OpenSSL Errors

Advantage Error Guide

When using AES encryption and TLS Communications, Advantage uses libraries built from the OpenSSL project. Depending on the situation, the error text associated with Advantage errors may contain error numbers from the OpenSSL libraries. The error information may be in the Advantage error log (ads_err.*) or in error information returned to the client application.

Contents

• SSL Errors
• X509 Certificate Errors

SSL Errors

The following are errors that may occur when using TLS Communications. The following error numbers and names are possible. For more detailed information on these errors, see http://www.openssl.org/docs/ssl/SSL_get_error.html. In addition to the error number, there may be additional error text generated by the library that can help determine the problem.

1	SSL_ERROR_SSL
2	SSL_ERROR_WANT_READ
3	SSL_ERROR_WANT_WRITE
4	SSL_ERROR_WANT_X509_LOOKUP
5	SSL_ERROR_SYSCALL
6	SSL_ERROR_ZERO_RETURN
7	SSL_ERROR_WANT_CONNECT
8	SSL_ERROR_WANT_ACCEPT

X509 Certificate Errors

When using TLS Communications, the certificate is verified by the OpenSSL libraries. If errors occur, the connection will not be established. The following error numbers and names are possible. For more detailed information on a particular error, please see http://www.openssl.org/docs/crypto/X509_STORE_CTX_get_error.html.

2	X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT
3	X509_V_ERR_UNABLE_TO_GET_CRL
4	X509_V_ERR_UNABLE_TO_DECRYPT_CERT_SIGNATURE
5	X509_V_ERR_UNABLE_TO_DECRYPT_CRL_SIGNATURE
6	X509_V_ERR_UNABLE_TO_DECODE_ISSUER_PUBLIC_KEY
7	X509_V_ERR_CERT_SIGNATURE_FAILURE
8	X509_V_ERR_CRL_SIGNATURE_FAILURE
9	X509_V_ERR_CERT_NOT_YET_VALID
10	X509_V_ERR_CERT_HAS_EXPIRED
11	X509_V_ERR_CRL_NOT_YET_VALID
12	X509_V_ERR_CRL_HAS_EXPIRED
13	X509_V_ERR_ERROR_IN_CERT_NOT_BEFORE_FIELD
14	X509_V_ERR_ERROR_IN_CERT_NOT_AFTER_FIELD
15	X509_V_ERR_ERROR_IN_CRL_LAST_UPDATE_FIELD
16	X509_V_ERR_ERROR_IN_CRL_NEXT_UPDATE_FIELD
17	X509_V_ERR_OUT_OF_MEM
18	X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT
19	X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN
20	X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY
21	X509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE
22	X509_V_ERR_CERT_CHAIN_TOO_LONG
23	X509_V_ERR_CERT_REVOKED
24	X509_V_ERR_INVALID_CA
25	X509_V_ERR_PATH_LENGTH_EXCEEDED
26	X509_V_ERR_INVALID_PURPOSE
27	X509_V_ERR_CERT_UNTRUSTED
28	X509_V_ERR_CERT_REJECTED
29	X509_V_ERR_SUBJECT_ISSUER_MISMATCH
30	X509_V_ERR_AKID_SKID_MISMATCH
31	X509_V_ERR_AKID_ISSUER_SERIAL_MISMATCH
32	X509_V_ERR_KEYUSAGE_NO_CERTSIGN
33	X509_V_ERR_UNABLE_TO_GET_CRL_ISSUER
34	X509_V_ERR_UNHANDLED_CRITICAL_EXTENSION
35	X509_V_ERR_KEYUSAGE_NO_CRL_SIGN
36	X509_V_ERR_UNHANDLED_CRITICAL_CRL_EXTENSION
37	X509_V_ERR_INVALID_NON_CA
38	X509_V_ERR_PROXY_PATH_LENGTH_EXCEEDED
39	X509_V_ERR_KEYUSAGE_NO_DIGITAL_SIGNATURE
40	X509_V_ERR_PROXY_CERTIFICATES_NOT_ALLOWED
41	X509_V_ERR_INVALID_EXTENSION
42	X509_V_ERR_INVALID_POLICY_EXTENSION
43	X509_V_ERR_NO_EXPLICIT_POLICY
44	X509_V_ERR_UNNESTED_RESOURCE
50	X509_V_ERR_APPLICATION_VERIFICATION