HP UX Security Products and Features Software manual 110

Page 110

Trouble Shooting HP CDSA

CDSA API Errors

CSSM_CSP_INVALID_ALG_PARAMS1079

CSSM_CSP_INVALID_LABEL1080

CSSM_CSP_INVALID_DATE1081

CSSM_CSP_INVALID_SUBJECT_KEY1082

CSSM_CSP_INVALID_KEYUSAGE_MASK1083

CSSM_CSP_INVALID_KEYATTR_MASK1084

CSSM_CSP_PASSPHRASE_INCORRECT1100

CSSM_CSP_PASSPHRASE_SAME1101

CSSM_CSP_PASSPHRASE_LENGTH_ERROR1102

CSSM_CSP_PASSPHRASE_INVALID1103

CSSM_CSP_PASSPHRASE_VERIFY_FAILED1104

CSSM_CSP_INVALID_CONTEXT_ATTRIBUTE1120

CSSM_CSP_INVALID_ATTR_KEY1121

CSSM_CSP_INVALID_ATTR_INIT_VECTOR1122

CSSM_CSP_INVALID_ATTR_SALT1123

CSSM_CSP_INVALID_ATTR_PADDING1124

CSSM_CSP_INVALID_ATTR_RANDOM1125

CSSM_CSP_INVALID_ATTR_SEED1126

CSSM_CSP_INVALID_ATTR_PASSPHRASE1127

CSSM_CSP_INVALID_ATTR_KEY_LENGTH1128

CSSM_CSP_INVALID_ATTR_OUTPUT_SIZE1129

CSSM_CSP_INVALID_ATTR_ROUNDS1130

CSSM_CSP_INVALID_ATTR_ALG_PARAMS1131

CSSM_CSP_INVALID_ATTR_MODE1132

CSSM_CSP_INVALID_ATTR_START_DATE1133

CSSM_CSP_INVALID_ATTR_END_DATE1134

CSSM_CSP_INVALID_ATTR_INTERATION_COUNT 1135

CSSM_CSP_INVALID_ATTR_KEY_TYPE1136

CSSM_CSP_INPUT_LENGTH_OVERSIZE1150

CSSM_CSP_INPUT_LENGTH_ERROR1151

110	Appendix E

Image 110

Contents Contents Sample Install Program Generating the Credential File Migrating to Cdsa ZIP format Private Key FileCommon Data Security Architecture Cdsa White Paper ChapterGlossary of Cdsa Terms and Acronyms Glossary of Cdsa Terms and AcronymsGlossary of Cdsa Terms and Acronyms RC2 Glossary of Cdsa Terms and Acronyms Glossary of Cdsa Terms and Acronyms Glossary of Cdsa Terms and Acronyms Glossary of Cdsa Terms and Acronyms HP’s Implementation of Cdsa What Is CDSA?What Is CDSA? HP-UX Cdsa Product OverviewWhat Is CDSA? Cdsa Components in HP-UX Cdsa Components on HP-UXWhat Is CDSA? Libraries Cdsa in the Context of Other Security ApplicationsExample of Cdsa APIs Used for Applications vs. Shared CDSA, shown relative to higher-level protocols and user ApplicationsHP’s Paradigm Shift Common Security Services Manager Cssm Common Security Services Manager Cssm APICssm Module Information Files Cssmnotlongfilenamesys Public/Private Key Algorithms Cryptography Service Provider CSP APICryptography Service Provider CSP API Dual Asymmetric Key AlgorithmSymmetric Key Algorithm Authenticating a Digital Signature RC2 or RC4Cryptography Service Provider CSP API Hash Interaction between CSP and Applications CSP Operations Cryptography Service Provider CSP API Cryptography Service Provider CSP API Extensibility Functions Supported Functions and AlgorithmsCssmalgidcdmf Cssmalgiddsa Cssmalgiddh Purpose Pass-Through ID Certiﬁcate Library Services CL API Certiﬁcate Library Services CL APIWhat is a Certiﬁcate? Outline of a Generic CertiﬁcateCertiﬁcate Revocation List CRL and Operations Interaction between Certiﬁcate Library and Application Certiﬁcate Library Interface Operations on CertiﬁcatesInteraction between Cssm and Certiﬁcate Library Interface Certiﬁcate Library Services CL API Certiﬁcate Library Services CL API Certiﬁcate Library Services CL API INTELX509V3PASSTHROUGHCREATEENCODEDNAME INTELX509V3PASSTHROUGHENCODENAME INTELX509V3PASSTHROUGHENCODEALGID INTELX509V3PASSTHROUGHREADCERTFROMFILE INTELX509V3PASSTHROUGHENCODEREVOKEDCERTLIST INTELX509V3PASSTHROUGHFINDSUPPORTINGCSP INTELX509V3PASSTHROUGHCSSMKEYTOSPKI Introduction to Add-in Modules Introduction to Add-in ModulesRole of Add-In Modules in the Cdsa Framework Design Criteria for Add-In Modules Global Unique Identiﬁer GuidInitializer Code to Register Services with Cssm Add-In Module Install ProgramTo Install an Add-In Library How to Create a Cdsa Add-In Module for How to Create a Cdsa Add-In Module for HP-UXLd -b -o libmylib.1 +I MyAddInInit Implementing Integrity Checking in Add-In Modules Programming Self-Check Functions into the Initializer How to Create a Cdsa Add-In Module for HP-UX How to Create a Cdsa Add-In Module for HP-UX How to Create a Cdsa Add-In Module for HP-UX How to Create a Cdsa Add-In Module for HP-UX Typeprocedure How to Create a Cdsa Add-In Module for HP-UX Or specify the following for CL/TP/DL add-ins With a Cssm capable of integrity checking Certiﬁcate Chain Validating the CSP CredentialsCredential File Validating the CSP CredentialsValidation Sequence Verifying a Certiﬁcate ChainIntegrity Check prior to Loading Verifying the signature on the .SF ﬁleSHA-1 Self Check 11 Verifying the validity of the CSP libraryBilateral Authentication In-Memory vs. Static CheckingConcluding Remarks Concluding RemarksFurther References Concluding Remarks Sample Install Program Appendix aAppendix a Appendix a Cssmapimemoryfuncs Appendix a Else if argc != Destpath Sample Install Program Appendix a Sample Install Program Generating the Credential File Appendix BHP Signing Policy for CSP Add-In Vendors for Cdsa Version HP Signing Policy for CSP Add-In Vendors for Cdsa VersionSample Add-in Module Code Appendix CAppendix C Appendix C Sample Add-in Module Code Appendix C Cssmreturn = Null Sample Add-in Module Code == Cssmfail Cssmmodulefuncs Appendix C Sample Add-in Module Code Appendix C Sample Add-in Module Code Data 100 Appendix C 101 102 Appendix C 103 104 Functions Needed for Add-in Module Integrity Appendix D 105106 Trouble Shooting HP Cdsa Appendix E 107108 Cdsa API ErrorsCdsa API Errors Appendix E 109 110 Appendix E 111 112 Appendix E 113 114 Appendix E 115 116 Appendix E 117 118 Cdsa Start Up Errors when calling CSSMModuleAttachCdsa Start Up Errors when calling CSSMModuleAttach Appendix E 119 120 Using DDE to Debug Cdsa ApplicationsDebugging Core Dumps Migrating to Cdsa Appendix F 121122 Appendix F 123 DL data structures 124ZIP format Appendix G 125126 Appendix G 127 128 Private Key File Appendix H 129Private Key File Contention 130

Related manuals

Manual 62 pages 27.73 Kb