SSL function return codes

System SSL functions return the value 0 (GSK_OK) if no error is detected. Otherwise, one of the return codes listed in the gskssl.h include file is returned.

1
Handle is not valid.
3
An internal error has occurred.
4
Insufficient storage is available
5
Handle is in the incorrect state.
6
Key label is not found.
7
No certificates available.
8
Certificate validation error.
9
Cryptographic processing error.
10
ASN processing error.
11
LDAP processing error.
12
An unexpected error has occurred.
13
Size specified for supplied structure is too small
14
Required gsk_all_cipher_suites structure not supplied
102
Error detected while reading certificate database
103
Incorrect key database record format.
106
Incorrect key database password.
109
No certification authority certificates.
201
No key database password supplied.
202
Error detected while opening the certificate database.
203
Unable to generate temporary key pair
204
Key database password is expired.
302
Connection is active.
401
Certificate is expired or is not valid yet.
402
No SSL cipher specifications.
403
No certificate received from partner.
405
Certificate format is not supported.
406
Error while reading or writing data.
407
Key label does not exist.
408
Key database password is not correct.
410
SSL message format is incorrect.
411
Message authentication code is incorrect.
412
SSL protocol or certificate type is not supported.
413
Certificate signature is incorrect.
414
Certificate is not valid.
415
SSL protocol violation.
416
Permission denied.
417
Self-signed certificate cannot be validated.
420
Socket closed by remote partner.
421
SSL V2 cipher is not valid.
422
SSL V3 cipher is not valid.
427
LDAP is not available.
428
Key entry does not contain a private key.
429
SSL V2 header is not valid.
431
Certificate is revoked.
432
Session renegotiation is not allowed.
433
Key exceeds allowable export size.
434
Certificate key is not compatible with cipher suite.
435
Certification authority is unknown.
436
Certificate revocation list cannot be found.
437
Connection closed.
438
Internal error reported by remote partner.
439
Unknown alert received from remote partner.
440
Incorrect key usage.
441
Client certificate not received during TLS handshake
442
Multiple certificates exist for label.
443
Multiple keys are marked as the default.
444
Error encountered generating random bytes.
445
Key database is not a FIPS mode database.
446
TLS extension mismatch has been encountered.
447
Required TLS extension has been rejected.
448
Requested server name is not recognized.
449
Unsupported fragment length was received.
450
TLS extension length field is not valid.
451
Elliptic Curve is not supported.
452
EC Parameters not supplied
453
Signature not supplied
454
Elliptic Curve parameters are not valid
455
ICSF services are not available
456
ICSF callable service returned an error
457
ICSF PKCS #11 not operating in FIPS mode
458
The SSL V3 expanded cipher is not valid
459
Elliptic Curve is not supported in FIPS mode.
460
Required TLS Renegotiation Indication not received
461
EC domain parameter format is not supported.
462
Elliptic Curve point format is not supported.
463
Cryptographic hardware does not support service or algorithm
464
Elliptic curve list is not valid.
465
ICSF PKCS #11 services are disabled
466
Signature algorithm pairs list is not valid.
467
Signature algorithm not in signature algorithm pairs list.
468
Certificate key algorithm not in signature algorithm pairs list.
469
Incorrect key attribute.
470
Certificate does not meet Suite B requirements.
471
Secure private key cannot be used with a fixed ECDH key exchange.
472
Clear key support not available due to ICSF key policy.
473
OCSP responder requires a signed request
474
HTTP response is not valid
475
OCSP response is not valid
476
Session ID entry does not exist
477
Client SID does not match server SID
478
Client session cache attributes do not agree
479
SID VALUE is not valid
480
PEER ID is not valid
481
OCSP request failed with internal responder error
482
OCSP response is expired
483
Error creating OCSP request
484
Maximum response size exceeded
485
HTTP server communication error
486
Nonce in OCSP response does not match value in OCSP request
487
OCSP response not received within configured time limit
488
Revocation information is not yet valid
489
HTTP server host name is not valid
490
PKCS #12 file content not valid
491
Required basic constraints certificate extension is missing
492
Maximum number of locations allowed to be contacted during certificate validation has been reached
493
HTTP response not received within configured time limit
494
LDAP response not received within configured time limit
495
OCSP request failed with try later error
496
OCSP response signature algorithm not in signature algorithm pairs list.
497
OCSP request signature algorithm pair is not valid.
498
OCSP response does not contain requested certificate status.
499
OCSP response contains duplicate certificate statuses.
500
Triple DES key parts are not unique
501
Buffer size is not valid.
502
Socket request would block.
503
Socket read request would block.
504
Socket write request would block.
505
Record overflow.
507
Certificate version does not meet the minimum required version level
508
Key size is smaller than the minimum size allowed.
509
Key label list is not valid
510
No acceptable key labels found
511
OCSP stapling requires OCSP support to be enabled.
512
Certificate status response is not valid.
513
An inappropriate protocol fallback is detected
514
Required TLS extension is missing from remote partner
515
Key share list is not valid.
516
No key share groups in common with partner
517
No matches between elliptic curve and key share lists
518
Alert received from remote partner is allowed by protocol but not expected by System SSL
519
Required ciphers have not been specified
520
4-character cipher specifications are required
521
Client has detected that the server has attempted an unexpected protocol fallback
522
Signature algorithm used by the remote partner for a secure connection is not correct.
523
Key share list cannot contain more groups than the elliptic curve list
524
Remote partner indicates a required TLS extension is missing
525
Key share list received from remote partner is not correct
526
Missing required certificate request signature algorithms
527
Local certificate version does not meet the minimum required version level
528
Local certificate key size is smaller than the minimum size allowed
529
Certificate key algorithm is not valid
530
TLS handshake message from the remote partner included an extension that is not allowed or supported
531
Legacy compression field must be a single byte set to 0
532
Session ID received from remote partner is not correct
533
Remote partner indicates unsupported certificate
534
Remote partner indicates an incorrect PSK identity value
535
PSK exchange modes extension from the remote partner does not contain supported value
536
TLS session has expired
537
Attempt to send session ticket failed due to incorrect resumption attributes
538
Remote partner used an incorrect cipher on a resumption attempt
539
Input buffer contents not valid
540
Protocol is not supported in FIPS mode
541
Remote partner indicates sent certificate is not valid.
542
Remote partner indicates a handshake failure due to incompatible security parameters.
543
Remote partner indicates sent TLS handshake message is not valid.
544
Missing required TLS extended master secret extension from remote partner
545
Extended master secret extension mismatch detected on cached TLS handshake attempt
601
Protocol is not SSL V3, TLS V1.0, TLS V1.1, TLS V1.2, or TLS V1.3.
602
Function identifier is not valid.
603
Specified function enumerator is not valid.
604
Send sequence number is near maximum value
605
Specified function not supported by protocol version
701
Attribute identifier is not valid.
702
Attribute length is not valid.
703
Enumeration is not valid.
704
Session identifier cache callback is not valid.
705
Numeric value is not valid.
706
Attribute parameter is not valid.
707
TLS extension type is not valid.
708
Supplied TLS extension data is not valid.

Parent topic: Messages and codes