SSL Services: Difference between revisions
No edit summary |
Added new error code indicating EWOULDBLOCK when calling sslcStartConnection() |
||
| (6 intermediate revisions by 2 users not shown) | |||
| Line 46: | Line 46: | ||
| [[1.0.0-0]] | | [[1.0.0-0]] | ||
| | | | ||
| This writes an output u32 to cmdreply[2](created context handle). | | CreateCrlStore. This writes an output u32 to cmdreply[2](created context handle). | ||
|- | |- | ||
| 0x00090040 | | 0x00090040 | ||
| [[1.0.0-0]] | | [[1.0.0-0]] | ||
| | | | ||
| (u32 | | DestroyCrlStore(u32 contexthandle) | ||
|- | |- | ||
| 0x000A0082 | | 0x000A0082 | ||
| [[1.0.0-0]] | | [[1.0.0-0]] | ||
| Main-only | | Main-only | ||
| (u32 contexthandle, u32 size, ((Size<<4) <nowiki>|</nowiki> 10), inbufptr) | | AddCrlToCrlStore(u32 contexthandle, u32 size, ((Size<<4) <nowiki>|</nowiki> 10), inbufptr) | ||
|- | |- | ||
| 0x000B0080 | | 0x000B0080 | ||
| [[1.0.0-0]] | | [[1.0.0-0]] | ||
| Main-only | | Main-only | ||
| (u32 contexthandle, u8 inval2) | | AddInternalCrlToCrlStore(u32 contexthandle, u8 inval2) | ||
|- | |- | ||
| 0x000C0080 | | 0x000C0080 | ||
| [[1.0.0-0]] | | [[1.0.0-0]] | ||
| Main-only | | Main-only | ||
| (u32 contexthandle, u32 certcontexthandle) | | RemoveCrlFromCrlStore(u32 contexthandle, u32 certcontexthandle) This removes the specified cert from the context. | ||
|- | |- | ||
| 0x000D0084 | | 0x000D0084 | ||
| Line 136: | Line 136: | ||
| [[1.0.0-0]] | | [[1.0.0-0]] | ||
| Context-only | | Context-only | ||
| (u32 [[SSLC:CreateContext|contexthandle]], u32 handle) This writes a context handle created by command 0x00080000 into the session context. | | SetCrlStore(u32 [[SSLC:CreateContext|contexthandle]], u32 handle) This writes a context handle created by command 0x00080000 into the session context. | ||
|- | |- | ||
| 0x001B0080 | | 0x001B0080 | ||
| Line 151: | Line 151: | ||
| [[1.0.0-0]] | | [[1.0.0-0]] | ||
| Context-only | | Context-only | ||
| (u32 [[SSLC:CreateContext|contexthandle]]) Writes an output u32 from the context state to cmdreply[2]. | | GetCertVerificationErrors(u32 [[SSLC:CreateContext|contexthandle]]) Writes an output u32 from the context state to cmdreply[2]. | ||
|- | |- | ||
| 0x001E0040 | | 0x001E0040 | ||
| Line 166: | Line 166: | ||
| [[1.0.0-0]] | | [[1.0.0-0]] | ||
| Context-only | | Context-only | ||
| ([[SSLC:CreateContext|contexthandle]], u32 size, ((Size<<4) <nowiki>|</nowiki> 10), inbufptr) | | AddEVPolicyID([[SSLC:CreateContext|contexthandle]], u32 size, ((Size<<4) <nowiki>|</nowiki> 10), inbufptr) The input buffer is handled as a string. | ||
|} | |} | ||
| Line 194: | Line 194: | ||
{| class="wikitable" border="1" | {| class="wikitable" border="1" | ||
|- | |- | ||
! | ! Flag (BIT) | ||
! Description | ! Description | ||
|- | |- | ||
| | | 0x000 (??) | ||
| | | Don't verify certificate at all | ||
|- | |- | ||
| | | 0x001 (00) | ||
| | | Verify Common Name (CN) | ||
|- | |- | ||
| 11 | | 0x002 (01) | ||
| | | Verify RootCA | ||
|- | |||
| 0x004 (02) | |||
| Verify date | |||
|- | |||
| 0x008 (03) | |||
| Verify cert chain | |||
|- | |||
| 0x010 (04) | |||
| Verify "subject alt name" (required for multi-address certificates) | |||
|- | |||
| 0x020 (05) | |||
| Verify cert EV | |||
|- | |||
| 0x200 (09) | |||
| Makes certification validation always succeed | |||
|- | |||
| 0x800 (11) | |||
| Disable use of TLSv1.1 (hence fallback to TLSv1.0) | |||
|} | |} | ||
| Line 214: | Line 232: | ||
! Error code | ! Error code | ||
! Description | ! Description | ||
|- | |||
| 0xD8A0B801 | |||
| Generic error, it means "this is not an SSL connection" | |||
|- | |||
| 0xD840B802 | |||
| EWOULDBLOCK while trying to read | |||
|- | |||
| 0xD840B803 | |||
| EWOULDBLOCK while trying to write | |||
|- | |||
| 0xD840B807 | |||
| EWOULDBLOCK while calling sslcStartConnection() | |||
|- | |||
| 0xD8A0B805 | |||
| Syscall error, usually means there's no more data to be read because connection is closed | |||
|- | |||
| 0xD8A0B806 | |||
| End-of-stream reached, there is no more data to be read | |||
|- | |- | ||
| 0xD8A0B814 | | 0xD8A0B814 | ||