected Certificate Verify handshake message."
SSL_ERROR_RX_UNEXPECTED_CLIENT_KEY_EXCH	"SSL received an unexpected Client Key Exchange handshake message."
SSL_ERROR_RX_UNEXPECTED_FINISHED	"SSL received an unexpected Finished handshake message."
Received an SSL record that was inappropriate for the current state: All the error codes in the following block indicate that the local socket received an SSL3 record from the remote peer at a time when it was inappropriate for the peer to have sent this message. This probably indicates a flaw in the remote peer's implementation.
SSL_ERROR_RX_UNEXPECTED_CHANGE_CIPHER	"SSL received an unexpected Change Cipher Spec record."
SSL_ERROR_RX_UNEXPECTED_ALERT	"SSL received an unexpected Alert record."
SSL_ERROR_RX_UNEXPECTED_HANDSHAKE	"SSL received an unexpected Handshake record."
SSL_ERROR_RX_UNEXPECTED_APPLICATION_DATA	"SSL received an unexpected Application Data record."
Received record/message with unknown discriminant: All the error codes in the following block indicate that the local socket received an SSL3 record or handshake message from the remote peer that it was unable to interpret because the byte that identifies the type of record or message contained an unrecognized value. This probably indicates a flaw in the remote peer's implementation.
SSL_ERROR_RX_UNKNOWN_RECORD_TYPE	"SSL received a record with an unknown content type."
SSL_ERROR_RX_UNKNOWN_HANDSHAKE	"SSL received a handshake message with an unknown message type."
SSL_ERROR_RX_UNKNOWN_ALERT	"SSL received an alert record with an unknown alert description."
Received an alert report: All the error codes in the following block indicate that the local socket received an SSL3 alert record from the remote peer, reporting some issue that it had with an SSL record or handshake message it received. (Some _Alert codes are listed in other blocks.)
SSL_ERROR_HANDSHAKE_UNEXPECTED_ALERT	"SSL peer was not expecting a handshake message it received."
SSL_ERROR_DECOMPRESSION_FAILURE_ALERT	"SSL peer was unable to successfully decompress an SSL record it received."
SSL_ERROR_HANDSHAKE_FAILURE_ALERT	"SSL peer was unable to negotiate an acceptable set of security parameters."
SSL_ERROR_ILLEGAL_PARAMETER_ALERT	"SSL peer rejected a handshake message for unacceptable content."
SSL_ERROR_UNSUPPORTED_CERT_ALERT	"SSL peer does not support certificates of the type it received."
SSL_ERROR_CERTIFICATE_UNKNOWN_ALERT	"SSL peer had some unspecified issue with the certificate it received."
Unspecified errors that occurred while attempting some operation: All the error codes in the following block describe the operation that was being attempted at the time of the unspecified failure. These failures may be caused by the system running out of memory, or errors returned by PKCS#11 routines that did not provide meaningful error codes of their own. These should rarely be seen. (Certain of these error codes have more specific meanings, as described.)
SSL_ERROR_GENERATE_RANDOM_FAILURE	"SSL experienced a failure of its random number generator."
SSL_ERROR_SIGN_HASHES_FAILURE	"Unable to digitally sign data required to verify your certificate."
SSL_ERROR_EXTRACT_PUBLIC_KEY_FAILURE	"SSL was unable to extract the public key from the peer's certificate."
SSL_ERROR_SERVER_KEY_EXCHANGE_FAILURE	"Unspecified failure while processing SSL Server Key Exchange handshake."
SSL_ERROR_CLIENT_KEY_EXCHANGE_FAILURE	"Unspecified failure while processing SSL Client Key Exchange handshake."
SSL_ERROR_ENCRYPTION_FAILURE	"Bulk data encryption algorithm failed in selected cipher suite."
SSL_ERROR_DECRYPTION_FAILURE	"Bulk data decryption algorithm failed in selected cipher suite."
SSL_ERROR_MD5_DIGEST_FAILURE	"MD5 digest function failed."
SSL_ERROR_SHA_DIGEST_FAILURE	"SHA-1 digest function failed."
SSL_ERROR_MAC_COMPUTATION_FAILURE	"Message Authentication Code computation failed."
SSL_ERROR_SYM_KEY_CONTEXT_FAILURE	"Failure to create Symmetric Key context."
SSL_ERROR_SYM_KEY_UNWRAP_FAILURE	"Failure to unwrap the Symmetric key in Client Key Exchange message."
SSL_ERROR_IV_PARAM_FAILURE	"PKCS11 code failed to translate an IV into a param."
SSL_ERROR_INIT_CIPHER_SUITE_FAILURE	"Failed to initialize the selected cipher suite."
SSL_ERROR_SOCKET_WRITE_FAILURE	"Attempt to write encrypted data to underlying socket failed." After the data to be sent was encrypted, the attempt to send it out the socket failed. Likely causes include that the peer has closed the connection.
SSL_ERROR_SESSION_KEY_GEN_FAILURE	"Failed to generate session keys for SSL session." On a client socket, indicates a failure of the PKCS11 key generation function. On a server socket, indicates a failure of one of the following: (a) to unwrap the pre-master secret from the ClientKeyExchange message, (b) to derive the master secret from the premaster secret, (c) to derive the MAC secrets, cryptographic keys, and initialization vectors from the master secret. If encountered repeatedly on a server socket, this can indicate that the server is actively under a "million question" attack.

 

SEC Error Codes

Table 8.2 Security error codes defined in secerr.h

Constant	Description
SEC_ERROR_IO	An I/O error occurred during authentication.
SEC_ERROR_LIBRARY_FAILURE	Security library failure.
SEC_ERROR_BAD_DATA	Security library: received bad data.
SEC_ERROR_OUTPUT_LEN	Security library: output length error.
SEC_ERROR_INPUT_LEN	Security library: input length error.
SEC_ERROR_INVALID_ARGS	Security library: invalid arguments.
SEC_ERROR_INVALID_ALGORITHM	Security library: invalid algorithm.
SEC_ERROR_INVALID_AVA	Security library: invalid AVA.
SEC_ERROR_INVALID_TIME	Security library: invalid time.
SEC_ERROR_BAD_DER	Security library: improperly formatted DER-encoded message.
SEC_ERROR_BAD_SIGNATURE	Peer's certificate has an invalid signature.
SEC_ERROR_EXPIRED_CERTIFICATE	Peer's certificate has expired.
SEC_ERROR_REVOKED_CERTIFICATE	Peer's certificate has been revoked.
SEC_ERROR_UNKNOWN_ISSUER	Peer's certificate issuer is not recognized.
SEC_ERROR_BAD_KEY	Peer's public key is invalid
SEC_ERROR_BAD_PASSWORD	The password entered is incorrect.
SEC_ERROR_RETRY_PASSWORD	New password entered incorrectly.
SEC_ERROR_NO_NODELOCK	Security library: no nodelock.
SEC_ERROR_BAD_DATABASE	Security library: bad database.
SEC_ERROR_NO_MEMORY	Security library: memory allocation failure.
SEC_ERROR_UNTRUSTED_ISSUER	Peer's certificate issuer has been marked as not trusted by the user.
SEC_ERROR_UNTRUSTED_CERT	Peer's certificate has been marked as not trusted by the user.
SEC_ERROR_DUPLICATE_CERT	Certificate already exists in your database.
SEC_ERROR_DUPLICATE_CERT_NAME	Downloaded certificate's name duplicates one already in your database.
SEC_ERROR_ADDING_CERT	Error adding certificate to database.
SEC_ERROR_FILING_KEY	Error refiling the key for this certificate.
SEC_ERROR_NO_KEY	The private key for this certificate cannot be found in key database.
SEC_ERROR_CERT_VALID	This certificate is valid.
SEC_ERROR_CERT_NOT_VALID	This certificate is not valid.
SEC_ERROR_CERT_NO_RESPONSE	Certificate library: no response.
SEC_ERROR_EXPIRED_ISSUER_CERTIFICATE	The certificate issuer's certificate has expired.
SEC_ERROR_CRL_EXPIRED	The CRL for the certificate's issuer has expired.
SEC_ERROR_CRL_BAD_SIGNATURE	The CRL for the certificate's issuer has an invalid signature.
SEC_ERROR_CRL_INVALID	New CRL has an invalid format.
SEC_ERROR_EXTENSION_VALUE_INVALID	Certificate extension value is invalid.
SEC_ERROR_EXTENSION_NOT_FOUND	Certificate extension not found.
SEC_ERROR_CA_CERT_INVALID	Issuer certificate is invalid.
SEC_ERROR_PATH_LEN_CONSTRAINT_INVALID	Certificate path length constraint is invalid.
SEC_ERROR_CERT_USAGES_INVALID	Certificate usages field is invalid.
SEC_INTERNAL_ONLY	Internal-only module.
SEC_ERROR_INVALID_KEY	The key does not support the requested operation.
SEC_ERROR_UNKNOWN_CRITICAL_EXTENSION	Certificate contains unknown critical extension.
SEC_ERROR_OLD_CRL	New CRL is not later than the current one.
SEC_ERROR_NO_EMAIL_CERT	Not encrypted or signed: you do not yet have an email certificate.
SEC_ERROR_NO_RECIPIENT_CERTS_QUERY	Not encrypted: you do not have certificates for each of the recipients.
SEC_ERROR_NOT_A_RECIPIENT	Cannot decrypt: you are not a recipient, or matching certificate and private key not found.
SEC_ERROR_PKCS7_KEYALG_MISMATCH	Cannot decrypt: key encryption algorithm does not match your certificate.
SEC_ERROR_PKCS7_BAD_SIGNATURE	Signature verification failed: no signer found, too many signers found, \ or improper or corrupted data.
SEC_ERROR_UNSUPPORTED_KEYALG	Unsupported or unknown key algorithm.
SEC_ERROR_DECRYPTION_DISALLOWED	Cannot decrypt: encrypted using a disallowed algorithm or key size.
XP_SEC_FORTEZZA_BAD_CARD	FORTEZZA card has not been properly initialized.
XP_SEC_FORTEZZA_NO_CARD	No FORTEZZA cards found.
XP_SEC_FORTEZZA_NONE_SELECTED	No FORTEZZA card selected.
XP_SEC_FORTEZZA_MORE_INFO	Please select a personality to get more info on.
XP_SEC_FORTEZZA_PERSON_NOT_FOUND	Personality not found
XP_SEC_FORTEZZA_NO_MORE_INFO	No more information on that personality.
XP_SEC_FORTEZZA_BAD_PIN	Invalid PIN.
XP_SEC_FORTEZZA_PERSON_ERROR	Couldn't initialize FORTEZZA personalities.
SEC_ERROR_NO_KRL	No KRL for this site's certificate has been found.
SEC_ERROR_KRL_EXPIRED	The KRL for this site's certificate has expired.
SEC_ERROR_KRL_BAD_SIGNATURE	The KRL for this site's certificate has an invalid signature.
SEC_ERROR_REVOKED_KEY	The key for this site's certificate has been revoked.
SEC_ERROR_KRL_INVALID	New KRL has an invalid format.
SEC_ERROR_NEED_RANDOM	Security library: need random data.
SEC_ERROR_NO_MODULE	Security library: no security module can perform the requested operation.
SEC_ERROR_NO_TOKEN	The security card or token does not exist, needs to be initialized, or has been removed.
SEC_ERROR_READ_ONLY	Security library: read-only database.
SEC_ERROR_NO_SLOT_SELECTED	No slot or token was selected.
SEC_ERROR_CERT_NICKNAME_COLLISION	A certificate with the same nickname already exists.
SEC_ERROR_KEY_NICKNAME_COLLISION	A key with the same nickname already exists.
SEC_ERROR_SAFE_NOT_CREATED	Error while creating safe object.
SEC_ERROR_BAGGAGE_NOT_CREATED	Error while creating baggage object.
XP_JAVA_REMOVE_PRINCIPAL_ERROR	Couldn't remove the principal.
XP_JAVA_DELETE_PRIVILEGE_ERROR	Couldn't delete the privilege
XP_JAVA_CERT_NOT_EXISTS_ERROR	This principal doesn't have a certificate.
SEC_ERROR_BAD_EXPORT_ALGORITHM	Required algorithm is not allowed.
SEC_ERROR_EXPORTING_CERTIFICATES	Error attempting to export certificates.
SEC_ERROR_IMPORTING_CERTIFICATES	Error attempting to import certificates.
SEC_ERROR_PKCS12_DECODING_PFX	Unable to import. Decoding error. File not valid.
SEC_ERROR_PKCS12_INVALID_MAC	Unable to import. Invalid MAC. Incorrect password or corrupt file.
SEC_ERROR_PKCS12_UNSUPPORTED_MAC_ALGORITHM	Unable to import. MAC algorithm not supported.
SEC_ERROR_PKCS12_UNSUPPORTED_TRANSPORT_MODE	Unable to import. Only password integrity and privacy modes supported.
SEC_ERROR_PKCS12_CORRUPT_PFX_STRUCTURE	Unable to import. File structure is corrupt.
SEC_ERROR_PKCS12_UNSUPPORTED_PBE_ALGORITHM	Unable to import. Encryption algorithm not supported.
SEC_ERROR_PKCS12_UNSUPPORTED_VERSION	Unable to import. File version not supported.
SEC_ERROR_PKCS12_PRIVACY_PASSWORD_INCORRECT	Unable to import. Incorrect privacy password.
SEC_ERROR_PKCS12_CERT_COLLISION	Unable to import. Same nickname already exists in database.
SEC_ERROR_USER_CANCELLED	The user clicked cancel.
SEC_ERROR_PKCS12_DUPLICATE_DATA	Not imported, already in database.
SEC_ERROR_MESSAGE_SEND_ABORTED	Message not sent.
SEC_ERROR_INADEQUATE_KEY_USAGE	Certificate key usage inadequate for attempted operation.
SEC_ERROR_INADEQUATE_CERT_TYPE	Certificate type not approved for application.
SEC_ERROR_CERT_ADDR_MISMATCH	Address in signing certificate does not match address in message headers.
SEC_ERROR_PKCS12_UNABLE_TO_IMPORT_KEY	Unable to import. Error attempting to import private key.
SEC_ERROR_PKCS12_IMPORTING_CERT_CHAIN	Unable to import. Error attempting to import certificate chain.
SEC_ERROR_PKCS12_UNABLE_TO_LOCATE_OBJECT_BY_NAME	Unable to export. Unable to locate certificate or key by nickname.
SEC_ERROR_PKCS12_UNABLE_TO_EXPORT_KEY	Unable to export. Private key could not be located and exported.
SEC_ERROR_PKCS12_UNABLE_TO_WRITE	Unable to export. Unable to write the export file.
SEC_ERROR_PKCS12_UNABLE_TO_READ	Unable to import. Unable to read the import file.
SEC_ERROR_PKCS12_KEY_DATABASE_NOT_INITIALIZED	Unable to export. Key database corrupt or deleted.
SEC_ERROR_KEYGEN_FAIL	Unable to generate public-private key pair.
SEC_ERROR_INVALID_PASSWORD	Password entered is invalid.
SEC_ERROR_RETRY_OLD_PASSWORD	Old password entered incorrectly.
SEC_ERROR_BAD_NICKNAME	Certificate nickname already in use.
SEC_ERROR_NOT_FORTEZZA_ISSUER	Peer FORTEZZA chain has a non-FORTEZZA Certificate.
SEC_ERROR_JS_INVALID_MODULE_NAME	Invalid module name.
SEC_ERROR_JS_INVALID_DLL	Invalid module path/filename.
SEC_ERROR_JS_ADD_MOD_FAILURE	Unable to add module.
SEC_ERROR_JS_DEL_MOD_FAILURE	Unable to delete module.
SEC_ERROR_OLD_KRL	New KRL is not later than the current one.
SEC_ERROR_CKL_CONFLICT	New CKL has different issuer than current CKL.
SEC_ERROR_CERT_NOT_IN_NAME_SPACE	Certificate issuer is not permitted to issue a certificate with this name.

Last Updated: 01/17/00 16:36:49