HP UX Security Products and Features Software manual Cdsa API Errors, 108

Page 108

Trouble Shooting HP CDSA

CDSA API Errors

CDSA API Errors

When CDSA functions do not complete their designated operations successfully, typically, 0, NULL, CSSM_FAIL, or CSSM_FALSE values may be returned to calling programs. In order to gain more information regarding the failure, the CDSA function CSSM_GetError() may be called to retrieve the error code of the last CDSA error detected by the system. The error codes are deﬁned in the CDSA include ﬁle cssmerr.h (located in /usr/include/cdsa). A brief error description and corresponding error code are reproduced below for convenience.

CSP Error Description

CSP Error Code

CSSM_CSP_UNKNOWN_ERROR1001

CSSM_CSP_REGISTER_ERROR1002

CSSM_CSP_VERSION_ERROR1003

CSSM_CSP_CONVERSION_ERROR1004

CSSM_CSP_NO_TOKENINFO1005

CSSM_CSP_INTERNAL_ERROR1006

CSSM_CSP_SERIAL_REQUIRED1007

CSSM_CSP_NOT_IMPLEMENTED1008

CSSM_CSP_GET_APIMEMFUNC_ERROR1009

CSSM_CSP_MEMORY_ERROR1020

CSSM_CSP_NOT_ENOUGH_BUFFER1021

CSSM_CSP_ERR_OUTBUF_LENGTH1022

CSSM_CSP_NO_OUTBUF1023

CSSM_CSP_ERR_INBUF_LENGTH1024

CSSM_CSP_ERR_KEYBUF_LENGTH1025

CSSM_CSP_NO_SLOT1026

CSSM_CSP_INVALID_CSP_HANDLE1030

CSSM_CSP_INVALID_POINTER1031

CSSM_CSP_INVALID_CONTEXT1032

CSSM_CSP_INVALID_CONTEXT_HANDLE1033

CSSM_CSP_INVALID_CONTEXT_POINTER1034

108	Appendix E

Image 108

Contents Contents Sample Install Program Generating the Credential File Migrating to Cdsa ZIP format Private Key FileCommon Data Security Architecture Cdsa White Paper ChapterGlossary of Cdsa Terms and Acronyms Glossary of Cdsa Terms and AcronymsGlossary of Cdsa Terms and Acronyms RC2 Glossary of Cdsa Terms and Acronyms Glossary of Cdsa Terms and Acronyms Glossary of Cdsa Terms and Acronyms Glossary of Cdsa Terms and Acronyms What Is CDSA? What Is CDSA?HP’s Implementation of Cdsa HP-UX Cdsa Product OverviewWhat Is CDSA? Cdsa Components in HP-UX Cdsa Components on HP-UXWhat Is CDSA? Cdsa in the Context of Other Security Applications Example of Cdsa APIs Used for Applications vs. SharedLibraries CDSA, shown relative to higher-level protocols and user ApplicationsHP’s Paradigm Shift Common Security Services Manager Cssm Common Security Services Manager Cssm APICssm Module Information Files Cssmnotlongfilenamesys Cryptography Service Provider CSP API Cryptography Service Provider CSP APIPublic/Private Key Algorithms Dual Asymmetric Key AlgorithmSymmetric Key Algorithm Authenticating a Digital Signature RC2 or RC4Cryptography Service Provider CSP API Hash Interaction between CSP and Applications CSP Operations Cryptography Service Provider CSP API Cryptography Service Provider CSP API Extensibility Functions Supported Functions and AlgorithmsCssmalgidcdmf Cssmalgiddsa Cssmalgiddh Purpose Pass-Through ID Certiﬁcate Library Services CL API What is a Certiﬁcate?Certiﬁcate Library Services CL API Outline of a Generic CertiﬁcateCertiﬁcate Revocation List CRL and Operations Interaction between Certiﬁcate Library and Application Operations on Certiﬁcates Interaction between Cssm and Certiﬁcate Library InterfaceCertiﬁcate Library Interface Certiﬁcate Library Services CL API Certiﬁcate Library Services CL API Certiﬁcate Library Services CL API INTELX509V3PASSTHROUGHCREATEENCODEDNAME INTELX509V3PASSTHROUGHENCODENAME INTELX509V3PASSTHROUGHENCODEALGID INTELX509V3PASSTHROUGHREADCERTFROMFILE INTELX509V3PASSTHROUGHENCODEREVOKEDCERTLIST INTELX509V3PASSTHROUGHFINDSUPPORTINGCSP INTELX509V3PASSTHROUGHCSSMKEYTOSPKI Introduction to Add-in Modules Role of Add-In Modules in the Cdsa FrameworkIntroduction to Add-in Modules Design Criteria for Add-In Modules Global Unique Identiﬁer GuidInitializer Code to Register Services with Cssm Add-In Module Install ProgramTo Install an Add-In Library How to Create a Cdsa Add-In Module for How to Create a Cdsa Add-In Module for HP-UXLd -b -o libmylib.1 +I MyAddInInit Implementing Integrity Checking in Add-In Modules Programming Self-Check Functions into the Initializer How to Create a Cdsa Add-In Module for HP-UX How to Create a Cdsa Add-In Module for HP-UX How to Create a Cdsa Add-In Module for HP-UX How to Create a Cdsa Add-In Module for HP-UX Typeprocedure How to Create a Cdsa Add-In Module for HP-UX Or specify the following for CL/TP/DL add-ins With a Cssm capable of integrity checking Validating the CSP Credentials Credential FileCertiﬁcate Chain Validating the CSP CredentialsValidation Sequence Verifying a Certiﬁcate ChainIntegrity Check prior to Loading Verifying the signature on the .SF ﬁleSHA-1 Self Check 11 Verifying the validity of the CSP libraryBilateral Authentication In-Memory vs. Static CheckingConcluding Remarks Further ReferencesConcluding Remarks Concluding Remarks Sample Install Program Appendix aAppendix a Appendix a Cssmapimemoryfuncs Appendix a Else if argc != Destpath Sample Install Program Appendix a Sample Install Program Generating the Credential File Appendix BHP Signing Policy for CSP Add-In Vendors for Cdsa Version HP Signing Policy for CSP Add-In Vendors for Cdsa VersionSample Add-in Module Code Appendix CAppendix C Appendix C Sample Add-in Module Code Appendix C Cssmreturn = Null Sample Add-in Module Code == Cssmfail Cssmmodulefuncs Appendix C Sample Add-in Module Code Appendix C Sample Add-in Module Code Data 100 Appendix C 101 102 Appendix C 103 104 Functions Needed for Add-in Module Integrity Appendix D 105106 Trouble Shooting HP Cdsa Appendix E 107Cdsa API Errors Cdsa API Errors108 Appendix E 109 110 Appendix E 111 112 Appendix E 113 114 Appendix E 115 116 Appendix E 117 Cdsa Start Up Errors when calling CSSMModuleAttach Cdsa Start Up Errors when calling CSSMModuleAttach118 Appendix E 119 Using DDE to Debug Cdsa Applications Debugging Core Dumps120 Migrating to Cdsa Appendix F 121122 Appendix F 123 DL data structures 124ZIP format Appendix G 125126 Appendix G 127 128 Private Key File Appendix H 129Private Key File Contention 130

Related manuals

Manual 62 pages 27.73 Kb