// Copyright (c) 2001-2009 Nokia Corporation and/or its subsidiary(-ies).

// All rights reserved.

// This component and the accompanying materials are made available

// under the terms of "Eclipse Public License v1.0"

// which accompanies this distribution, and is available

// at the URL "http://www.eclipse.org/legal/epl-v10.html".

//

// Initial Contributors:

// Nokia Corporation - initial contribution.

//

// Contributors:

//

// Description:

//

#ifndef __SSLERR_H__

#define __SSLERR_H__

/** Base offset for SSL errors. */

#define SSL_ERROR_BASE -7400

/** Base offset for SSL alerts. */

#define SSL_ALERT_BASE 100

/**

 * @file SSLErr.h

 * Error code definitions for TLS.

 */

/**

 * No shared cipher was found.

 * The handshake failed because there was no available shared cipher supported by both the client and the server.

 */

const TInt KErrSSLNoSharedCipher		= SSL_ERROR_BASE - 1;

/**

 * The socket already has received data pending on it.

 * This error is seen when StartClientHandshake is called when

 * there is already data waiting to be read from the socket. */

const TInt KErrSSLSocketBusy			= SSL_ERROR_BASE - 2;

/** One or more cipher suites passed as an argument was invalid. */

const TInt KErrSSLInvalidCipherSuite	= SSL_ERROR_BASE - 3;

/**

 * The certificate that was passed as an argument was invalid. 

 * (this could be that actual certificate is not a valid certificate, or if 

 * certman handles are passed, it wasn't found in certman) */

const TInt KErrSSLInvalidCert			= SSL_ERROR_BASE - 4;

/** No client certificate was supplied. */

const TInt KErrSSLNoClientCert			= SSL_ERROR_BASE - 5;

/** The size of the key is too big. */

const TInt KErrSSLUnsupportedKeySize	= SSL_ERROR_BASE - 6;

/** General unsupported key error */

const TInt KErrSSLUnsupportedKey		= SSL_ERROR_BASE - 7;

/** An invalid record was received. */

const TInt KErrSSLBadRecordHeader		= SSL_ERROR_BASE - 8; 

//

// Handshake related errors

/** Invalid protocol version. */

const TInt KErrSSLBadProtocolVersion	= SSL_ERROR_BASE - 9;

/** The server only supports the SSL2.0 protocol. */

const TInt KErrSSL2ServerOnly			= SSL_ERROR_BASE - 10;

/** Unexpected message. */

const TInt KErrSSLUnexpectedMessage		= SSL_ERROR_BASE - 11;

/** Unsupported cipher. */

const TInt KErrSSLUnsupportedCipher		= SSL_ERROR_BASE - 12;

/** Bad MAC. */

const TInt KErrSSLBadMAC				= SSL_ERROR_BASE - 13;

/** An SSL alert was received from the remote end, which caused the connection to be terminated. */

const TInt KErrSSLReceivedAlert			= SSL_ERROR_BASE - 14;

/** An invalid handshake message was received. */

const TInt KErrSSLRecvNotSupportedHS	= SSL_ERROR_BASE - 15;

/** A field in the handshake record being parsed was too big. */

const TInt KErrSSLHSRecordFieldTooBig	= SSL_ERROR_BASE - 16;

/** Record header field too big. */

const TInt KErrSSLRecordHeaderTooBig	= SSL_ERROR_BASE - 17;

/** Send data field too big. */

const TInt KErrSSLSendDataTooBig			= SSL_ERROR_BASE - 18;

/** No certificate. */

const TInt KErrSSLNoCertificate			= SSL_ERROR_BASE - 19;

/** Invalid hash. */

const TInt KErrSSLInvalidHash			= SSL_ERROR_BASE - 20;

/** Send cancelled. */

const TInt KErrSSLSendCanceled			= SSL_ERROR_BASE - 21;

/** Receieve cancelled. */

const TInt KErrSSLRecvCanceled			= SSL_ERROR_BASE - 22;

/** CancelHandshake was called during one of the handshake methods. */

const TInt KErrSSLHandshakeCanceled		= SSL_ERROR_BASE - 23;

/** Write failed. */

const TInt KErrSSLWriteFailed			= SSL_ERROR_BASE - 24;

/** The SSL.dll couldn't be loaded by the adaptor. */

const TInt KErrSSLFailedToLoad			= SSL_ERROR_BASE - 25;

/** An unspecified error was signaled from the SSL.dll to the adaptor. */

const TInt KErrSSLDisconnectIndication	= SSL_ERROR_BASE - 26;

/** A leave occured in the SSL.dll. */

const TInt KErrSSLDllLeave				= SSL_ERROR_BASE - 27;

/** A leave occured in the SSL.dll. */

const TInt KErrSSLNullTlsSession				= SSL_ERROR_BASE - 28;

//

// These error codes are equivalent to the standard TLS protocol Alert message 

// errors as defined in the TLS RFC. They include all those defined in SSL3.0

// The end number of each error is the same as per the RFC, so by using the

// SSL_ERROR_BASE and SSL_ALERT_BASE defines, errors codes can be constructed

// directly from the field within an alert message.

/** Close notification. */

const TInt KErrSSLAlertCloseNotify				= SSL_ERROR_BASE - SSL_ALERT_BASE - 0;

/** An inappropriate message was received. */

const TInt KErrSSLAlertUnexpectedMessage		= SSL_ERROR_BASE - SSL_ALERT_BASE - 10;

/** A record was received with an incorrect MAC. */

const TInt KErrSSLAlertBadRecordMac				= SSL_ERROR_BASE - SSL_ALERT_BASE - 20;

/** A TLS cipher text was decrypted in an invalid way. */

const TInt KErrSSLAlertDecryptionFailed			= SSL_ERROR_BASE - SSL_ALERT_BASE - 21;

/** A TLS cipher text record was received which was too long. */

const TInt KErrSSLAlertRecordOverflow			= SSL_ERROR_BASE - SSL_ALERT_BASE - 22;

/** The decompression function received improper input. */

const TInt KErrSSLAlertDecompressionFailure		= SSL_ERROR_BASE - SSL_ALERT_BASE - 30;

/** With given the options available, the sender was unable to negotiate an acceptable 

* set of security parameters . */

const TInt KErrSSLAlertHandshakeFailure			= SSL_ERROR_BASE - SSL_ALERT_BASE - 40;

/** No certificate. */

const TInt KErrSSLAlertNoCertificate			= SSL_ERROR_BASE - SSL_ALERT_BASE - 41;

/** A certificate was corrupt, e.g. contained signatures that could not be verified. */

const TInt KErrSSLAlertBadCertificate			= SSL_ERROR_BASE - SSL_ALERT_BASE - 42;

/** The certificate was of an unsupported type. */

const TInt KErrSSLAlertUnsupportedCertificate	= SSL_ERROR_BASE - SSL_ALERT_BASE - 43;

/** The certificate was revoked. */

const TInt KErrSSLAlertCertificateRevoked		= SSL_ERROR_BASE - SSL_ALERT_BASE - 44;

/** The certificate was expired. */

const TInt KErrSSLAlertCertificateExpired		= SSL_ERROR_BASE - SSL_ALERT_BASE - 45;

/** An unspecified problem with the certificate. Certificate can not be used. */

const TInt KErrSSLAlertCertificateUnknown		= SSL_ERROR_BASE - SSL_ALERT_BASE - 46;

/** A field in the handshake was out of range or inconsistent with other fields. */

const TInt KErrSSLAlertIllegalParameter			= SSL_ERROR_BASE - SSL_ALERT_BASE - 47;

/** The certificate was not accepted.

* 

* Either the CA certificate could not be located 

* or the CA could not be matched with a known trusted CA. */

const TInt KErrSSLAlertUnknownCA				= SSL_ERROR_BASE - SSL_ALERT_BASE - 48;

/** A valid certificate was received, but the access control denied access. */

const TInt KErrSSLAlertAccessDenied				= SSL_ERROR_BASE - SSL_ALERT_BASE - 49;

/** A message could not be decoded, e.g. some field was out of the specified range. */

const TInt KErrSSLAlertDecodeError				= SSL_ERROR_BASE - SSL_ALERT_BASE - 50;

/** A handshake cryptographic operation failed. */

const TInt KErrSSLAlertDecryptError				= SSL_ERROR_BASE - SSL_ALERT_BASE - 51;

/** A negotiation was not allowed due to export restrictions. */

const TInt KErrSSLAlertExportRestriction		= SSL_ERROR_BASE - SSL_ALERT_BASE - 60;

/** The protocol version was not supported, e.g. the client has attempted to negotiate 

* a recognised, but unsupported protocol. */

const TInt KErrSSLAlertProtocolVersion			= SSL_ERROR_BASE - SSL_ALERT_BASE - 70;

/** Returned instead of KErrSSLAlertHandshakeFailure when the negotiation fails 

* because the server requests ciphers more secure than those supported by the client. */

const TInt KErrSSLAlertInsufficientSecurity		= SSL_ERROR_BASE - SSL_ALERT_BASE - 71;

/** An internal error. */

const TInt KErrSSLAlertInternalError			= SSL_ERROR_BASE - SSL_ALERT_BASE - 80;

/** This handshake is being cancelled by the user. */

const TInt KErrSSLAlertUserCanceled				= SSL_ERROR_BASE - SSL_ALERT_BASE - 90;

/** No renegotiation will be accepted. */

const TInt KErrSSLAlertNoRenegotiation			= SSL_ERROR_BASE - SSL_ALERT_BASE - 100;

#endif // __SSLERR_H__