Confirmed users
304
edits
SecurityEngineering/x509Certs: Difference between revisions
Jump to navigation
Jump to search
→Error Codes in Firefox
| Line 134: | Line 134: | ||
| SEC_ERROR_CERT_BAD_ACCESS_LOCATION || The OCSP URI in the authorityInformationAccess extension is improperly formed || Re-generate the certificate with a well-formed OCSP URI | | SEC_ERROR_CERT_BAD_ACCESS_LOCATION || The OCSP URI in the authorityInformationAccess extension is improperly formed || Re-generate the certificate with a well-formed OCSP URI | ||
|- | |- | ||
| SEC_ERROR_CERT_NOT_IN_NAME_SPACE || | | SEC_ERROR_CERT_NOT_IN_NAME_SPACE || A certificate has a common name or subject alternative name that is not in the namespace of an issuing certificate || Re-issue the certificate with names that are within the namespace of all certificates in the chain | ||
|- | |- | ||
| SEC_ERROR_CERT_SIGNATURE_ALGORITHM_DISABLED || || | | SEC_ERROR_CERT_SIGNATURE_ALGORITHM_DISABLED || A certificate has been signed with an obsolete algorithm || Re-sign the certificate using a modern algorithm | ||
|- | |- | ||
| | | SEC_ERROR_EXPIRED_CERTIFICATE || A certificate is too old to be used || Re-generate the certificate | ||
|- | |- | ||
| | | SEC_ERROR_EXTENSION_VALUE_INVALID || A certificate has an extension with an empty value || Re-generate the certificate without the extension, or re-generate it with a non-empty value | ||
|- | |- | ||
| | | SEC_ERROR_INADEQUATE_CERT_TYPE || A certificate has an extended key usage extension that does not assert a required usage, or an end-entity certificate asserts the id-kp-OCSPSigning usage when it shouldn't || Re-generate the certificate with the appropriate extended key usage values | ||
|- | |- | ||
| | | SEC_ERROR_INADEQUATE_KEY_USAGE || A certificate has a key usage extension that does not assert a required usage || Re-generate the certificate with the appropriate key usage values | ||
|- | |- | ||
| | | SEC_ERROR_INVALID_ALGORITHM || A certificate has been signed with an unknown algorithm || Re-sign the certificate with a standardized certificate signing algorithm | ||
|- | |- | ||
| | | SEC_ERROR_INVALID_TIME || A time field in a certificate has an invalid value || Re-generate the certificate with valid encodings for time fields | ||
|- | |||
|- | |- | ||
| MOZILLA_PKIX_ERROR_KEY_PINNING_FAILURE || || | | MOZILLA_PKIX_ERROR_KEY_PINNING_FAILURE || || | ||
| Line 160: | Line 158: | ||
| SEC_ERROR_REVOKED_CERTIFICATE || || | | SEC_ERROR_REVOKED_CERTIFICATE || || | ||
|- | |- | ||
| SEC_ERROR_UNKNOWN_CRITICAL_EXTENSION || || | | SEC_ERROR_UNKNOWN_CRITICAL_EXTENSION || A certificate contains an extension marked as critical that is not handled by mozilla::pkix || Re-generate the certificate without the extension or with it not marked as critical | ||
|- | |- | ||
| SEC_ERROR_UNKNOWN_ISSUER || || | | SEC_ERROR_UNKNOWN_ISSUER || || | ||
| Line 205: | Line 201: | ||
|- | |- | ||
| MOZILLA_PKIX_ERROR_INADEQUATE_KEY_SIZE || || | | MOZILLA_PKIX_ERROR_INADEQUATE_KEY_SIZE || || | ||
|- | |- | ||
|} | |} | ||