VisiSecure Error Codes

This appendix provides information about error codes for VisiSecure.

The tables in the subsequent sections list most of the minor codes and their corresponding descriptions that accompany the CORBA system exceptions thrown from within VisiSecure for Java or VisiSecure for C++. The identifier (ERROR_ID) helps you to identify or represent these errors inside the code as illustrated in the following sections.

Modifying minor codes in C++

The header file "vbsecminors.h" needs to be included for ERROR_IDs to be made available. Then, in the code, you can use vbsec::MinorCodes::<ERROR_ID>.

For example, vbsec::MinorCodes::ERROR_PARSING_CERTIFICATE helps to identify a given error (returned in the form of minor code as part of a CORBA system exception).

Modifying minor codes in Java

You can use com.borland.security.util.MinorCodes.<ERROR_ID>.

For example, com.borland.security.util.MinorCodes.ERROR_PARSING_CERTIFICATE can be used to identify a given error (returned in the form of minor code as part of a CORBA system exception).

The static method String getMinorCodeDescription (int minor) of class com.borland.security.util.MinorCodesUtil can be used to fetch the brief textual description of the error code.

General Errors

Error minor code	Error identifier (ERROR_ID)	Error description	Associated CORBA exception
0x56422100	INTERNAL_ERROR	Unrecoverable internal runtime error	NO_PERMISSION BAD_PARAM INTERNAL
0x56422101	UNTRUSTED_ASSERTION	Peer has insufficient privilege to assert the caller. See the description of the property vbroker.security.trust.	NO_PERMISSION

PKI Errors

Error minor code	Error identifier (ERROR_ID)	Error description	Associated CORBA exception
0x56422201	ERROR_PARSING_CERTIFICATE	Unknown error when parsing the certificate data Example cause: corrupted DER/Base64 data often happens when copying over ftp that may involve translation for UNIX<->DOS CR-LF	NO_PERMISSION BAD_PARAM
0x56422202	ERROR_PARSING_PRIVATE_KEY	Unknown/unclassified error when parsing the private key data. Example cause: corrupted DER/Base64 data often happens when copying over ftp that may involve translation for UNIX<->DOS CR-LF	BAD_PARAM

SSL Errors

The following are the translation of SSL Error alerts as defined in the TLS protocol (see http://tools.ietf.org/html/rfc5246#section-7.2.2).

Error minor code	Error identifier (ERROR_ID)	Error description	Associated CORBA exception
0x56422221	UNKNOWN_CERTIFICATE	Translated from SSL alerts: certificate_unknown	NO_PERMISSION BAD_PARAM
0x56422222	UNSUPPORTED_CERTIFICATE	Translated from SSL alerts: unsupported_certificate	NO_PERMISSION
0x56422223	BAD_CERTIFICATE	Translated from SSL alerts: bad_certificate	NO_PERMISSION BAD_PARAM
0x56422224	CERTIFICATE_REVOKED	Translated from SSL alerts: certificate_revoked	NO_PERMISSION
0x56422225	CERTIFICATE_EXPIRED	Translated from SSL alerts: certificate_expired	NO_PERMISSION BAD_PARAM
0x56422226	BAD_RECORD_MAC	Translated from SSL alerts: bad_record_mac	NO_PERMISSION
0x56422227	HANDSHAKE_FAILURE	Translated from SSL alerts: handshake_failure	NO_PERMISSION BAD_INV_ORDER

PKCS12 Errors

Error minor code	Error identifier (ERROR_ID)	Error description	Associated CORBA exception
0x56422251	P12_GENERAL_ERROR	Unknown error when processing PKCS12 data	BAD_PARAM NO_RESOURCES
0x56422252	P12_INVALID_DATA_FORMAT	Corrupted PKCS12 data	BAD_PARAM
0x56422253	P12_INVALID_PK_FORMAT	The private key retrieved from PKCS12 data is of unsupported format	BAD_PARAM
0x56422255	P12_MISSING_DATA	The PKCS12 data does not contain the required item	BAD_PARAM

General Security Policies (GSP) Errors

Error minor code	Error identifier (ERROR_ID)	Error description	Associated CORBA exception
0x56422271	SERVER_REQUIRES_SECURE_CONNECTIONS	Secure transport is not available in this client while the server requires it to connect using a secure connection	NO_PERMISSION
0x56422272	SECURITY_CURRENT_UNAVAILABLE	SSL session is not available, possible causes: not in a request context, not an SSL connection or invalid object reference (on client side)	BAD_OPERATION
0x56422273	NO_POSSIBLE_CONNECTION	All available connections to the server do not meet the security requirements set up on this client	NO_PERMISSION
0x56422274	SERVER_REQUIRES_TRANSPORT_IDENTITY	The server requires transport identity while this client does not have any	NO_PERMISSION

Common Secure Interoperable (CSI) Errors

Error minor code	Error identifier (ERROR_ID)	Error description	Associated CORBA exception
0x56422300	NO_IDENTITY	The server requires at least an identity while this client does not send any	NO_PERMISSION
0x56422301	BAD_SAS_DISC	This client sends SAS (Security Attribute Service, see OMG-CSI) that the server fails to interpret	NO_PERMISSION BAD_PARAM
0x56422302	UP_IDENTITY_REQD	The server requires a service context based U/P identity while this client does not send any	NO_PERMISSION
0x56422303	NO_CONTEXT	This is the minor code of the NO_PERMISSION exception thrown back to the client carrying ContextError with major = 4 and minor = 1 for 'no context' semantic as per OMG-CSI	NO_PERMISSION TRANSIENT
0x56422304	CONFLICTING_EVIDENCE	This is the minor code of the NO_PERMISSION exception thrown back to the client carrying ContextError with major = 3 and minor = 1 for 'conflicting evidence' semantic as per OMG-CSI	NO_PERMISSION TRANSIENT
0x56422305	ASSERTION_UNAUTHORIZED	This is the end-tier that is not supposed to make another call to the next tier on behalf of the caller. Please see vbroker.security. supportIdentityAssertion (Java).	NO_PERMISSION

Authentication Errors

Error minor code	Error identifier (ERROR_ID)	Error description	Associated CORBA exception
0x56422400	LOGIN_FAILED	This is the minor code of the NO_PERMISSION exception thrown back to the client carrying ContextError with major = 1 and minor = 1 for 'invalid evidence' semantic as per OMG-CSI	NO_PERMISSION BAD_PARAM

Authorization Errors

Error minor code	Error identifier (ERROR_ID)	Error description	Associated CORBA exception
0x56422500	FAILED_AUTHORIZATION	The caller has insufficient privileges required to perform the action	NO_PERMISSION
0x56422501	INVALID_ROLE	The required run-as role is not configured on this system	NO_PERMISSION
0x56422502	EMPTY_ALIAS_FOR_ROLE	The required alias for the specified run-as role is not configured on this system	NO_PERMISSION
0x56422503	ACCESSED_BY_UNKNOWN_USER	Access is denied because the caller is unknown. Caller is either null or anonymous	NO_PERMISSION
0x56422504	ACCESSED_BY_UNAUTHENTICATED_USER	Access is denied because the caller is not authenticated	NO_PERMISSION