HP UX Security Products and Features Software manual Appendix E 109

Page 109

Trouble Shooting HP CDSA

CDSA API Errors

CSSM_CSP_INVALID_DATA	1035
CSSM_CSP_INVALID_DATA_POINTER	1036
CSSM_CSP_INVALID_DATA_COUNT	1037
CSSM_CSP_INVALID_KEY	1038
CSSM_CSP_INVALID_KEY_POINTER	1039
CSSM_CSP_INVALID_KEY_LENGTH	1040
CSSM_CSP_INVALID_CRYPTO_DATA	1041
CSSM_CSP_INVALID_CRYPTO_DATA_POINTER	1042
CSSM_CSP_INVALID_SIGNATURE	1043
CSSM_CSP_INVALID_DEVICE_ID	1044
CSSM_CSP_INVALID_DIGEST	1045
CSSM_CSP_INVALID_ALGORITHM	1060
CSSM_CSP_INVALID_MODE	1061
CSSM_CSP_INVALID_PADDING	1062
CSSM_CSP_INVALID_IV_SIZE	1063
CSSM_CSP_INVALID_INIT_VECTOR	1064
CSSM_CSP_INVALID_KEY_SIZE_IN_BITS	1065
CSSM_CSP_INVALID_ROUNDS	1066
CSSM_CSP_INVALID_EFFECTIVE_BITS	1067
CSSM_CSP_INVALID_PARAM_LENGTH	1068
CSSM_CSP_INVALID_KEYCLASS	1069
CSSM_CSP_INVALID_KEYTYPE	1070
CSSM_CSP_INVALID_KEYUSAGE	1071
CSSM_CSP_INVALID_KEYATTR	1072
CSSM_CSP_INVALID_ITERATION_COUNT	1073
CSSM_CSP_INVALID_PASSTHROUGH_ID	1074
CSSM_CSP_INVALID_PASSTHROUGH_PARAMS	1075
CSSM_CSP_INVALID_SALT	1076
CSSM_CSP_INVALID_RANDOM	1077
CSSM_CSP_INVALID_SEED	1078

Appendix E

109

Image 109

Contents Contents Migrating to Cdsa ZIP format Private Key File Sample Install Program Generating the Credential FileChapter Common Data Security Architecture Cdsa White PaperGlossary of Cdsa Terms and Acronyms Glossary of Cdsa Terms and AcronymsGlossary of Cdsa Terms and Acronyms RC2 Glossary of Cdsa Terms and Acronyms Glossary of Cdsa Terms and Acronyms Glossary of Cdsa Terms and Acronyms Glossary of Cdsa Terms and Acronyms What Is CDSA? What Is CDSA?HP’s Implementation of Cdsa HP-UX Cdsa Product OverviewWhat Is CDSA? Cdsa Components on HP-UX Cdsa Components in HP-UXWhat Is CDSA? Example of Cdsa APIs Used for Applications vs. Shared Cdsa in the Context of Other Security ApplicationsLibraries Applications CDSA, shown relative to higher-level protocols and userHP’s Paradigm Shift Common Security Services Manager Cssm API Common Security Services Manager CssmCssm Module Information Files Cssmnotlongfilenamesys Cryptography Service Provider CSP API Cryptography Service Provider CSP APIPublic/Private Key Algorithms Dual Asymmetric Key AlgorithmSymmetric Key Algorithm RC2 or RC4 Authenticating a Digital SignatureCryptography Service Provider CSP API Hash Interaction between CSP and Applications CSP Operations Cryptography Service Provider CSP API Cryptography Service Provider CSP API Supported Functions and Algorithms Extensibility FunctionsCssmalgidcdmf Cssmalgiddsa Cssmalgiddh Purpose Pass-Through ID What is a Certiﬁcate? Certiﬁcate Library Services CL APICertiﬁcate Library Services CL API Outline of a Generic CertiﬁcateCertiﬁcate Revocation List CRL and Operations Interaction between Certiﬁcate Library and Application Interaction between Cssm and Certiﬁcate Library Interface Operations on CertiﬁcatesCertiﬁcate Library Interface Certiﬁcate Library Services CL API Certiﬁcate Library Services CL API Certiﬁcate Library Services CL API INTELX509V3PASSTHROUGHCREATEENCODEDNAME INTELX509V3PASSTHROUGHENCODENAME INTELX509V3PASSTHROUGHENCODEALGID INTELX509V3PASSTHROUGHREADCERTFROMFILE INTELX509V3PASSTHROUGHENCODEREVOKEDCERTLIST INTELX509V3PASSTHROUGHFINDSUPPORTINGCSP INTELX509V3PASSTHROUGHCSSMKEYTOSPKI Role of Add-In Modules in the Cdsa Framework Introduction to Add-in ModulesIntroduction to Add-in Modules Global Unique Identiﬁer Guid Design Criteria for Add-In ModulesInitializer Add-In Module Install Program Code to Register Services with CssmTo Install an Add-In Library How to Create a Cdsa Add-In Module for HP-UX How to Create a Cdsa Add-In Module forLd -b -o libmylib.1 +I MyAddInInit Implementing Integrity Checking in Add-In Modules Programming Self-Check Functions into the Initializer How to Create a Cdsa Add-In Module for HP-UX How to Create a Cdsa Add-In Module for HP-UX How to Create a Cdsa Add-In Module for HP-UX How to Create a Cdsa Add-In Module for HP-UX Typeprocedure How to Create a Cdsa Add-In Module for HP-UX Or specify the following for CL/TP/DL add-ins With a Cssm capable of integrity checking Credential File Validating the CSP CredentialsCertiﬁcate Chain Validating the CSP CredentialsVerifying a Certiﬁcate Chain Validation SequenceVerifying the signature on the .SF ﬁle Integrity Check prior to LoadingSHA-1 11 Verifying the validity of the CSP library Self CheckIn-Memory vs. Static Checking Bilateral AuthenticationFurther References Concluding RemarksConcluding Remarks Concluding Remarks Appendix a Sample Install ProgramAppendix a Appendix a Cssmapimemoryfuncs Appendix a Else if argc != Destpath Sample Install Program Appendix a Sample Install Program Appendix B Generating the Credential FileHP Signing Policy for CSP Add-In Vendors for Cdsa Version HP Signing Policy for CSP Add-In Vendors for Cdsa VersionAppendix C Sample Add-in Module CodeAppendix C Appendix C Sample Add-in Module Code Appendix C Cssmreturn = Null Sample Add-in Module Code == Cssmfail Cssmmodulefuncs Appendix C Sample Add-in Module Code Appendix C Sample Add-in Module Code Data 100 Appendix C 101 102 Appendix C 103 104 Appendix D 105 Functions Needed for Add-in Module Integrity106 Appendix E 107 Trouble Shooting HP CdsaCdsa API Errors Cdsa API Errors108 Appendix E 109 110 Appendix E 111 112 Appendix E 113 114 Appendix E 115 116 Appendix E 117 Cdsa Start Up Errors when calling CSSMModuleAttach Cdsa Start Up Errors when calling CSSMModuleAttach118 Appendix E 119 Debugging Core Dumps Using DDE to Debug Cdsa Applications120 Appendix F 121 Migrating to Cdsa122 Appendix F 123 124 DL data structuresAppendix G 125 ZIP format126 Appendix G 127 128 Appendix H 129 Private Key File130 Private Key File Contention

Related manuals

Manual 62 pages 27.73 Kb