Appendix A Log Descriptions

 

Table 283 PKI Logs (continued)

 

LOG MESSAGE

DESCRIPTION

 

 

Export X509

The device exported a x509 format certificate from Trusted

 

 

certificate "%s" from

Certificates. %s is the certificate request name.

 

 

"Trusted Certificate"

 

 

 

successfully

 

 

 

 

 

 

 

 

Export X509

The device was not able to export a x509 format certificate

 

 

certificate "%s" from

from My Certificates. %s is the certificate request name.

 

 

"My Certificate"

 

 

 

failed

 

 

 

 

 

 

 

 

 

Import PKCS#12

An administrator used the wrong password when trying to

 

 

certificate "%s" with

import a PKCS#12 format certificate. %s is the certificate

 

 

incorrect password

name.

 

 

 

 

 

 

 

Cert trusted: %s

%s is the subject.

 

 

 

 

 

 

 

Due to %d, cert not

%d is an error number (see Table 284 on page 949), %s is

 

 

trusted: %s

the certificate subject.

 

 

 

 

 

 

 

 

 

 

 

 

CODE

DESCRIPTION

 

 

 

1

Algorithm mismatch between the certificate and the search constraints.

 

 

 

 

 

 

2

Key usage mismatch between the certificate and the search constraints.

 

 

 

 

 

 

3

Certificate was not valid in the time interval.

 

 

 

 

 

 

 

4

(Not used)

 

 

 

 

 

 

 

5

Certificate is not valid.

 

 

 

 

 

 

6

Certificate signature was not verified correctly.

 

 

 

 

 

 

7

Certificate was revoked by a CRL.

 

 

 

 

 

 

8

Certificate was not added to the cache.

 

 

 

 

 

 

9

Certificate decoding failed.

 

 

 

 

 

 

10

Certificate was not found (anywhere).

 

 

 

 

 

 

11

Certificate chain looped (did not find trusted root).

 

 

 

 

 

 

12

Certificate contains critical extension that was not handled.

 

 

 

 

 

 

13

Certificate issuer was not valid (CA specific information missing).

 

 

 

 

 

 

 

14

(Not used)

 

 

 

 

 

 

 

 

15

CRL is too old.

 

 

 

 

 

 

 

 

16

CRL is not valid.

 

 

 

 

 

 

 

17

CRL signature was not verified correctly.

 

 

 

 

 

 

18

CRL was not found (anywhere).

 

 

 

 

 

 

19

CRL was not added to the cache.

 

 

 

 

 

 

20

CRL decoding failed.

 

 

 

 

 

 

21

CRL is not currently valid, but in the future.

 

 

 

 

 

 

22

CRL contains duplicate serial numbers.

 

 

 

 

 

 

23

Time interval is not continuous.

 

 

 

 

 

 

24

Time information not available.

 

 

 

 

 

 

 

949

ZyWALL USG 2000 User’s Guide