blob: 79bcd1b074e6cc989e61a5e90599db938fbb70ec (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
|
/*
* (C) 2016 Jack Lloyd
*
* Botan is released under the Simplified BSD License (see license.txt)
*/
#include <botan/cert_status.h>
namespace Botan {
//static
const char* to_string(Certificate_Status_Code code)
{
switch(code)
{
case Certificate_Status_Code::VERIFIED:
return "Verified";
case Certificate_Status_Code::OCSP_RESPONSE_GOOD:
return "OCSP response accepted as affirming unrevoked status for certificate";
case Certificate_Status_Code::OCSP_SIGNATURE_OK:
return "Signature on OCSP response was found valid";
case Certificate_Status_Code::VALID_CRL_CHECKED:
return "Valid CRL examined";
case Certificate_Status_Code::CERT_SERIAL_NEGATIVE:
return "Certificate serial number is negative";
case Certificate_Status_Code::DN_TOO_LONG:
return "Distinguished name too long";
case Certificate_Status_Code::OSCP_NO_REVOCATION_URL:
return "OCSP URL not available";
case Certificate_Status_Code::OSCP_SERVER_NOT_AVAILABLE:
return "OSCP server not available";
case Certificate_Status_Code::NO_REVOCATION_DATA:
return "No revocation data";
case Certificate_Status_Code::SIGNATURE_METHOD_TOO_WEAK:
return "Signature method too weak";
case Certificate_Status_Code::UNTRUSTED_HASH:
return "Hash function used is considered too weak for security";
case Certificate_Status_Code::CERT_NOT_YET_VALID:
return "Certificate is not yet valid";
case Certificate_Status_Code::CERT_HAS_EXPIRED:
return "Certificate has expired";
case Certificate_Status_Code::OCSP_NOT_YET_VALID:
return "OCSP is not yet valid";
case Certificate_Status_Code::OCSP_HAS_EXPIRED:
return "OCSP response has expired";
case Certificate_Status_Code::CRL_NOT_YET_VALID:
return "CRL response is not yet valid";
case Certificate_Status_Code::CRL_HAS_EXPIRED:
return "CRL has expired";
case Certificate_Status_Code::CERT_ISSUER_NOT_FOUND:
return "Certificate issuer not found";
case Certificate_Status_Code::CANNOT_ESTABLISH_TRUST:
return "Cannot establish trust";
case Certificate_Status_Code::CERT_CHAIN_LOOP:
return "Loop in certificate chain";
case Certificate_Status_Code::CHAIN_LACKS_TRUST_ROOT:
return "Certificate chain does not end in a CA certificate";
case Certificate_Status_Code::CHAIN_NAME_MISMATCH:
return "Certificate issuer does not match subject of issuing cert";
case Certificate_Status_Code::POLICY_ERROR:
return "Certificate policy error";
case Certificate_Status_Code::DUPLICATE_CERT_POLICY:
return "Certificate contains duplicate policy";
case Certificate_Status_Code::INVALID_USAGE:
return "Certificate does not allow the requested usage";
case Certificate_Status_Code::CERT_CHAIN_TOO_LONG:
return "Certificate chain too long";
case Certificate_Status_Code::CA_CERT_NOT_FOR_CERT_ISSUER:
return "CA certificate not allowed to issue certs";
case Certificate_Status_Code::CA_CERT_NOT_FOR_CRL_ISSUER:
return "CA certificate not allowed to issue CRLs";
case Certificate_Status_Code::NO_MATCHING_CRLDP:
return "No CRL with matching distribution point for certificate";
case Certificate_Status_Code::OCSP_CERT_NOT_LISTED:
return "OCSP cert not listed";
case Certificate_Status_Code::OCSP_BAD_STATUS:
return "OCSP bad status";
case Certificate_Status_Code::CERT_NAME_NOMATCH:
return "Certificate does not match provided name";
case Certificate_Status_Code::NAME_CONSTRAINT_ERROR:
return "Certificate does not pass name constraint";
case Certificate_Status_Code::UNKNOWN_CRITICAL_EXTENSION:
return "Unknown critical extension encountered";
case Certificate_Status_Code::DUPLICATE_CERT_EXTENSION:
return "Duplicate certificate extension encountered";
case Certificate_Status_Code::EXT_IN_V1_V2_CERT:
return "Encountered extension in certificate with version < 3";
case Certificate_Status_Code::OCSP_SIGNATURE_ERROR:
return "OCSP signature error";
case Certificate_Status_Code::OCSP_ISSUER_NOT_FOUND:
return "Unable to find certificate issusing OCSP response";
case Certificate_Status_Code::OCSP_RESPONSE_MISSING_KEYUSAGE:
return "OCSP issuer's keyusage prohibits OCSP";
case Certificate_Status_Code::OCSP_RESPONSE_INVALID:
return "OCSP parsing valid";
case Certificate_Status_Code::OCSP_NO_HTTP:
return "OCSP requests not available, no HTTP support compiled in";
case Certificate_Status_Code::CERT_IS_REVOKED:
return "Certificate is revoked";
case Certificate_Status_Code::CRL_BAD_SIGNATURE:
return "CRL bad signature";
case Certificate_Status_Code::SIGNATURE_ERROR:
return "Signature error";
case Certificate_Status_Code::CERT_PUBKEY_INVALID:
return "Certificate public key invalid";
case Certificate_Status_Code::SIGNATURE_ALGO_UNKNOWN:
return "Certificate signed with unknown/unavailable algorithm";
case Certificate_Status_Code::SIGNATURE_ALGO_BAD_PARAMS:
return "Certificate signature has invalid parameters";
// intentionally no default so we are warned if new enum values are added
}
return nullptr;
}
}
|
