tor-browser

The Tor Browser
git clone https://git.dasho.dev/tor-browser.git
Log | Files | Refs | README | LICENSE

SECerrs.h (22018B)


      1 /* This Source Code Form is subject to the terms of the Mozilla Public
      2 * License, v. 2.0. If a copy of the MPL was not distributed with this
      3 * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
      4 
      5 /* General security error codes */
      6 /* Caller must #include "secerr.h" */
      7 
      8 ER3(SEC_ERROR_IO, SEC_ERROR_BASE + 0,
      9    "An I/O error occurred during security authorization.")
     10 
     11 ER3(SEC_ERROR_LIBRARY_FAILURE, SEC_ERROR_BASE + 1,
     12    "security library failure.")
     13 
     14 ER3(SEC_ERROR_BAD_DATA, SEC_ERROR_BASE + 2,
     15    "security library: received bad data.")
     16 
     17 ER3(SEC_ERROR_OUTPUT_LEN, SEC_ERROR_BASE + 3,
     18    "security library: output length error.")
     19 
     20 ER3(SEC_ERROR_INPUT_LEN, SEC_ERROR_BASE + 4,
     21    "security library has experienced an input length error.")
     22 
     23 ER3(SEC_ERROR_INVALID_ARGS, SEC_ERROR_BASE + 5,
     24    "security library: invalid arguments.")
     25 
     26 ER3(SEC_ERROR_INVALID_ALGORITHM, SEC_ERROR_BASE + 6,
     27    "security library: invalid algorithm.")
     28 
     29 ER3(SEC_ERROR_INVALID_AVA, SEC_ERROR_BASE + 7,
     30    "security library: invalid AVA.")
     31 
     32 ER3(SEC_ERROR_INVALID_TIME, SEC_ERROR_BASE + 8,
     33    "Improperly formatted time string.")
     34 
     35 ER3(SEC_ERROR_BAD_DER, SEC_ERROR_BASE + 9,
     36    "security library: improperly formatted DER-encoded message.")
     37 
     38 ER3(SEC_ERROR_BAD_SIGNATURE, SEC_ERROR_BASE + 10,
     39    "Peer's certificate has an invalid signature.")
     40 
     41 ER3(SEC_ERROR_EXPIRED_CERTIFICATE, SEC_ERROR_BASE + 11,
     42    "Peer's Certificate has expired.")
     43 
     44 ER3(SEC_ERROR_REVOKED_CERTIFICATE, SEC_ERROR_BASE + 12,
     45    "Peer's Certificate has been revoked.")
     46 
     47 ER3(SEC_ERROR_UNKNOWN_ISSUER, SEC_ERROR_BASE + 13,
     48    "Peer's Certificate issuer is not recognized.")
     49 
     50 ER3(SEC_ERROR_BAD_KEY, SEC_ERROR_BASE + 14,
     51    "Peer's public key is invalid.")
     52 
     53 ER3(SEC_ERROR_BAD_PASSWORD, SEC_ERROR_BASE + 15,
     54    "The security password entered is incorrect.")
     55 
     56 ER3(SEC_ERROR_RETRY_PASSWORD, SEC_ERROR_BASE + 16,
     57    "New password entered incorrectly. Please try again.")
     58 
     59 ER3(SEC_ERROR_NO_NODELOCK, SEC_ERROR_BASE + 17,
     60    "security library: no nodelock.")
     61 
     62 ER3(SEC_ERROR_BAD_DATABASE, SEC_ERROR_BASE + 18,
     63    "security library: bad database.")
     64 
     65 ER3(SEC_ERROR_NO_MEMORY, SEC_ERROR_BASE + 19,
     66    "security library: memory allocation failure.")
     67 
     68 ER3(SEC_ERROR_UNTRUSTED_ISSUER, SEC_ERROR_BASE + 20,
     69    "Peer's certificate issuer has been marked as not trusted by the user.")
     70 
     71 ER3(SEC_ERROR_UNTRUSTED_CERT, SEC_ERROR_BASE + 21,
     72    "Peer's certificate has been marked as not trusted by the user.")
     73 
     74 ER3(SEC_ERROR_DUPLICATE_CERT, (SEC_ERROR_BASE + 22),
     75    "Certificate already exists in your database.")
     76 
     77 ER3(SEC_ERROR_DUPLICATE_CERT_NAME, (SEC_ERROR_BASE + 23),
     78    "Downloaded certificate's name duplicates one already in your database.")
     79 
     80 ER3(SEC_ERROR_ADDING_CERT, (SEC_ERROR_BASE + 24),
     81    "Error adding certificate to database.")
     82 
     83 ER3(SEC_ERROR_FILING_KEY, (SEC_ERROR_BASE + 25),
     84    "Error refiling the key for this certificate.")
     85 
     86 ER3(SEC_ERROR_NO_KEY, (SEC_ERROR_BASE + 26),
     87    "The private key for this certificate cannot be found in key database")
     88 
     89 ER3(SEC_ERROR_CERT_VALID, (SEC_ERROR_BASE + 27),
     90    "This certificate is valid.")
     91 
     92 ER3(SEC_ERROR_CERT_NOT_VALID, (SEC_ERROR_BASE + 28),
     93    "This certificate is not valid.")
     94 
     95 ER3(SEC_ERROR_CERT_NO_RESPONSE, (SEC_ERROR_BASE + 29),
     96    "Cert Library: No Response")
     97 
     98 ER3(SEC_ERROR_EXPIRED_ISSUER_CERTIFICATE, (SEC_ERROR_BASE + 30),
     99    "The certificate issuer's certificate has expired. Check your system date and time.")
    100 
    101 ER3(SEC_ERROR_CRL_EXPIRED, (SEC_ERROR_BASE + 31),
    102    "The CRL for the certificate's issuer has expired. Update it or check your system date and time.")
    103 
    104 ER3(SEC_ERROR_CRL_BAD_SIGNATURE, (SEC_ERROR_BASE + 32),
    105    "The CRL for the certificate's issuer has an invalid signature.")
    106 
    107 ER3(SEC_ERROR_CRL_INVALID, (SEC_ERROR_BASE + 33),
    108    "New CRL has an invalid format.")
    109 
    110 ER3(SEC_ERROR_EXTENSION_VALUE_INVALID, (SEC_ERROR_BASE + 34),
    111    "Certificate extension value is invalid.")
    112 
    113 ER3(SEC_ERROR_EXTENSION_NOT_FOUND, (SEC_ERROR_BASE + 35),
    114    "Certificate extension not found.")
    115 
    116 ER3(SEC_ERROR_CA_CERT_INVALID, (SEC_ERROR_BASE + 36),
    117    "Issuer certificate is invalid.")
    118 
    119 ER3(SEC_ERROR_PATH_LEN_CONSTRAINT_INVALID, (SEC_ERROR_BASE + 37),
    120    "Certificate path length constraint is invalid.")
    121 
    122 ER3(SEC_ERROR_CERT_USAGES_INVALID, (SEC_ERROR_BASE + 38),
    123    "Certificate usages field is invalid.")
    124 
    125 ER3(SEC_INTERNAL_ONLY, (SEC_ERROR_BASE + 39),
    126    "**Internal ONLY module**")
    127 
    128 ER3(SEC_ERROR_INVALID_KEY, (SEC_ERROR_BASE + 40),
    129    "The key does not support the requested operation.")
    130 
    131 ER3(SEC_ERROR_UNKNOWN_CRITICAL_EXTENSION, (SEC_ERROR_BASE + 41),
    132    "Certificate contains unknown critical extension.")
    133 
    134 ER3(SEC_ERROR_OLD_CRL, (SEC_ERROR_BASE + 42),
    135    "New CRL is not later than the current one.")
    136 
    137 ER3(SEC_ERROR_NO_EMAIL_CERT, (SEC_ERROR_BASE + 43),
    138    "Not encrypted or signed: you do not yet have an email certificate.")
    139 
    140 ER3(SEC_ERROR_NO_RECIPIENT_CERTS_QUERY, (SEC_ERROR_BASE + 44),
    141    "Not encrypted: you do not have certificates for each of the recipients.")
    142 
    143 ER3(SEC_ERROR_NOT_A_RECIPIENT, (SEC_ERROR_BASE + 45),
    144    "Cannot decrypt: you are not a recipient, or matching certificate and \
    145 private key not found.")
    146 
    147 ER3(SEC_ERROR_PKCS7_KEYALG_MISMATCH, (SEC_ERROR_BASE + 46),
    148    "Cannot decrypt: key encryption algorithm does not match your certificate.")
    149 
    150 ER3(SEC_ERROR_PKCS7_BAD_SIGNATURE, (SEC_ERROR_BASE + 47),
    151    "Signature verification failed: no signer found, too many signers found, \
    152 or improper or corrupted data.")
    153 
    154 ER3(SEC_ERROR_UNSUPPORTED_KEYALG, (SEC_ERROR_BASE + 48),
    155    "Unsupported or unknown key algorithm.")
    156 
    157 ER3(SEC_ERROR_DECRYPTION_DISALLOWED, (SEC_ERROR_BASE + 49),
    158    "Cannot decrypt: encrypted using a disallowed algorithm or key size.")
    159 
    160 /* Fortezza Alerts */
    161 ER3(XP_SEC_FORTEZZA_BAD_CARD, (SEC_ERROR_BASE + 50),
    162    "Fortezza card has not been properly initialized. \
    163 Please remove it and return it to your issuer.")
    164 
    165 ER3(XP_SEC_FORTEZZA_NO_CARD, (SEC_ERROR_BASE + 51),
    166    "No Fortezza cards Found")
    167 
    168 ER3(XP_SEC_FORTEZZA_NONE_SELECTED, (SEC_ERROR_BASE + 52),
    169    "No Fortezza card selected")
    170 
    171 ER3(XP_SEC_FORTEZZA_MORE_INFO, (SEC_ERROR_BASE + 53),
    172    "Please select a personality to get more info on")
    173 
    174 ER3(XP_SEC_FORTEZZA_PERSON_NOT_FOUND, (SEC_ERROR_BASE + 54),
    175    "Personality not found")
    176 
    177 ER3(XP_SEC_FORTEZZA_NO_MORE_INFO, (SEC_ERROR_BASE + 55),
    178    "No more information on that Personality")
    179 
    180 ER3(XP_SEC_FORTEZZA_BAD_PIN, (SEC_ERROR_BASE + 56),
    181    "Invalid Pin")
    182 
    183 ER3(XP_SEC_FORTEZZA_PERSON_ERROR, (SEC_ERROR_BASE + 57),
    184    "Couldn't initialize Fortezza personalities.")
    185 /* end fortezza alerts. */
    186 
    187 ER3(SEC_ERROR_NO_KRL, (SEC_ERROR_BASE + 58),
    188    "No KRL for this site's certificate has been found.")
    189 
    190 ER3(SEC_ERROR_KRL_EXPIRED, (SEC_ERROR_BASE + 59),
    191    "The KRL for this site's certificate has expired.")
    192 
    193 ER3(SEC_ERROR_KRL_BAD_SIGNATURE, (SEC_ERROR_BASE + 60),
    194    "The KRL for this site's certificate has an invalid signature.")
    195 
    196 ER3(SEC_ERROR_REVOKED_KEY, (SEC_ERROR_BASE + 61),
    197    "The key for this site's certificate has been revoked.")
    198 
    199 ER3(SEC_ERROR_KRL_INVALID, (SEC_ERROR_BASE + 62),
    200    "New KRL has an invalid format.")
    201 
    202 ER3(SEC_ERROR_NEED_RANDOM, (SEC_ERROR_BASE + 63),
    203    "security library: need random data.")
    204 
    205 ER3(SEC_ERROR_NO_MODULE, (SEC_ERROR_BASE + 64),
    206    "security library: no security module can perform the requested operation.")
    207 
    208 ER3(SEC_ERROR_NO_TOKEN, (SEC_ERROR_BASE + 65),
    209    "The security card or token does not exist, needs to be initialized, or has been removed.")
    210 
    211 ER3(SEC_ERROR_READ_ONLY, (SEC_ERROR_BASE + 66),
    212    "security library: read-only database.")
    213 
    214 ER3(SEC_ERROR_NO_SLOT_SELECTED, (SEC_ERROR_BASE + 67),
    215    "No slot or token was selected.")
    216 
    217 ER3(SEC_ERROR_CERT_NICKNAME_COLLISION, (SEC_ERROR_BASE + 68),
    218    "A certificate with the same nickname already exists.")
    219 
    220 ER3(SEC_ERROR_KEY_NICKNAME_COLLISION, (SEC_ERROR_BASE + 69),
    221    "A key with the same nickname already exists.")
    222 
    223 ER3(SEC_ERROR_SAFE_NOT_CREATED, (SEC_ERROR_BASE + 70),
    224    "error while creating safe object")
    225 
    226 ER3(SEC_ERROR_BAGGAGE_NOT_CREATED, (SEC_ERROR_BASE + 71),
    227    "error while creating baggage object")
    228 
    229 ER3(XP_JAVA_REMOVE_PRINCIPAL_ERROR, (SEC_ERROR_BASE + 72),
    230    "Couldn't remove the principal")
    231 
    232 ER3(XP_JAVA_DELETE_PRIVILEGE_ERROR, (SEC_ERROR_BASE + 73),
    233    "Couldn't delete the privilege")
    234 
    235 ER3(XP_JAVA_CERT_NOT_EXISTS_ERROR, (SEC_ERROR_BASE + 74),
    236    "This principal doesn't have a certificate")
    237 
    238 ER3(SEC_ERROR_BAD_EXPORT_ALGORITHM, (SEC_ERROR_BASE + 75),
    239    "Required algorithm is not allowed.")
    240 
    241 ER3(SEC_ERROR_EXPORTING_CERTIFICATES, (SEC_ERROR_BASE + 76),
    242    "Error attempting to export certificates.")
    243 
    244 ER3(SEC_ERROR_IMPORTING_CERTIFICATES, (SEC_ERROR_BASE + 77),
    245    "Error attempting to import certificates.")
    246 
    247 ER3(SEC_ERROR_PKCS12_DECODING_PFX, (SEC_ERROR_BASE + 78),
    248    "Unable to import. Decoding error. File not valid.")
    249 
    250 ER3(SEC_ERROR_PKCS12_INVALID_MAC, (SEC_ERROR_BASE + 79),
    251    "Unable to import. Invalid MAC. Incorrect password or corrupt file.")
    252 
    253 ER3(SEC_ERROR_PKCS12_UNSUPPORTED_MAC_ALGORITHM, (SEC_ERROR_BASE + 80),
    254    "Unable to import. MAC algorithm not supported.")
    255 
    256 ER3(SEC_ERROR_PKCS12_UNSUPPORTED_TRANSPORT_MODE, (SEC_ERROR_BASE + 81),
    257    "Unable to import. Only password integrity and privacy modes supported.")
    258 
    259 ER3(SEC_ERROR_PKCS12_CORRUPT_PFX_STRUCTURE, (SEC_ERROR_BASE + 82),
    260    "Unable to import. File structure is corrupt.")
    261 
    262 ER3(SEC_ERROR_PKCS12_UNSUPPORTED_PBE_ALGORITHM, (SEC_ERROR_BASE + 83),
    263    "Unable to import. Encryption algorithm not supported.")
    264 
    265 ER3(SEC_ERROR_PKCS12_UNSUPPORTED_VERSION, (SEC_ERROR_BASE + 84),
    266    "Unable to import. File version not supported.")
    267 
    268 ER3(SEC_ERROR_PKCS12_PRIVACY_PASSWORD_INCORRECT, (SEC_ERROR_BASE + 85),
    269    "Unable to import. Incorrect privacy password.")
    270 
    271 ER3(SEC_ERROR_PKCS12_CERT_COLLISION, (SEC_ERROR_BASE + 86),
    272    "Unable to import. Same nickname already exists in database.")
    273 
    274 ER3(SEC_ERROR_USER_CANCELLED, (SEC_ERROR_BASE + 87),
    275    "The user pressed cancel.")
    276 
    277 ER3(SEC_ERROR_PKCS12_DUPLICATE_DATA, (SEC_ERROR_BASE + 88),
    278    "Not imported, already in database.")
    279 
    280 ER3(SEC_ERROR_MESSAGE_SEND_ABORTED, (SEC_ERROR_BASE + 89),
    281    "Message not sent.")
    282 
    283 ER3(SEC_ERROR_INADEQUATE_KEY_USAGE, (SEC_ERROR_BASE + 90),
    284    "Certificate key usage inadequate for attempted operation.")
    285 
    286 ER3(SEC_ERROR_INADEQUATE_CERT_TYPE, (SEC_ERROR_BASE + 91),
    287    "Certificate type not approved for application.")
    288 
    289 ER3(SEC_ERROR_CERT_ADDR_MISMATCH, (SEC_ERROR_BASE + 92),
    290    "Address in signing certificate does not match address in message headers.")
    291 
    292 ER3(SEC_ERROR_PKCS12_UNABLE_TO_IMPORT_KEY, (SEC_ERROR_BASE + 93),
    293    "Unable to import. Error attempting to import private key.")
    294 
    295 ER3(SEC_ERROR_PKCS12_IMPORTING_CERT_CHAIN, (SEC_ERROR_BASE + 94),
    296    "Unable to import. Error attempting to import certificate chain.")
    297 
    298 ER3(SEC_ERROR_PKCS12_UNABLE_TO_LOCATE_OBJECT_BY_NAME, (SEC_ERROR_BASE + 95),
    299    "Unable to export. Unable to locate certificate or key by nickname.")
    300 
    301 ER3(SEC_ERROR_PKCS12_UNABLE_TO_EXPORT_KEY, (SEC_ERROR_BASE + 96),
    302    "Unable to export. Private Key could not be located and exported.")
    303 
    304 ER3(SEC_ERROR_PKCS12_UNABLE_TO_WRITE, (SEC_ERROR_BASE + 97),
    305    "Unable to export. Unable to write the export file.")
    306 
    307 ER3(SEC_ERROR_PKCS12_UNABLE_TO_READ, (SEC_ERROR_BASE + 98),
    308    "Unable to import. Unable to read the import file.")
    309 
    310 ER3(SEC_ERROR_PKCS12_KEY_DATABASE_NOT_INITIALIZED, (SEC_ERROR_BASE + 99),
    311    "Unable to export. Key database corrupt or deleted.")
    312 
    313 ER3(SEC_ERROR_KEYGEN_FAIL, (SEC_ERROR_BASE + 100),
    314    "Unable to generate public/private key pair.")
    315 
    316 ER3(SEC_ERROR_INVALID_PASSWORD, (SEC_ERROR_BASE + 101),
    317    "Password entered is invalid. Please pick a different one.")
    318 
    319 ER3(SEC_ERROR_RETRY_OLD_PASSWORD, (SEC_ERROR_BASE + 102),
    320    "Old password entered incorrectly. Please try again.")
    321 
    322 ER3(SEC_ERROR_BAD_NICKNAME, (SEC_ERROR_BASE + 103),
    323    "Certificate nickname already in use.")
    324 
    325 ER3(SEC_ERROR_NOT_FORTEZZA_ISSUER, (SEC_ERROR_BASE + 104),
    326    "Peer FORTEZZA chain has a non-FORTEZZA Certificate.")
    327 
    328 ER3(SEC_ERROR_CANNOT_MOVE_SENSITIVE_KEY, (SEC_ERROR_BASE + 105),
    329    "A sensitive key cannot be moved to the slot where it is needed.")
    330 
    331 ER3(SEC_ERROR_JS_INVALID_MODULE_NAME, (SEC_ERROR_BASE + 106),
    332    "Invalid module name.")
    333 
    334 ER3(SEC_ERROR_JS_INVALID_DLL, (SEC_ERROR_BASE + 107),
    335    "Invalid module path/filename")
    336 
    337 ER3(SEC_ERROR_JS_ADD_MOD_FAILURE, (SEC_ERROR_BASE + 108),
    338    "Unable to add module")
    339 
    340 ER3(SEC_ERROR_JS_DEL_MOD_FAILURE, (SEC_ERROR_BASE + 109),
    341    "Unable to delete module")
    342 
    343 ER3(SEC_ERROR_OLD_KRL, (SEC_ERROR_BASE + 110),
    344    "New KRL is not later than the current one.")
    345 
    346 ER3(SEC_ERROR_CKL_CONFLICT, (SEC_ERROR_BASE + 111),
    347    "New CKL has different issuer than current CKL. Delete current CKL.")
    348 
    349 ER3(SEC_ERROR_CERT_NOT_IN_NAME_SPACE, (SEC_ERROR_BASE + 112),
    350    "The Certifying Authority for this certificate is not permitted to issue a \
    351 certificate with this name.")
    352 
    353 ER3(SEC_ERROR_KRL_NOT_YET_VALID, (SEC_ERROR_BASE + 113),
    354    "The key revocation list for this certificate is not yet valid.")
    355 
    356 ER3(SEC_ERROR_CRL_NOT_YET_VALID, (SEC_ERROR_BASE + 114),
    357    "The certificate revocation list for this certificate is not yet valid.")
    358 
    359 ER3(SEC_ERROR_UNKNOWN_CERT, (SEC_ERROR_BASE + 115),
    360    "The requested certificate could not be found.")
    361 
    362 ER3(SEC_ERROR_UNKNOWN_SIGNER, (SEC_ERROR_BASE + 116),
    363    "The signer's certificate could not be found.")
    364 
    365 ER3(SEC_ERROR_CERT_BAD_ACCESS_LOCATION, (SEC_ERROR_BASE + 117),
    366    "The location for the certificate status server has invalid format.")
    367 
    368 ER3(SEC_ERROR_OCSP_UNKNOWN_RESPONSE_TYPE, (SEC_ERROR_BASE + 118),
    369    "The OCSP response cannot be fully decoded; it is of an unknown type.")
    370 
    371 ER3(SEC_ERROR_OCSP_BAD_HTTP_RESPONSE, (SEC_ERROR_BASE + 119),
    372    "The OCSP server returned unexpected/invalid HTTP data.")
    373 
    374 ER3(SEC_ERROR_OCSP_MALFORMED_REQUEST, (SEC_ERROR_BASE + 120),
    375    "The OCSP server found the request to be corrupted or improperly formed.")
    376 
    377 ER3(SEC_ERROR_OCSP_SERVER_ERROR, (SEC_ERROR_BASE + 121),
    378    "The OCSP server experienced an internal error.")
    379 
    380 ER3(SEC_ERROR_OCSP_TRY_SERVER_LATER, (SEC_ERROR_BASE + 122),
    381    "The OCSP server suggests trying again later.")
    382 
    383 ER3(SEC_ERROR_OCSP_REQUEST_NEEDS_SIG, (SEC_ERROR_BASE + 123),
    384    "The OCSP server requires a signature on this request.")
    385 
    386 ER3(SEC_ERROR_OCSP_UNAUTHORIZED_REQUEST, (SEC_ERROR_BASE + 124),
    387    "The OCSP server has refused this request as unauthorized.")
    388 
    389 ER3(SEC_ERROR_OCSP_UNKNOWN_RESPONSE_STATUS, (SEC_ERROR_BASE + 125),
    390    "The OCSP server returned an unrecognizable status.")
    391 
    392 ER3(SEC_ERROR_OCSP_UNKNOWN_CERT, (SEC_ERROR_BASE + 126),
    393    "The OCSP server has no status for the certificate.")
    394 
    395 ER3(SEC_ERROR_OCSP_NOT_ENABLED, (SEC_ERROR_BASE + 127),
    396    "You must enable OCSP before performing this operation.")
    397 
    398 ER3(SEC_ERROR_OCSP_NO_DEFAULT_RESPONDER, (SEC_ERROR_BASE + 128),
    399    "You must set the OCSP default responder before performing this operation.")
    400 
    401 ER3(SEC_ERROR_OCSP_MALFORMED_RESPONSE, (SEC_ERROR_BASE + 129),
    402    "The response from the OCSP server was corrupted or improperly formed.")
    403 
    404 ER3(SEC_ERROR_OCSP_UNAUTHORIZED_RESPONSE, (SEC_ERROR_BASE + 130),
    405    "The signer of the OCSP response is not authorized to give status for \
    406 this certificate.")
    407 
    408 ER3(SEC_ERROR_OCSP_FUTURE_RESPONSE, (SEC_ERROR_BASE + 131),
    409    "The OCSP response is not yet valid (contains a date in the future).")
    410 
    411 ER3(SEC_ERROR_OCSP_OLD_RESPONSE, (SEC_ERROR_BASE + 132),
    412    "The OCSP response contains out-of-date information.")
    413 
    414 ER3(SEC_ERROR_DIGEST_NOT_FOUND, (SEC_ERROR_BASE + 133),
    415    "The CMS or PKCS #7 Digest was not found in signed message.")
    416 
    417 ER3(SEC_ERROR_UNSUPPORTED_MESSAGE_TYPE, (SEC_ERROR_BASE + 134),
    418    "The CMS or PKCS #7 Message type is unsupported.")
    419 
    420 ER3(SEC_ERROR_MODULE_STUCK, (SEC_ERROR_BASE + 135),
    421    "PKCS #11 module could not be removed because it is still in use.")
    422 
    423 ER3(SEC_ERROR_BAD_TEMPLATE, (SEC_ERROR_BASE + 136),
    424    "Could not decode ASN.1 data. Specified template was invalid.")
    425 
    426 ER3(SEC_ERROR_CRL_NOT_FOUND, (SEC_ERROR_BASE + 137),
    427    "No matching CRL was found.")
    428 
    429 ER3(SEC_ERROR_REUSED_ISSUER_AND_SERIAL, (SEC_ERROR_BASE + 138),
    430    "You are attempting to import a cert with the same issuer/serial as \
    431 an existing cert, but that is not the same cert.")
    432 
    433 ER3(SEC_ERROR_BUSY, (SEC_ERROR_BASE + 139),
    434    "NSS could not shutdown. Objects are still in use.")
    435 
    436 ER3(SEC_ERROR_EXTRA_INPUT, (SEC_ERROR_BASE + 140),
    437    "DER-encoded message contained extra unused data.")
    438 
    439 ER3(SEC_ERROR_UNSUPPORTED_ELLIPTIC_CURVE, (SEC_ERROR_BASE + 141),
    440    "Unsupported elliptic curve.")
    441 
    442 ER3(SEC_ERROR_UNSUPPORTED_EC_POINT_FORM, (SEC_ERROR_BASE + 142),
    443    "Unsupported elliptic curve point form.")
    444 
    445 ER3(SEC_ERROR_UNRECOGNIZED_OID, (SEC_ERROR_BASE + 143),
    446    "Unrecognized Object Identifier.")
    447 
    448 ER3(SEC_ERROR_OCSP_INVALID_SIGNING_CERT, (SEC_ERROR_BASE + 144),
    449    "Invalid OCSP signing certificate in OCSP response.")
    450 
    451 ER3(SEC_ERROR_REVOKED_CERTIFICATE_CRL, (SEC_ERROR_BASE + 145),
    452    "Certificate is revoked in issuer's certificate revocation list.")
    453 
    454 ER3(SEC_ERROR_REVOKED_CERTIFICATE_OCSP, (SEC_ERROR_BASE + 146),
    455    "Issuer's OCSP responder reports certificate is revoked.")
    456 
    457 ER3(SEC_ERROR_CRL_INVALID_VERSION, (SEC_ERROR_BASE + 147),
    458    "Issuer's Certificate Revocation List has an unknown version number.")
    459 
    460 ER3(SEC_ERROR_CRL_V1_CRITICAL_EXTENSION, (SEC_ERROR_BASE + 148),
    461    "Issuer's V1 Certificate Revocation List has a critical extension.")
    462 
    463 ER3(SEC_ERROR_CRL_UNKNOWN_CRITICAL_EXTENSION, (SEC_ERROR_BASE + 149),
    464    "Issuer's V2 Certificate Revocation List has an unknown critical extension.")
    465 
    466 ER3(SEC_ERROR_UNKNOWN_OBJECT_TYPE, (SEC_ERROR_BASE + 150),
    467    "Unknown object type specified.")
    468 
    469 ER3(SEC_ERROR_INCOMPATIBLE_PKCS11, (SEC_ERROR_BASE + 151),
    470    "PKCS #11 driver violates the spec in an incompatible way.")
    471 
    472 ER3(SEC_ERROR_NO_EVENT, (SEC_ERROR_BASE + 152),
    473    "No new slot event is available at this time.")
    474 
    475 ER3(SEC_ERROR_CRL_ALREADY_EXISTS, (SEC_ERROR_BASE + 153),
    476    "CRL already exists.")
    477 
    478 ER3(SEC_ERROR_NOT_INITIALIZED, (SEC_ERROR_BASE + 154),
    479    "NSS is not initialized.")
    480 
    481 ER3(SEC_ERROR_TOKEN_NOT_LOGGED_IN, (SEC_ERROR_BASE + 155),
    482    "The operation failed because the PKCS#11 token is not logged in.")
    483 
    484 ER3(SEC_ERROR_OCSP_RESPONDER_CERT_INVALID, (SEC_ERROR_BASE + 156),
    485    "Configured OCSP responder's certificate is invalid.")
    486 
    487 ER3(SEC_ERROR_OCSP_BAD_SIGNATURE, (SEC_ERROR_BASE + 157),
    488    "OCSP response has an invalid signature.")
    489 
    490 ER3(SEC_ERROR_OUT_OF_SEARCH_LIMITS, (SEC_ERROR_BASE + 158),
    491    "Cert validation search is out of search limits")
    492 
    493 ER3(SEC_ERROR_INVALID_POLICY_MAPPING, (SEC_ERROR_BASE + 159),
    494    "Policy mapping contains anypolicy")
    495 
    496 ER3(SEC_ERROR_POLICY_VALIDATION_FAILED, (SEC_ERROR_BASE + 160),
    497    "Cert chain fails policy validation")
    498 
    499 ER3(SEC_ERROR_UNKNOWN_AIA_LOCATION_TYPE, (SEC_ERROR_BASE + 161),
    500    "Unknown location type in cert AIA extension")
    501 
    502 ER3(SEC_ERROR_BAD_HTTP_RESPONSE, (SEC_ERROR_BASE + 162),
    503    "Server returned bad HTTP response")
    504 
    505 ER3(SEC_ERROR_BAD_LDAP_RESPONSE, (SEC_ERROR_BASE + 163),
    506    "Server returned bad LDAP response")
    507 
    508 ER3(SEC_ERROR_FAILED_TO_ENCODE_DATA, (SEC_ERROR_BASE + 164),
    509    "Failed to encode data with ASN1 encoder")
    510 
    511 ER3(SEC_ERROR_BAD_INFO_ACCESS_LOCATION, (SEC_ERROR_BASE + 165),
    512    "Bad information access location in cert extension")
    513 
    514 ER3(SEC_ERROR_LIBPKIX_INTERNAL, (SEC_ERROR_BASE + 166),
    515    "Libpkix internal error occurred during cert validation.")
    516 
    517 ER3(SEC_ERROR_PKCS11_GENERAL_ERROR, (SEC_ERROR_BASE + 167),
    518    "A PKCS #11 module returned CKR_GENERAL_ERROR, indicating that an unrecoverable error has occurred.")
    519 
    520 ER3(SEC_ERROR_PKCS11_FUNCTION_FAILED, (SEC_ERROR_BASE + 168),
    521    "A PKCS #11 module returned CKR_FUNCTION_FAILED, indicating that the requested function could not be performed. Trying the same operation again might succeed.")
    522 
    523 ER3(SEC_ERROR_PKCS11_DEVICE_ERROR, (SEC_ERROR_BASE + 169),
    524    "A PKCS #11 module returned CKR_DEVICE_ERROR, indicating that a problem has occurred with the token or slot.")
    525 
    526 ER3(SEC_ERROR_BAD_INFO_ACCESS_METHOD, (SEC_ERROR_BASE + 170),
    527    "Unknown information access method in certificate extension.")
    528 
    529 ER3(SEC_ERROR_CRL_IMPORT_FAILED, (SEC_ERROR_BASE + 171),
    530    "Error attempting to import a CRL.")
    531 
    532 ER3(SEC_ERROR_EXPIRED_PASSWORD, (SEC_ERROR_BASE + 172),
    533    "The password expired.")
    534 
    535 ER3(SEC_ERROR_LOCKED_PASSWORD, (SEC_ERROR_BASE + 173),
    536    "The password is locked.")
    537 
    538 ER3(SEC_ERROR_UNKNOWN_PKCS11_ERROR, (SEC_ERROR_BASE + 174),
    539    "Unknown PKCS #11 error.")
    540 
    541 ER3(SEC_ERROR_BAD_CRL_DP_URL, (SEC_ERROR_BASE + 175),
    542    "Invalid or unsupported URL in CRL distribution point name.")
    543 
    544 ER3(SEC_ERROR_CERT_SIGNATURE_ALGORITHM_DISABLED, (SEC_ERROR_BASE + 176),
    545    "The certificate was signed using a signature algorithm that is disabled because it is not secure.")
    546 
    547 ER3(SEC_ERROR_LEGACY_DATABASE, (SEC_ERROR_BASE + 177),
    548    "The certificate/key database is in an old, unsupported format.")
    549 
    550 ER3(SEC_ERROR_APPLICATION_CALLBACK_ERROR, (SEC_ERROR_BASE + 178),
    551    "The certificate was rejected by extra checks in the application.")
    552 
    553 ER3(SEC_ERROR_INVALID_STATE, (SEC_ERROR_BASE + 179),
    554    "The attempted operation is invalid for the current state.")
    555 
    556 ER3(SEC_ERROR_POLICY_LOCKED, (SEC_ERROR_BASE + 180),
    557    "Could not change the policy because the policy is now locked.")
    558 
    559 ER3(SEC_ERROR_SIGNATURE_ALGORITHM_DISABLED, (SEC_ERROR_BASE + 181),
    560    "Could not create or verify a signature using a signature algorithm that is disabled because it is not secure.")
    561 
    562 ER3(SEC_ERROR_ALGORITHM_MISMATCH, (SEC_ERROR_BASE + 182),
    563    "The signature algorithm in the signature field of the certificate does not match the algorithm in its signatureAlgorithm field.")
    564 
    565 ER3(SEC_ERROR_CERTIFICATE_COMPRESSION_ALGORITHM_NOT_SUPPORTED, (SEC_ERROR_BASE + 183),
    566    "The certificate was encoded using an unsupported certificate compression algorithm.")
    567 
    568 ER3(SEC_ERROR_UNEXPECTED_COMPRESSED_CERTIFICATE, (SEC_ERROR_BASE + 184),
    569    "Received unexpected compressed certificate.")