]> git.saurik.com Git - apple/security.git/blob - OSX/libsecurity_keychain/lib/SecBase.cpp
projects / apple / security.git / blob
? search:


b96333147007d555609d9388bd4662ce91d781da
[apple/security.git] / OSX / libsecurity_keychain / lib / SecBase.cpp
1 /*
2 * Copyright (c) 2003-2013 Apple Inc. All Rights Reserved.
3 *
4 * @APPLE_LICENSE_HEADER_START@
5 *
6 * This file contains Original Code and/or Modifications of Original Code
7 * as defined in and that are subject to the Apple Public Source License
8 * Version 2.0 (the 'License'). You may not use this file except in
9 * compliance with the License. Please obtain a copy of the License at
10 * http://www.opensource.apple.com/apsl/ and read it before using this
11 * file.
12 *
13 * The Original Code and all software distributed under the License are
14 * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
15 * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
16 * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
17 * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
18 * Please see the License for the specific language governing rights and
19 * limitations under the License.
20 *
21 * @APPLE_LICENSE_HEADER_END@
22 */
23
24 #include <Security/SecBase.h>
25 #include <Security/SecBasePriv.h>
26 #include <Security/SecKeychainPriv.h>
27 #include <security_utilities/threading.h>
28 #include <utilities/SecCFRelease.h>
29 #include "SecBridge.h"
30
31 static CFStringRef copyErrorMessageFromBundle(OSStatus status,CFStringRef tableName);
32
33 // caller MUST release the string, since it is gotten with "CFCopyLocalizedStringFromTableInBundle"
34 // intended use of reserved param is to pass in CFStringRef with name of the Table for lookup
35 // Will look by default in "SecErrorMessages.strings" in the resources of Security.framework.
36
37
38 CFStringRef
39 SecCopyErrorMessageString(OSStatus status, void *reserved)
40 {
41 try
42 {
43 CFStringRef result = copyErrorMessageFromBundle(status,CFSTR("SecErrorMessages"));
44 if (result == NULL)
45 result = copyErrorMessageFromBundle(status,CFSTR("SecDebugErrorMessages"));
46
47 if (result == NULL)
48 {
49 if (status >= errSecErrnoBase && status <= errSecErrnoLimit)
50 {
51 result = CFStringCreateWithFormat (NULL, NULL, CFSTR("UNIX[%s]"), strerror(status-errSecErrnoBase));
52 }
53 else
54 {
55 // no error message found, so format a faked-up error message from the status
56 result = CFStringCreateWithFormat(NULL, NULL, CFSTR("OSStatus %d"), (int)status);
57 }
58 }
59
60 return result;
61 }
62 catch (...)
63 {
64 return NULL;
65 }
66 }
67
68
69 void
70 cssmPerror(const char *how, CSSM_RETURN error)
71 {
72 try
73 {
74 const char* errMsg = cssmErrorString(error);
75 fprintf(stderr, "%s: %s\n", how ? how : "error", errMsg);
76 }
77 catch (...)
78 {
79 fprintf(stderr, "failed to print error: %lu\n", (unsigned long)error);
80 }
81 }
82
83
84 const char *
85 cssmErrorString(CSSM_RETURN error)
86 {
87 static ThreadNexus<string> lastError;
88
89 try {
90 string err;
91
92 if (error >= errSecErrnoBase && error <= errSecErrnoLimit)
93 {
94 err = string ("UNIX[") + strerror(error - errSecErrnoBase) + "]";
95 }
96 else
97 {
98 CFStringRef result = copyErrorMessageFromBundle(error,CFSTR("SecErrorMessages"));
99 if (result == NULL)
100 result = copyErrorMessageFromBundle(error,CFSTR("SecDebugErrorMessages"));
101 err = cfString(result, errSecErrorStringNotAvailable);
102 CFReleaseSafe(result);
103 }
104
105 if (err.empty())
106 {
107 char buf[200];
108 snprintf(buf, sizeof(buf), "unknown error %ld=%lx", (long) error, (long) error);
109 err = buf;
110 }
111
112 lastError() = err;
113 return lastError().c_str();
114 }
115 catch (...)
116 {
117 char buf[256];
118 snprintf (buf, sizeof (buf), "unknown error %ld=%lx", (long) error, (long) error);
119 lastError() = buf;
120 return lastError().c_str();
121 }
122 }
123
124
125 static ModuleNexus<Mutex> gBundleLock;
126
127 CFStringRef
128 copyErrorMessageFromBundle(OSStatus status,CFStringRef tableName)
129 {
130 StLock<Mutex> _lock(gBundleLock());
131
132 CFStringRef errorString = nil;
133 CFStringRef keyString = nil;
134 CFBundleRef secBundle = NULL;
135
136 // Make a bundle instance using the URLRef.
137 secBundle = CFBundleGetBundleWithIdentifier(CFSTR("com.apple.security"));
138 if (!secBundle)
139 goto xit;
140
141 // Convert status to Int32 string representation, e.g. "-25924"
142 keyString = CFStringCreateWithFormat (kCFAllocatorDefault,NULL,CFSTR("%d"),(int)status);
143 if (!keyString)
144 goto xit;
145
146 errorString = CFCopyLocalizedStringFromTableInBundle(keyString,tableName,secBundle,NULL);
147 if (CFStringCompare(errorString, keyString, 0)==kCFCompareEqualTo) // no real error message
148 {
149 if (errorString)
150 CFRelease(errorString);
151 errorString = nil;
152 }
153 xit:
154 if (keyString)
155 CFRelease(keyString);
156
157 return errorString;
158 }
159
160 /* Convert a possible CSSM type osStatus error to a more Keychain friendly OSStatus. */
161 OSStatus SecKeychainErrFromOSStatus(OSStatus osStatus)
162 {
163 if (CSSM_ERR_IS_CONVERTIBLE(osStatus))
164 {
165 switch (CSSM_ERRCODE(osStatus))
166 {
167 // CONVERTIBLE ERROR CODES.
168 case CSSM_ERRCODE_SERVICE_NOT_AVAILABLE:
169 return errSecNotAvailable;
170 case CSSM_ERRCODE_USER_CANCELED:
171 return errSecUserCanceled;
172 case CSSM_ERRCODE_OPERATION_AUTH_DENIED:
173 return errSecAuthFailed;
174 case CSSM_ERRCODE_NO_USER_INTERACTION:
175 return errSecInteractionNotAllowed;
176 case CSSM_ERRCODE_IN_DARK_WAKE:
177 return errSecInDarkWake;
178 case CSSM_ERRCODE_OS_ACCESS_DENIED:
179 return errSecWrPerm;
180 case CSSM_ERRCODE_INSUFFICIENT_CLIENT_IDENTIFICATION:
181 return errSecInsufficientClientID;
182 case CSSM_ERRCODE_DEVICE_RESET:
183 return errSecDeviceReset;
184 case CSSM_ERRCODE_DEVICE_FAILED:
185 return errSecDeviceFailed;
186 case CSSM_ERRCODE_INTERNAL_ERROR:
187 return errSecInternalError;
188 case CSSM_ERRCODE_MEMORY_ERROR:
189 return errSecMemoryError;
190 case CSSM_ERRCODE_MDS_ERROR:
191 return errSecMDSError;
192 case CSSM_ERRCODE_INVALID_POINTER:
193 case CSSM_ERRCODE_INVALID_INPUT_POINTER:
194 case CSSM_ERRCODE_INVALID_OUTPUT_POINTER:
195 case CSSM_ERRCODE_INVALID_CERTGROUP_POINTER:
196 case CSSM_ERRCODE_INVALID_CERT_POINTER:
197 case CSSM_ERRCODE_INVALID_CRL_POINTER:
198 case CSSM_ERRCODE_INVALID_FIELD_POINTER:
199 case CSSM_ERRCODE_INVALID_DB_LIST_POINTER:
200 return errSecInvalidPointer;
201 case CSSM_ERRCODE_FUNCTION_NOT_IMPLEMENTED:
202 return errSecUnimplemented;
203 case CSSM_ERRCODE_SELF_CHECK_FAILED:
204 case CSSMERR_CL_SELF_CHECK_FAILED:
205 case CSSMERR_DL_SELF_CHECK_FAILED:
206 return errSecSelfCheckFailed;
207 case CSSM_ERRCODE_FUNCTION_FAILED:
208 return errSecFunctionFailed;
209 case CSSM_ERRCODE_MODULE_MANIFEST_VERIFY_FAILED:
210 return errSecModuleManifestVerifyFailed;
211 case CSSM_ERRCODE_INVALID_GUID:
212 return errSecInvalidGUID;
213 case CSSM_ERRCODE_OBJECT_USE_AUTH_DENIED:
214 case CSSM_ERRCODE_OBJECT_MANIP_AUTH_DENIED:
215 return errAuthorizationDenied;
216 case CSSM_ERRCODE_OBJECT_ACL_NOT_SUPPORTED:
217 case CSSM_ERRCODE_OBJECT_ACL_REQUIRED:
218 case CSSM_ERRCODE_INVALID_ACL_SUBJECT_VALUE:
219 case CSSM_ERRCODE_ACL_SUBJECT_TYPE_NOT_SUPPORTED:
220 case CSSM_ERRCODE_INVALID_ACL_EDIT_MODE:
221 case CSSM_ERRCODE_INVALID_NEW_ACL_ENTRY:
222 case CSSM_ERRCODE_INVALID_NEW_ACL_OWNER:
223 return errSecInvalidACL;
224 case CSSM_ERRCODE_INVALID_ACCESS_CREDENTIALS:
225 return errSecInvalidAccessCredentials;
226 case CSSM_ERRCODE_INVALID_ACL_BASE_CERTS:
227 case CSSM_ERRCODE_ACL_BASE_CERTS_NOT_SUPPORTED:
228 return errSecInvalidCertificateGroup;
229 case CSSM_ERRCODE_INVALID_SAMPLE_VALUE:
230 return errSecInvalidSampleValue;
231 case CSSM_ERRCODE_SAMPLE_VALUE_NOT_SUPPORTED:
232 return errSecInvalidSampleValue;
233 case CSSM_ERRCODE_INVALID_ACL_CHALLENGE_CALLBACK:
234 return errSecInvalidCallback;
235 case CSSM_ERRCODE_ACL_CHALLENGE_CALLBACK_FAILED:
236 return errSecCallbackFailed;
237 case CSSM_ERRCODE_INVALID_ACL_ENTRY_TAG:
238 case CSSM_ERRCODE_UNKNOWN_TAG:
239 return errSecUnknownTag;
240 case CSSM_ERRCODE_ACL_ENTRY_TAG_NOT_FOUND:
241 return errSecTagNotFound;
242 case CSSM_ERRCODE_ACL_CHANGE_FAILED:
243 return errSecACLChangeFailed;
244 case CSSM_ERRCODE_ACL_DELETE_FAILED:
245 return errSecACLDeleteFailed;
246 case CSSM_ERRCODE_ACL_REPLACE_FAILED:
247 return errSecACLReplaceFailed;
248 case CSSM_ERRCODE_ACL_ADD_FAILED:
249 return errSecACLAddFailed;
250 case CSSM_ERRCODE_INVALID_CONTEXT_HANDLE:
251 case CSSM_ERRCODE_INVALID_DB_HANDLE:
252 case CSSM_ERRCODE_INVALID_CSP_HANDLE:
253 case CSSM_ERRCODE_INVALID_DL_HANDLE:
254 case CSSM_ERRCODE_INVALID_CL_HANDLE:
255 case CSSM_ERRCODE_INVALID_TP_HANDLE:
256 case CSSM_ERRCODE_INVALID_KR_HANDLE:
257 case CSSM_ERRCODE_INVALID_AC_HANDLE:
258 return errSecInvalidHandle;
259 case CSSM_ERRCODE_INCOMPATIBLE_VERSION:
260 return errSecIncompatibleVersion;
261 case CSSM_ERRCODE_INVALID_DATA:
262 return errSecInvalidData;
263 case CSSM_ERRCODE_CRL_ALREADY_SIGNED:
264 return errSecCRLAlreadySigned;
265 case CSSM_ERRCODE_INVALID_NUMBER_OF_FIELDS:
266 return errSecInvalidNumberOfFields;
267 case CSSM_ERRCODE_VERIFICATION_FAILURE:
268 return errSecVerificationFailure;
269 case CSSM_ERRCODE_PRIVILEGE_NOT_GRANTED:
270 return errSecPrivilegeNotGranted;
271 case CSSM_ERRCODE_INVALID_DB_LIST:
272 return errSecInvalidDBList;
273 case CSSM_ERRCODE_UNKNOWN_FORMAT:
274 return errSecUnknownFormat;
275 case CSSM_ERRCODE_INVALID_PASSTHROUGH_ID:
276 return errSecInvalidPassthroughID;
277 case CSSM_ERRCODE_INVALID_NETWORK_ADDR:
278 return errSecInvalidNetworkAddress;
279 case CSSM_ERRCODE_INVALID_CRYPTO_DATA:
280 return errSecInvalidData;
281 }
282 }
283 switch (osStatus)
284 {
285 // Some CSSM errors mapped to OSStatus-type (SnowLeopard and earlier).
286 //
287 case CSSMERR_DL_RECORD_NOT_FOUND:
288 case CSSMERR_APPLETP_CERT_NOT_FOUND_FROM_ISSUER:
289 case CSSMERR_CSP_PRIVATE_KEY_NOT_FOUND:
290 return errSecItemNotFound;
291 case CSSMERR_DL_INVALID_UNIQUE_INDEX_DATA:
292 case CSSMERR_CSP_PRIVATE_KEY_ALREADY_EXISTS:
293 case CSSMERR_CSP_KEY_LABEL_ALREADY_EXISTS:
294 return errSecDuplicateItem;
295 case CSSMERR_DL_DATABASE_CORRUPT:
296 return errSecInvalidKeychain;
297 case CSSMERR_DL_DATASTORE_DOESNOT_EXIST:
298 return errSecNoSuchKeychain;
299 case CSSMERR_DL_DATASTORE_ALREADY_EXISTS:
300 return errSecDuplicateKeychain;
301 case CSSMERR_APPLEDL_DISK_FULL:
302 return errSecDskFull;
303 case CSSMERR_DL_INVALID_OPEN_PARAMETERS:
304 case CSSMERR_APPLEDL_INVALID_OPEN_PARAMETERS:
305 case CSSMERR_APPLE_DOTMAC_REQ_SERVER_PARAM:
306 return errSecParam;
307 case CSSMERR_DL_INVALID_FIELD_NAME:
308 case CSSMERR_CSSM_INVALID_ATTRIBUTE:
309 return errSecNoSuchAttr;
310 case CSSMERR_DL_OS_ACCESS_DENIED:
311 case CSSMERR_CSP_OS_ACCESS_DENIED:
312 case CSSMERR_TP_OS_ACCESS_DENIED:
313 case CSSMERR_AC_OS_ACCESS_DENIED:
314 case CSSMERR_CL_OS_ACCESS_DENIED:
315 return errSecWrPerm;
316 case CSSMERR_CSSM_BUFFER_TOO_SMALL:
317 return errSecBufferTooSmall;
318 case CSSMERR_CSSM_FUNCTION_NOT_IMPLEMENTED:
319 case CSSMERR_CSP_FUNCTION_NOT_IMPLEMENTED:
320 case CSSMERR_TP_FUNCTION_NOT_IMPLEMENTED:
321 case CSSMERR_AC_FUNCTION_NOT_IMPLEMENTED:
322 case CSSMERR_CL_FUNCTION_NOT_IMPLEMENTED:
323 case CSSMERR_DL_FUNCTION_NOT_IMPLEMENTED:
324 case CSSMERR_APPLE_DOTMAC_REQ_SERVER_UNIMPL:
325 return errSecUnimplemented;
326 case CSSMERR_CSSM_INTERNAL_ERROR:
327 case CSSMERR_CSP_INTERNAL_ERROR:
328 case CSSMERR_TP_INTERNAL_ERROR:
329 case CSSMERR_AC_INTERNAL_ERROR:
330 case CSSMERR_CL_INTERNAL_ERROR:
331 case CSSMERR_DL_INTERNAL_ERROR:
332 return errSecInternalError;
333 case CSSMERR_CSSM_MEMORY_ERROR:
334 case CSSMERR_CSP_MEMORY_ERROR:
335 case CSSMERR_TP_MEMORY_ERROR:
336 case CSSMERR_AC_MEMORY_ERROR:
337 case CSSMERR_CSP_DEVICE_MEMORY_ERROR:
338 case CSSMERR_CL_MEMORY_ERROR:
339 case CSSMERR_DL_MEMORY_ERROR:
340 return errSecMemoryError;
341 case CSSMERR_CSSM_MDS_ERROR:
342 case CSSMERR_CSP_MDS_ERROR:
343 case CSSMERR_TP_MDS_ERROR:
344 case CSSMERR_AC_MDS_ERROR:
345 case CSSMERR_CL_MDS_ERROR:
346 case CSSMERR_DL_MDS_ERROR:
347 return errSecMDSError;
348 case CSSMERR_CSSM_INVALID_POINTER:
349 case CSSMERR_CSP_INVALID_POINTER:
350 case CSSMERR_TP_INVALID_POINTER:
351 case CSSMERR_AC_INVALID_POINTER:
352 case CSSMERR_CL_INVALID_POINTER:
353 case CSSMERR_DL_INVALID_POINTER:
354 case CSSMERR_CSSM_INVALID_INPUT_POINTER:
355 case CSSMERR_CSP_INVALID_INPUT_POINTER:
356 case CSSMERR_TP_INVALID_INPUT_POINTER:
357 case CSSMERR_AC_INVALID_INPUT_POINTER:
358 case CSSMERR_CL_INVALID_INPUT_POINTER:
359 case CSSMERR_DL_INVALID_INPUT_POINTER:
360 case CSSMERR_TP_INVALID_DB_LIST_POINTER:
361 case CSSMERR_AC_INVALID_DB_LIST_POINTER:
362 case CSSMERR_DL_INVALID_DB_LIST_POINTER:
363 case CSSMERR_TP_INVALID_CERTGROUP_POINTER:
364 case CSSMERR_TP_INVALID_CERT_POINTER:
365 case CSSMERR_TP_INVALID_CRL_POINTER:
366 case CSSMERR_TP_INVALID_FIELD_POINTER:
367 case CSSMERR_CSP_INVALID_KEY_POINTER:
368 case CSSMERR_TP_INVALID_CALLERAUTH_CONTEXT_POINTER:
369 case CSSMERR_TP_INVALID_IDENTIFIER_POINTER:
370 case CSSMERR_TP_INVALID_CRLGROUP_POINTER:
371 case CSSMERR_TP_INVALID_TUPLEGROUP_POINTER:
372 case CSSMERR_CL_INVALID_CERTGROUP_POINTER:
373 case CSSMERR_CL_INVALID_CERT_POINTER:
374 case CSSMERR_CL_INVALID_CRL_POINTER:
375 case CSSMERR_CL_INVALID_FIELD_POINTER:
376 case CSSMERR_CL_INVALID_BUNDLE_POINTER:
377 case CSSMERR_CSSM_INVALID_OUTPUT_POINTER:
378 case CSSMERR_CSP_INVALID_OUTPUT_POINTER:
379 case CSSMERR_TP_INVALID_OUTPUT_POINTER:
380 case CSSMERR_AC_INVALID_OUTPUT_POINTER:
381 case CSSMERR_CL_INVALID_OUTPUT_POINTER:
382 case CSSMERR_DL_INVALID_OUTPUT_POINTER:
383 return errSecInvalidPointer;
384 case CSSMERR_CSSM_FUNCTION_FAILED:
385 case CSSMERR_CSP_FUNCTION_FAILED:
386 case CSSMERR_TP_FUNCTION_FAILED:
387 case CSSMERR_AC_FUNCTION_FAILED:
388 case CSSMERR_CL_FUNCTION_FAILED:
389 case CSSMERR_DL_FUNCTION_FAILED:
390 return errSecFunctionFailed;
391 case CSSMERR_CSP_INVALID_DATA:
392 case CSSMERR_TP_INVALID_DATA:
393 case CSSMERR_AC_INVALID_DATA:
394 case CSSMERR_CL_INVALID_DATA:
395 case CSSMERR_CSP_INVALID_CRYPTO_DATA:
396 case CSSMERR_CSP_INVALID_DATA_COUNT:
397 case CSSMERR_TP_INVALID_ACTION_DATA:
398 return errSecInvalidData;
399 case CSSMERR_TP_INVALID_DB_LIST:
400 case CSSMERR_AC_INVALID_DB_LIST:
401 return errSecInvalidDBList;
402 case CSSMERR_CSP_INVALID_PASSTHROUGH_ID:
403 case CSSMERR_TP_INVALID_PASSTHROUGH_ID:
404 case CSSMERR_AC_INVALID_PASSTHROUGH_ID:
405 case CSSMERR_CL_INVALID_PASSTHROUGH_ID:
406 case CSSMERR_DL_INVALID_PASSTHROUGH_ID:
407 return errSecInvalidPassthroughID;
408 case CSSMERR_TP_INVALID_CSP_HANDLE:
409 case CSSMERR_TP_INVALID_CL_HANDLE:
410 case CSSMERR_TP_INVALID_DL_HANDLE:
411 case CSSMERR_AC_INVALID_TP_HANDLE:
412 case CSSMERR_AC_INVALID_DL_HANDLE:
413 case CSSMERR_DL_INVALID_DL_HANDLE:
414 case CSSMERR_AC_INVALID_CL_HANDLE:
415 case CSSMERR_DL_INVALID_CL_HANDLE:
416 case CSSMERR_DL_INVALID_CSP_HANDLE:
417 case CSSMERR_TP_INVALID_DB_HANDLE:
418 case CSSMERR_CSSM_INVALID_ADDIN_HANDLE:
419 case CSSMERR_CSSM_INVALID_CONTEXT_HANDLE:
420 case CSSMERR_CL_INVALID_CACHE_HANDLE:
421 case CSSMERR_CL_INVALID_RESULTS_HANDLE:
422 case CSSMERR_DL_INVALID_RESULTS_HANDLE:
423 case CSSMERR_TP_INVALID_KEYCACHE_HANDLE:
424 case CSSMERR_CSP_INVALID_CONTEXT_HANDLE:
425 case CSSMERR_TP_INVALID_CONTEXT_HANDLE:
426 case CSSMERR_AC_INVALID_CONTEXT_HANDLE:
427 case CSSMERR_CL_INVALID_CONTEXT_HANDLE:
428 return errSecInvalidHandle;
429 case CSSMERR_TP_CRL_ALREADY_SIGNED:
430 case CSSMERR_CL_CRL_ALREADY_SIGNED:
431 return errSecCRLAlreadySigned;
432 case CSSMERR_TP_INVALID_NUMBER_OF_FIELDS:
433 case CSSMERR_CL_INVALID_NUMBER_OF_FIELDS:
434 return errSecInvalidNumberOfFields;
435 case CSSMERR_TP_VERIFICATION_FAILURE:
436 case CSSMERR_CL_VERIFICATION_FAILURE:
437 return errSecVerificationFailure;
438 case CSSMERR_TP_INVALID_NETWORK_ADDR:
439 case CSSMERR_DL_INVALID_NETWORK_ADDR:
440 return errSecInvalidNetworkAddress;
441 case CSSMERR_TP_UNKNOWN_TAG:
442 case CSSMERR_CL_UNKNOWN_TAG:
443 case CSSMERR_CSP_INVALID_ACL_ENTRY_TAG:
444 case CSSMERR_DL_INVALID_ACL_ENTRY_TAG:
445 case CSSMERR_DL_INVALID_SELECTION_TAG:
446 return errSecUnknownTag;
447 case CSSMERR_CSP_INVALID_SIGNATURE:
448 case CSSMERR_TP_INVALID_SIGNATURE:
449 return errSecInvalidSignature;
450 case CSSMERR_CSSM_USER_CANCELED:
451 case CSSMERR_CSP_USER_CANCELED:
452 case CSSMERR_TP_USER_CANCELED:
453 case CSSMERR_AC_USER_CANCELED:
454 case CSSMERR_CL_USER_CANCELED:
455 case CSSMERR_DL_USER_CANCELED:
456 return errSecUserCanceled;
457 case CSSMERR_CSSM_NO_USER_INTERACTION:
458 case CSSMERR_CSP_NO_USER_INTERACTION:
459 case CSSMERR_TP_NO_USER_INTERACTION:
460 case CSSMERR_AC_NO_USER_INTERACTION:
461 case CSSMERR_CL_NO_USER_INTERACTION:
462 case CSSMERR_DL_NO_USER_INTERACTION:
463 return errSecInteractionNotAllowed;
464 case CSSMERR_CSSM_IN_DARK_WAKE:
465 case CSSMERR_CSP_IN_DARK_WAKE:
466 case CSSMERR_TP_IN_DARK_WAKE:
467 case CSSMERR_AC_IN_DARK_WAKE:
468 case CSSMERR_CL_IN_DARK_WAKE:
469 case CSSMERR_DL_IN_DARK_WAKE:
470 return errSecInDarkWake;
471 case CSSMERR_CSSM_SERVICE_NOT_AVAILABLE:
472 case CSSMERR_CSP_SERVICE_NOT_AVAILABLE:
473 case CSSMERR_TP_SERVICE_NOT_AVAILABLE:
474 case CSSMERR_AC_SERVICE_NOT_AVAILABLE:
475 case CSSMERR_CL_SERVICE_NOT_AVAILABLE:
476 case CSSMERR_DL_SERVICE_NOT_AVAILABLE:
477 return errSecServiceNotAvailable;
478 case CSSMERR_CSSM_INSUFFICIENT_CLIENT_IDENTIFICATION:
479 case CSSMERR_CSP_INSUFFICIENT_CLIENT_IDENTIFICATION:
480 case CSSMERR_TP_INSUFFICIENT_CLIENT_IDENTIFICATION:
481 case CSSMERR_AC_INSUFFICIENT_CLIENT_IDENTIFICATION:
482 case CSSMERR_CL_INSUFFICIENT_CLIENT_IDENTIFICATION:
483 case CSSMERR_DL_INSUFFICIENT_CLIENT_IDENTIFICATION:
484 return errSecInsufficientClientID;
485 case CSSMERR_CSSM_DEVICE_RESET:
486 case CSSMERR_CSP_DEVICE_RESET:
487 case CSSMERR_TP_DEVICE_RESET:
488 case CSSMERR_AC_DEVICE_RESET:
489 case CSSMERR_CL_DEVICE_RESET:
490 case CSSMERR_DL_DEVICE_RESET:
491 return errSecDeviceReset;
492 case CSSMERR_CSSM_DEVICE_FAILED:
493 case CSSMERR_CSP_DEVICE_FAILED:
494 case CSSMERR_TP_DEVICE_FAILED:
495 case CSSMERR_AC_DEVICE_FAILED:
496 case CSSMERR_CL_DEVICE_FAILED:
497 case CSSMERR_DL_DEVICE_FAILED:
498 return errSecDeviceFailed;
499 case CSSMERR_APPLE_DOTMAC_REQ_SERVER_AUTH:
500 case CSSMERR_CSSM_EMM_AUTHENTICATE_FAILED:
501 case CSSMERR_CSSM_ADDIN_AUTHENTICATE_FAILED:
502 case CSSMERR_CSP_OPERATION_AUTH_DENIED:
503 case CSSMERR_CSP_OBJECT_USE_AUTH_DENIED:
504 case CSSMERR_CSP_OBJECT_MANIP_AUTH_DENIED:
505 case CSSMERR_TP_AUTHENTICATION_FAILED:
506 case CSSMERR_DL_OPERATION_AUTH_DENIED:
507 case CSSMERR_DL_OBJECT_USE_AUTH_DENIED:
508 case CSSMERR_DL_OBJECT_MANIP_AUTH_DENIED:
509 return errAuthorizationDenied;
510 case CSSMERR_CSSM_SCOPE_NOT_SUPPORTED:
511 case CSSMERR_CL_SCOPE_NOT_SUPPORTED:
512 case CSSMERR_CL_INVALID_SCOPE:
513 return errSecInvalidScope;
514 case CSSMERR_TP_INVALID_NAME:
515 case CSSMERR_DL_INVALID_DB_NAME:
516 return errSecInvalidName;
517 case CSSMERR_APPLETP_BAD_CERT_FROM_ISSUER:
518 case CSSMERR_TP_INVALID_CERTIFICATE:
519 case CSSMERR_TP_INVALID_ANCHOR_CERT:
520 case CSSMERR_APPLETP_CRL_INVALID_ANCHOR_CERT:
521 case CSSMERR_APPLETP_OCSP_INVALID_ANCHOR_CERT:
522 return errSecInvalidCertificateRef;
523 case CSSMERR_CSP_ACL_ENTRY_TAG_NOT_FOUND:
524 case CSSMERR_DL_ACL_ENTRY_TAG_NOT_FOUND:
525 return errSecTagNotFound;
526 case CSSMERR_DL_UNSUPPORTED_QUERY:
527 case CSSMERR_DL_INVALID_QUERY:
528 return errSecInvalidQuery;
529 case CSSMERR_CSP_INVALID_ACL_CHALLENGE_CALLBACK:
530 case CSSMERR_TP_INVALID_CALLBACK:
531 case CSSMERR_DL_INVALID_ACL_CHALLENGE_CALLBACK:
532 return errSecInvalidCallback;
533 case CSSMERR_CSP_ACL_CHALLENGE_CALLBACK_FAILED:
534 case CSSMERR_CSP_CRYPTO_DATA_CALLBACK_FAILED:
535 case CSSMERR_DL_ACL_CHALLENGE_CALLBACK_FAILED:
536 return errSecCallbackFailed;
537 case CSSMERR_TP_INVALID_CERTGROUP:
538 case CSSMERR_TP_CERTGROUP_INCOMPLETE:
539 case CSSMERR_DL_INVALID_ACL_BASE_CERTS:
540 case CSSMERR_DL_ACL_BASE_CERTS_NOT_SUPPORTED:
541 case CSSMERR_CSP_INVALID_ACL_BASE_CERTS:
542 return errSecInvalidCertificateGroup;
543 case CSSMERR_CSP_ACL_DELETE_FAILED:
544 case CSSMERR_DL_ACL_DELETE_FAILED:
545 return errSecACLDeleteFailed;
546 case CSSMERR_CSP_ACL_REPLACE_FAILED:
547 case CSSMERR_DL_ACL_REPLACE_FAILED:
548 return errSecACLReplaceFailed;
549 case CSSMERR_CSP_ACL_ADD_FAILED:
550 case CSSMERR_DL_ACL_ADD_FAILED:
551 return errSecACLAddFailed;
552 case CSSMERR_DL_ACL_CHANGE_FAILED:
553 case CSSMERR_CSP_ACL_CHANGE_FAILED:
554 return errSecACLChangeFailed;
555 case CSSMERR_CSSM_PRIVILEGE_NOT_GRANTED:
556 case CSSMERR_CSP_PRIVILEGE_NOT_GRANTED:
557 return errSecPrivilegeNotGranted;
558 case CSSMERR_CSP_INVALID_ACCESS_CREDENTIALS:
559 case CSSMERR_DL_INVALID_ACCESS_CREDENTIALS:
560 return errSecInvalidAccessCredentials;
561 case CSSMERR_DL_INVALID_RECORD_INDEX:
562 case CSSMERR_DL_INVALID_RECORDTYPE:
563 case CSSMERR_DL_UNSUPPORTED_RECORDTYPE:
564 case CSSMERR_DL_INVALID_RECORD_UID:
565 case CSSMERR_DL_STALE_UNIQUE_RECORD:
566 return errSecInvalidRecord;
567 case CSSMERR_CSP_INVALID_KEY:
568 case CSSMERR_CSP_INVALID_KEY_REFERENCE:
569 case CSSMERR_CSP_INVALID_KEY_CLASS:
570 return errSecInvalidKeyRef;
571 case CSSMERR_CSP_OBJECT_ACL_NOT_SUPPORTED:
572 case CSSMERR_CSP_OBJECT_ACL_REQUIRED:
573 case CSSMERR_CSP_ACL_BASE_CERTS_NOT_SUPPORTED:
574 case CSSMERR_CSP_INVALID_ACL_SUBJECT_VALUE:
575 case CSSMERR_CSP_ACL_SUBJECT_TYPE_NOT_SUPPORTED:
576 case CSSMERR_DL_OBJECT_ACL_NOT_SUPPORTED:
577 case CSSMERR_DL_OBJECT_ACL_REQUIRED:
578 case CSSMERR_DL_INVALID_ACL_SUBJECT_VALUE:
579 case CSSMERR_DL_ACL_SUBJECT_TYPE_NOT_SUPPORTED:
580 case CSSMERR_DL_INVALID_NEW_ACL_ENTRY:
581 case CSSMERR_DL_INVALID_NEW_ACL_OWNER:
582 case CSSMERR_DL_INVALID_ACL_EDIT_MODE:
583 case CSSMERR_CSP_INVALID_ACL_EDIT_MODE:
584 case CSSMERR_CSP_INVALID_NEW_ACL_ENTRY:
585 case CSSMERR_CSP_INVALID_NEW_ACL_OWNER:
586 return errSecInvalidACL;
587 case CSSMERR_CSP_INVALID_SAMPLE_VALUE:
588 case CSSMERR_DL_INVALID_SAMPLE_VALUE:
589 case CSSMERR_CSP_SAMPLE_VALUE_NOT_SUPPORTED:
590 case CSSMERR_DL_SAMPLE_VALUE_NOT_SUPPORTED:
591 return errSecInvalidSampleValue;
592 case CSSMERR_TP_UNKNOWN_FORMAT:
593 case CSSMERR_CL_UNKNOWN_FORMAT:
594 return errSecUnknownFormat;
595 case CSSMERR_CSP_APPLE_ADD_APPLICATION_ACL_SUBJECT:
596 return errSecAppleAddAppACLSubject;
597 case CSSMERR_CSP_APPLE_PUBLIC_KEY_INCOMPLETE:
598 return errSecApplePublicKeyIncomplete;
599 case CSSMERR_CSP_APPLE_SIGNATURE_MISMATCH:
600 return errSecAppleSignatureMismatch;
601 case CSSMERR_CSP_APPLE_INVALID_KEY_START_DATE:
602 return errSecAppleInvalidKeyStartDate;
603 case CSSMERR_CSP_APPLE_INVALID_KEY_END_DATE:
604 return errSecAppleInvalidKeyEndDate;
605 case CSSMERR_CSPDL_APPLE_DL_CONVERSION_ERROR:
606 return errSecConversionError;
607 case CSSMERR_CSP_APPLE_SSLv2_ROLLBACK:
608 return errSecAppleSSLv2Rollback;
609 case CSSMERR_APPLEDL_QUOTA_EXCEEDED:
610 return errSecQuotaExceeded;
611 case CSSMERR_APPLEDL_FILE_TOO_BIG:
612 return errSecFileTooBig;
613 case CSSMERR_APPLEDL_INVALID_DATABASE_BLOB:
614 return errSecInvalidDatabaseBlob;
615 case CSSMERR_APPLEDL_INVALID_KEY_BLOB:
616 return errSecInvalidKeyBlob;
617 case CSSMERR_APPLEDL_INCOMPATIBLE_DATABASE_BLOB:
618 return errSecIncompatibleDatabaseBlob;
619 case CSSMERR_APPLEDL_INCOMPATIBLE_KEY_BLOB:
620 return errSecIncompatibleKeyBlob;
621 case CSSMERR_APPLETP_HOSTNAME_MISMATCH:
622 return errSecHostNameMismatch;
623 case CSSMERR_APPLETP_UNKNOWN_CRITICAL_EXTEN:
624 return errSecUnknownCriticalExtensionFlag;
625 case CSSMERR_APPLETP_NO_BASIC_CONSTRAINTS:
626 return errSecNoBasicConstraints;
627 case CSSMERR_APPLETP_INVALID_AUTHORITY_ID:
628 return errSecInvalidAuthorityKeyID;
629 case CSSMERR_APPLETP_INVALID_SUBJECT_ID:
630 return errSecInvalidSubjectKeyID;
631 case CSSMERR_APPLETP_INVALID_KEY_USAGE:
632 return errSecInvalidKeyUsageForPolicy;
633 case CSSMERR_APPLETP_INVALID_EXTENDED_KEY_USAGE:
634 return errSecInvalidExtendedKeyUsage;
635 case CSSMERR_APPLETP_INVALID_ID_LINKAGE:
636 return errSecInvalidIDLinkage;
637 case CSSMERR_APPLETP_PATH_LEN_CONSTRAINT:
638 return errSecPathLengthConstraintExceeded;
639 case CSSMERR_APPLETP_INVALID_ROOT:
640 return errSecInvalidRoot;
641 case CSSMERR_APPLETP_CRL_EXPIRED:
642 return errSecCRLExpired;
643 case CSSMERR_APPLETP_CRL_NOT_VALID_YET:
644 return errSecCRLNotValidYet;
645 case CSSMERR_APPLETP_CRL_NOT_FOUND:
646 return errSecCRLNotFound;
647 case CSSMERR_APPLETP_CRL_SERVER_DOWN:
648 return errSecCRLServerDown;
649 case CSSMERR_APPLETP_CRL_BAD_URI:
650 return errSecCRLBadURI;
651 case CSSMERR_APPLETP_UNKNOWN_CERT_EXTEN:
652 return errSecUnknownCertExtension;
653 case CSSMERR_APPLETP_UNKNOWN_CRL_EXTEN:
654 return errSecUnknownCRLExtension;
655 case CSSMERR_APPLETP_CRL_NOT_TRUSTED:
656 return errSecCRLNotTrusted;
657 case CSSMERR_APPLETP_CRL_POLICY_FAIL:
658 return errSecCRLPolicyFailed;
659 case CSSMERR_APPLETP_IDP_FAIL:
660 return errSecIDPFailure;
661 case CSSMERR_APPLETP_SMIME_EMAIL_ADDRS_NOT_FOUND:
662 return errSecSMIMEEmailAddressesNotFound;
663 case CSSMERR_APPLETP_SMIME_BAD_EXT_KEY_USE:
664 return errSecSMIMEBadExtendedKeyUsage;
665 case CSSMERR_APPLETP_SMIME_BAD_KEY_USE:
666 return errSecSMIMEBadKeyUsage;
667 case CSSMERR_APPLETP_SMIME_KEYUSAGE_NOT_CRITICAL:
668 return errSecSMIMEKeyUsageNotCritical;
669 case CSSMERR_APPLETP_SMIME_NO_EMAIL_ADDRS:
670 return errSecSMIMENoEmailAddress;
671 case CSSMERR_APPLETP_SMIME_SUBJ_ALT_NAME_NOT_CRIT:
672 return errSecSMIMESubjAltNameNotCritical;
673 case CSSMERR_APPLETP_SSL_BAD_EXT_KEY_USE:
674 return errSecSSLBadExtendedKeyUsage;
675 case CSSMERR_APPLETP_OCSP_BAD_RESPONSE:
676 return errSecOCSPBadResponse;
677 case CSSMERR_APPLETP_OCSP_BAD_REQUEST:
678 return errSecOCSPBadRequest;
679 case CSSMERR_APPLETP_OCSP_UNAVAILABLE:
680 return errSecOCSPUnavailable;
681 case CSSMERR_APPLETP_OCSP_STATUS_UNRECOGNIZED:
682 return errSecOCSPStatusUnrecognized;
683 case CSSMERR_APPLETP_INCOMPLETE_REVOCATION_CHECK:
684 return errSecIncompleteCertRevocationCheck;
685 case CSSMERR_APPLETP_NETWORK_FAILURE:
686 return errSecNetworkFailure;
687 case CSSMERR_APPLETP_OCSP_NOT_TRUSTED:
688 return errSecOCSPNotTrustedToAnchor;
689 case CSSMERR_APPLETP_OCSP_SIG_ERROR:
690 return errSecOCSPSignatureError;
691 case CSSMERR_APPLETP_OCSP_NO_SIGNER:
692 return errSecOCSPNoSigner;
693 case CSSMERR_APPLETP_OCSP_RESP_MALFORMED_REQ:
694 return errSecOCSPResponderMalformedReq;
695 case CSSMERR_APPLETP_OCSP_RESP_INTERNAL_ERR:
696 return errSecOCSPResponderInternalError;
697 case CSSMERR_APPLETP_OCSP_RESP_TRY_LATER:
698 return errSecOCSPResponderTryLater;
699 case CSSMERR_APPLETP_OCSP_RESP_SIG_REQUIRED:
700 return errSecOCSPResponderSignatureRequired;
701 case CSSMERR_APPLETP_OCSP_RESP_UNAUTHORIZED:
702 return errSecOCSPResponderUnauthorized;
703 case CSSMERR_APPLETP_OCSP_NONCE_MISMATCH:
704 return errSecOCSPResponseNonceMismatch;
705 case CSSMERR_APPLETP_CS_BAD_CERT_CHAIN_LENGTH:
706 return errSecCodeSigningBadCertChainLength;
707 case CSSMERR_APPLETP_CS_NO_BASIC_CONSTRAINTS:
708 return errSecCodeSigningNoBasicConstraints;
709 case CSSMERR_APPLETP_CS_BAD_PATH_LENGTH:
710 return errSecCodeSigningBadPathLengthConstraint;
711 case CSSMERR_APPLETP_CS_NO_EXTENDED_KEY_USAGE:
712 return errSecCodeSigningNoExtendedKeyUsage;
713 case CSSMERR_APPLETP_CODE_SIGN_DEVELOPMENT:
714 return errSecCodeSigningDevelopment;
715 case CSSMERR_APPLETP_RS_BAD_CERT_CHAIN_LENGTH:
716 return errSecResourceSignBadCertChainLength;
717 case CSSMERR_APPLETP_RS_BAD_EXTENDED_KEY_USAGE:
718 return errSecResourceSignBadExtKeyUsage;
719 case CSSMERR_APPLETP_TRUST_SETTING_DENY:
720 return errSecTrustSettingDeny;
721 case CSSMERR_APPLETP_INVALID_EMPTY_SUBJECT:
722 return errSecInvalidSubjectName;
723 case CSSMERR_APPLETP_UNKNOWN_QUAL_CERT_STATEMENT:
724 return errSecUnknownQualifiedCertStatement;
725 case CSSMERR_APPLETP_MISSING_REQUIRED_EXTENSION:
726 return errSecMissingRequiredExtension;
727 case CSSMERR_APPLETP_EXT_KEYUSAGE_NOT_CRITICAL:
728 return errSecExtendedKeyUsageNotCritical;
729 case CSSMERR_APPLE_DOTMAC_REQ_QUEUED:
730 return errSecMobileMeRequestQueued;
731 case CSSMERR_APPLE_DOTMAC_REQ_REDIRECT:
732 return errSecMobileMeRequestRedirected;
733 case CSSMERR_APPLE_DOTMAC_REQ_SERVER_ERR:
734 return errSecMobileMeServerError;
735 case CSSMERR_APPLE_DOTMAC_REQ_SERVER_NOT_AVAIL:
736 return errSecMobileMeServerNotAvailable;
737 case CSSMERR_APPLE_DOTMAC_REQ_SERVER_ALREADY_EXIST:
738 return errSecMobileMeServerAlreadyExists;
739 case CSSMERR_APPLE_DOTMAC_REQ_SERVER_SERVICE_ERROR:
740 return errSecMobileMeServerServiceErr;
741 case CSSMERR_APPLE_DOTMAC_REQ_IS_PENDING:
742 return errSecMobileMeRequestAlreadyPending;
743 case CSSMERR_APPLE_DOTMAC_NO_REQ_PENDING:
744 return errSecMobileMeNoRequestPending;
745 case CSSMERR_APPLE_DOTMAC_CSR_VERIFY_FAIL:
746 return errSecMobileMeCSRVerifyFailure;
747 case CSSMERR_APPLE_DOTMAC_FAILED_CONSISTENCY_CHECK:
748 return errSecMobileMeFailedConsistencyCheck;
749 case CSSMERR_CSSM_NOT_INITIALIZED:
750 return errSecNotInitialized;
751 case CSSMERR_CSSM_INVALID_HANDLE_USAGE:
752 return errSecInvalidHandleUsage;
753 case CSSMERR_CSSM_PVC_REFERENT_NOT_FOUND:
754 return errSecPVCReferentNotFound;
755 case CSSMERR_CSSM_FUNCTION_INTEGRITY_FAIL:
756 return errSecFunctionIntegrityFail;
757 case CSSMERR_CSSM_SELF_CHECK_FAILED:
758 case CSSMERR_CSP_SELF_CHECK_FAILED:
759 return errSecSelfCheckFailed;
760 case CSSMERR_CSSM_MODULE_MANIFEST_VERIFY_FAILED:
761 return errSecModuleManifestVerifyFailed;
762 case CSSMERR_CSSM_INVALID_GUID:
763 return errSecInvalidGUID;
764 case CSSMERR_CSSM_INCOMPATIBLE_VERSION:
765 return errSecIncompatibleVersion;
766 case CSSMERR_CSSM_PVC_ALREADY_CONFIGURED:
767 return errSecPVCAlreadyConfigured;
768 case CSSMERR_CSSM_INVALID_PVC:
769 return errSecInvalidPVC;
770 case CSSMERR_CSSM_EMM_LOAD_FAILED:
771 return errSecEMMLoadFailed;
772 case CSSMERR_CSSM_EMM_UNLOAD_FAILED:
773 return errSecEMMUnloadFailed;
774 case CSSMERR_CSSM_ADDIN_LOAD_FAILED:
775 return errSecAddinLoadFailed;
776 case CSSMERR_CSSM_INVALID_KEY_HIERARCHY:
777 return errSecInvalidKeyHierarchy;
778 case CSSMERR_CSSM_ADDIN_UNLOAD_FAILED:
779 return errSecAddinUnloadFailed;
780 case CSSMERR_CSSM_LIB_REF_NOT_FOUND:
781 return errSecLibraryReferenceNotFound;
782 case CSSMERR_CSSM_INVALID_ADDIN_FUNCTION_TABLE:
783 return errSecInvalidAddinFunctionTable;
784 case CSSMERR_CSSM_INVALID_SERVICE_MASK:
785 return errSecInvalidServiceMask;
786 case CSSMERR_CSSM_MODULE_NOT_LOADED:
787 return errSecModuleNotLoaded;
788 case CSSMERR_CSSM_INVALID_SUBSERVICEID:
789 return errSecInvalidSubServiceID;
790 case CSSMERR_CSSM_ATTRIBUTE_NOT_IN_CONTEXT:
791 return errSecAttributeNotInContext;
792 case CSSMERR_CSSM_MODULE_MANAGER_INITIALIZE_FAIL:
793 return errSecModuleManagerInitializeFailed;
794 case CSSMERR_CSSM_MODULE_MANAGER_NOT_FOUND:
795 return errSecModuleManagerNotFound;
796 case CSSMERR_CSSM_EVENT_NOTIFICATION_CALLBACK_NOT_FOUND:
797 return errSecEventNotificationCallbackNotFound;
798 case CSSMERR_CSP_INPUT_LENGTH_ERROR:
799 return errSecInputLengthError;
800 case CSSMERR_CSP_OUTPUT_LENGTH_ERROR:
801 return errSecOutputLengthError;
802 case CSSMERR_CSP_PRIVILEGE_NOT_SUPPORTED:
803 return errSecPrivilegeNotSupported;
804 case CSSMERR_CSP_DEVICE_ERROR:
805 return errSecDeviceError;
806 case CSSMERR_CSP_ATTACH_HANDLE_BUSY:
807 return errSecAttachHandleBusy;
808 case CSSMERR_CSP_NOT_LOGGED_IN:
809 return errSecNotLoggedIn;
810 case CSSMERR_CSP_ALGID_MISMATCH:
811 return errSecAlgorithmMismatch;
812 case CSSMERR_CSP_KEY_USAGE_INCORRECT:
813 return errSecKeyUsageIncorrect;
814 case CSSMERR_CSP_KEY_BLOB_TYPE_INCORRECT:
815 return errSecKeyBlobTypeIncorrect;
816 case CSSMERR_CSP_KEY_HEADER_INCONSISTENT:
817 return errSecKeyHeaderInconsistent;
818 case CSSMERR_CSP_UNSUPPORTED_KEY_FORMAT:
819 return errSecUnsupportedKeyFormat;
820 case CSSMERR_CSP_UNSUPPORTED_KEY_SIZE:
821 return errSecUnsupportedKeySize;
822 case CSSMERR_CSP_INVALID_KEYUSAGE_MASK:
823 return errSecInvalidKeyUsageMask;
824 case CSSMERR_CSP_UNSUPPORTED_KEYUSAGE_MASK:
825 return errSecUnsupportedKeyUsageMask;
826 case CSSMERR_CSP_INVALID_KEYATTR_MASK:
827 return errSecInvalidKeyAttributeMask;
828 case CSSMERR_CSP_UNSUPPORTED_KEYATTR_MASK:
829 return errSecUnsupportedKeyAttributeMask;
830 case CSSMERR_CSP_INVALID_KEY_LABEL:
831 return errSecInvalidKeyLabel;
832 case CSSMERR_CSP_UNSUPPORTED_KEY_LABEL:
833 return errSecUnsupportedKeyLabel;
834 case CSSMERR_CSP_INVALID_KEY_FORMAT:
835 return errSecInvalidKeyFormat;
836 case CSSMERR_CSP_VECTOR_OF_BUFS_UNSUPPORTED:
837 return errSecUnsupportedVectorOfBuffers;
838 case CSSMERR_CSP_INVALID_INPUT_VECTOR:
839 return errSecInvalidInputVector;
840 case CSSMERR_CSP_INVALID_OUTPUT_VECTOR:
841 return errSecInvalidOutputVector;
842 case CSSMERR_CSP_INVALID_CONTEXT:
843 return errSecInvalidContext;
844 case CSSMERR_CSP_INVALID_ALGORITHM:
845 return errSecInvalidAlgorithm;
846 case CSSMERR_CSP_INVALID_ATTR_KEY:
847 return errSecInvalidAttributeKey;
848 case CSSMERR_CSP_MISSING_ATTR_KEY:
849 return errSecMissingAttributeKey;
850 case CSSMERR_CSP_INVALID_ATTR_INIT_VECTOR:
851 return errSecInvalidAttributeInitVector;
852 case CSSMERR_CSP_MISSING_ATTR_INIT_VECTOR:
853 return errSecMissingAttributeInitVector;
854 case CSSMERR_CSP_INVALID_ATTR_SALT:
855 return errSecInvalidAttributeSalt;
856 case CSSMERR_CSP_MISSING_ATTR_SALT:
857 return errSecMissingAttributeSalt;
858 case CSSMERR_CSP_INVALID_ATTR_PADDING:
859 return errSecInvalidAttributePadding;
860 case CSSMERR_CSP_MISSING_ATTR_PADDING:
861 return errSecMissingAttributePadding;
862 case CSSMERR_CSP_INVALID_ATTR_RANDOM:
863 return errSecInvalidAttributeRandom;
864 case CSSMERR_CSP_MISSING_ATTR_RANDOM:
865 return errSecMissingAttributeRandom;
866 case CSSMERR_CSP_INVALID_ATTR_SEED:
867 return errSecInvalidAttributeSeed;
868 case CSSMERR_CSP_MISSING_ATTR_SEED:
869 return errSecMissingAttributeSeed;
870 case CSSMERR_CSP_INVALID_ATTR_PASSPHRASE:
871 return errSecInvalidAttributePassphrase;
872 case CSSMERR_CSP_MISSING_ATTR_PASSPHRASE:
873 return errSecMissingAttributePassphrase;
874 case CSSMERR_CSP_INVALID_ATTR_KEY_LENGTH:
875 return errSecInvalidAttributeKeyLength;
876 case CSSMERR_CSP_MISSING_ATTR_KEY_LENGTH:
877 return errSecMissingAttributeKeyLength;
878 case CSSMERR_CSP_INVALID_ATTR_BLOCK_SIZE:
879 return errSecInvalidAttributeBlockSize;
880 case CSSMERR_CSP_MISSING_ATTR_BLOCK_SIZE:
881 return errSecMissingAttributeBlockSize;
882 case CSSMERR_CSP_INVALID_ATTR_OUTPUT_SIZE:
883 return errSecInvalidAttributeOutputSize;
884 case CSSMERR_CSP_MISSING_ATTR_OUTPUT_SIZE:
885 return errSecMissingAttributeOutputSize;
886 case CSSMERR_CSP_INVALID_ATTR_ROUNDS:
887 return errSecInvalidAttributeRounds;
888 case CSSMERR_CSP_MISSING_ATTR_ROUNDS:
889 return errSecMissingAttributeRounds;
890 case CSSMERR_CSP_INVALID_ATTR_ALG_PARAMS:
891 return errSecInvalidAlgorithmParms;
892 case CSSMERR_CSP_MISSING_ATTR_ALG_PARAMS:
893 return errSecMissingAlgorithmParms;
894 case CSSMERR_CSP_INVALID_ATTR_LABEL:
895 return errSecInvalidAttributeLabel;
896 case CSSMERR_CSP_MISSING_ATTR_LABEL:
897 return errSecMissingAttributeLabel;
898 case CSSMERR_CSP_INVALID_ATTR_KEY_TYPE:
899 return errSecInvalidAttributeKeyType;
900 case CSSMERR_CSP_MISSING_ATTR_KEY_TYPE:
901 return errSecMissingAttributeKeyType;
902 case CSSMERR_CSP_INVALID_ATTR_MODE:
903 return errSecInvalidAttributeMode;
904 case CSSMERR_CSP_MISSING_ATTR_MODE:
905 return errSecMissingAttributeMode;
906 case CSSMERR_CSP_INVALID_ATTR_EFFECTIVE_BITS:
907 return errSecInvalidAttributeEffectiveBits;
908 case CSSMERR_CSP_MISSING_ATTR_EFFECTIVE_BITS:
909 return errSecMissingAttributeEffectiveBits;
910 case CSSMERR_CSP_INVALID_ATTR_START_DATE:
911 return errSecInvalidAttributeStartDate;
912 case CSSMERR_CSP_MISSING_ATTR_START_DATE:
913 return errSecMissingAttributeStartDate;
914 case CSSMERR_CSP_INVALID_ATTR_END_DATE:
915 return errSecInvalidAttributeEndDate;
916 case CSSMERR_CSP_MISSING_ATTR_END_DATE:
917 return errSecMissingAttributeEndDate;
918 case CSSMERR_CSP_INVALID_ATTR_VERSION:
919 return errSecInvalidAttributeVersion;
920 case CSSMERR_CSP_MISSING_ATTR_VERSION:
921 return errSecMissingAttributeVersion;
922 case CSSMERR_CSP_INVALID_ATTR_PRIME:
923 return errSecInvalidAttributePrime;
924 case CSSMERR_CSP_MISSING_ATTR_PRIME:
925 return errSecMissingAttributePrime;
926 case CSSMERR_CSP_INVALID_ATTR_BASE:
927 return errSecInvalidAttributeBase;
928 case CSSMERR_CSP_MISSING_ATTR_BASE:
929 return errSecMissingAttributeBase;
930 case CSSMERR_CSP_INVALID_ATTR_SUBPRIME:
931 return errSecInvalidAttributeSubprime;
932 case CSSMERR_CSP_MISSING_ATTR_SUBPRIME:
933 return errSecMissingAttributeSubprime;
934 case CSSMERR_CSP_INVALID_ATTR_ITERATION_COUNT:
935 return errSecInvalidAttributeIterationCount;
936 case CSSMERR_CSP_MISSING_ATTR_ITERATION_COUNT:
937 return errSecMissingAttributeIterationCount;
938 case CSSMERR_CSP_INVALID_ATTR_DL_DB_HANDLE:
939 return errSecInvalidAttributeDLDBHandle;
940 case CSSMERR_CSP_MISSING_ATTR_DL_DB_HANDLE:
941 return errSecMissingAttributeDLDBHandle;
942 case CSSMERR_CSP_INVALID_ATTR_ACCESS_CREDENTIALS:
943 return errSecInvalidAttributeAccessCredentials;
944 case CSSMERR_CSP_MISSING_ATTR_ACCESS_CREDENTIALS:
945 return errSecMissingAttributeAccessCredentials;
946 case CSSMERR_CSP_INVALID_ATTR_PUBLIC_KEY_FORMAT:
947 return errSecInvalidAttributePublicKeyFormat;
948 case CSSMERR_CSP_MISSING_ATTR_PUBLIC_KEY_FORMAT:
949 return errSecMissingAttributePublicKeyFormat;
950 case CSSMERR_CSP_INVALID_ATTR_PRIVATE_KEY_FORMAT:
951 return errSecInvalidAttributePrivateKeyFormat;
952 case CSSMERR_CSP_MISSING_ATTR_PRIVATE_KEY_FORMAT:
953 return errSecMissingAttributePrivateKeyFormat;
954 case CSSMERR_CSP_INVALID_ATTR_SYMMETRIC_KEY_FORMAT:
955 return errSecInvalidAttributeSymmetricKeyFormat;
956 case CSSMERR_CSP_MISSING_ATTR_SYMMETRIC_KEY_FORMAT:
957 return errSecMissingAttributeSymmetricKeyFormat;
958 case CSSMERR_CSP_INVALID_ATTR_WRAPPED_KEY_FORMAT:
959 return errSecInvalidAttributeWrappedKeyFormat;
960 case CSSMERR_CSP_MISSING_ATTR_WRAPPED_KEY_FORMAT:
961 return errSecMissingAttributeWrappedKeyFormat;
962 case CSSMERR_CSP_STAGED_OPERATION_IN_PROGRESS:
963 return errSecStagedOperationInProgress;
964 case CSSMERR_CSP_STAGED_OPERATION_NOT_STARTED:
965 return errSecStagedOperationNotStarted;
966 case CSSMERR_CSP_VERIFY_FAILED:
967 return errSecVerifyFailed;
968 case CSSMERR_CSP_QUERY_SIZE_UNKNOWN:
969 return errSecQuerySizeUnknown;
970 case CSSMERR_CSP_BLOCK_SIZE_MISMATCH:
971 return errSecBlockSizeMismatch;
972 case CSSMERR_CSP_PUBLIC_KEY_INCONSISTENT:
973 return errSecPublicKeyInconsistent;
974 case CSSMERR_CSP_DEVICE_VERIFY_FAILED:
975 return errSecDeviceVerifyFailed;
976 case CSSMERR_CSP_INVALID_LOGIN_NAME:
977 return errSecInvalidLoginName;
978 case CSSMERR_CSP_ALREADY_LOGGED_IN:
979 return errSecAlreadyLoggedIn;
980 case CSSMERR_CSP_INVALID_DIGEST_ALGORITHM:
981 return errSecInvalidDigestAlgorithm;
982 case CSSMERR_TP_INVALID_CRLGROUP:
983 return errSecInvalidCRLGroup;
984 case CSSMERR_TP_CERTIFICATE_CANT_OPERATE:
985 return errSecCertificateCannotOperate;
986 case CSSMERR_TP_CERT_EXPIRED:
987 return errSecCertificateExpired;
988 case CSSMERR_TP_CERT_NOT_VALID_YET:
989 return errSecCertificateNotValidYet;
990 case CSSMERR_TP_CERT_REVOKED:
991 return errSecCertificateRevoked;
992 case CSSMERR_TP_CERT_SUSPENDED:
993 return errSecCertificateSuspended;
994 case CSSMERR_TP_INSUFFICIENT_CREDENTIALS:
995 return errSecInsufficientCredentials;
996 case CSSMERR_TP_INVALID_ACTION:
997 return errSecInvalidAction;
998 case CSSMERR_TP_INVALID_AUTHORITY:
999 return errSecInvalidAuthority;
1000 case CSSMERR_TP_VERIFY_ACTION_FAILED:
1001 return errSecVerifyActionFailed;
1002 case CSSMERR_TP_INVALID_CERT_AUTHORITY:
1003 case CSSMERR_APPLETP_INVALID_CA:
1004 return errSecInvalidCertAuthority;
1005 case CSSMERR_TP_INVALID_CRL_AUTHORITY:
1006 return errSecInvaldCRLAuthority;
1007 case CSSMERR_TP_INVALID_CRL_ENCODING:
1008 return errSecInvalidCRLEncoding;
1009 case CSSMERR_TP_INVALID_CRL_TYPE:
1010 return errSecInvalidCRLType;
1011 case CSSMERR_TP_INVALID_CRL:
1012 return errSecInvalidCRL;
1013 case CSSMERR_TP_INVALID_FORM_TYPE:
1014 return errSecInvalidFormType;
1015 case CSSMERR_TP_INVALID_ID:
1016 return errSecInvalidID;
1017 case CSSMERR_TP_INVALID_IDENTIFIER:
1018 return errSecInvalidIdentifier;
1019 case CSSMERR_TP_INVALID_INDEX:
1020 return errSecInvalidIndex;
1021 case CSSMERR_TP_INVALID_POLICY_IDENTIFIERS:
1022 return errSecInvalidPolicyIdentifiers;
1023 case CSSMERR_TP_INVALID_TIMESTRING:
1024 return errSecInvalidTimeString;
1025 case CSSMERR_TP_INVALID_REASON:
1026 return errSecInvalidReason;
1027 case CSSMERR_TP_INVALID_REQUEST_INPUTS:
1028 return errSecInvalidRequestInputs;
1029 case CSSMERR_TP_INVALID_RESPONSE_VECTOR:
1030 return errSecInvalidResponseVector;
1031 case CSSMERR_TP_INVALID_STOP_ON_POLICY:
1032 return errSecInvalidStopOnPolicy;
1033 case CSSMERR_TP_INVALID_TUPLE:
1034 return errSecInvalidTuple;
1035 case CSSMERR_TP_NOT_SIGNER:
1036 return errSecNotSigner;
1037 case CSSMERR_TP_NOT_TRUSTED:
1038 return errSecNotTrusted;
1039 case CSSMERR_TP_NO_DEFAULT_AUTHORITY:
1040 return errSecNoDefaultAuthority;
1041 case CSSMERR_TP_REJECTED_FORM:
1042 return errSecRejectedForm;
1043 case CSSMERR_TP_REQUEST_LOST:
1044 return errSecRequestLost;
1045 case CSSMERR_TP_REQUEST_REJECTED:
1046 return errSecRequestRejected;
1047 case CSSMERR_TP_UNSUPPORTED_ADDR_TYPE:
1048 return errSecUnsupportedAddressType;
1049 case CSSMERR_TP_UNSUPPORTED_SERVICE:
1050 return errSecUnsupportedService;
1051 case CSSMERR_TP_INVALID_TUPLEGROUP:
1052 return errSecInvalidTupleGroup;
1053 case CSSMERR_AC_INVALID_BASE_ACLS:
1054 return errSecInvalidBaseACLs;
1055 case CSSMERR_AC_INVALID_TUPLE_CREDENTIALS:
1056 return errSecInvalidTupleCredendtials;
1057 case CSSMERR_AC_INVALID_ENCODING:
1058 return errSecInvalidEncoding;
1059 case CSSMERR_AC_INVALID_VALIDITY_PERIOD:
1060 return errSecInvalidValidityPeriod;
1061 case CSSMERR_AC_INVALID_REQUESTOR:
1062 return errSecInvalidRequestor;
1063 case CSSMERR_AC_INVALID_REQUEST_DESCRIPTOR:
1064 return errSecRequestDescriptor;
1065 case CSSMERR_CL_INVALID_BUNDLE_INFO:
1066 return errSecInvalidBundleInfo;
1067 case CSSMERR_CL_INVALID_CRL_INDEX:
1068 return errSecInvalidCRLIndex;
1069 case CSSMERR_CL_NO_FIELD_VALUES:
1070 return errSecNoFieldValues;
1071 case CSSMERR_DL_UNSUPPORTED_FIELD_FORMAT:
1072 return errSecUnsupportedFieldFormat;
1073 case CSSMERR_DL_UNSUPPORTED_INDEX_INFO:
1074 return errSecUnsupportedIndexInfo;
1075 case CSSMERR_DL_UNSUPPORTED_LOCALITY:
1076 return errSecUnsupportedLocality;
1077 case CSSMERR_DL_UNSUPPORTED_NUM_ATTRIBUTES:
1078 return errSecUnsupportedNumAttributes;
1079 case CSSMERR_DL_UNSUPPORTED_NUM_INDEXES:
1080 return errSecUnsupportedNumIndexes;
1081 case CSSMERR_DL_UNSUPPORTED_NUM_RECORDTYPES:
1082 return errSecUnsupportedNumRecordTypes;
1083 case CSSMERR_DL_FIELD_SPECIFIED_MULTIPLE:
1084 return errSecFieldSpecifiedMultiple;
1085 case CSSMERR_DL_INCOMPATIBLE_FIELD_FORMAT:
1086 return errSecIncompatibleFieldFormat;
1087 case CSSMERR_DL_INVALID_PARSING_MODULE:
1088 return errSecInvalidParsingModule;
1089 case CSSMERR_DL_DB_LOCKED:
1090 return errSecDatabaseLocked;
1091 case CSSMERR_DL_DATASTORE_IS_OPEN:
1092 return errSecDatastoreIsOpen;
1093 case CSSMERR_DL_MISSING_VALUE:
1094 return errSecMissingValue;
1095 case CSSMERR_DL_UNSUPPORTED_QUERY_LIMITS:
1096 return errSecUnsupportedQueryLimits;
1097 case CSSMERR_DL_UNSUPPORTED_NUM_SELECTION_PREDS:
1098 return errSecUnsupportedNumSelectionPreds;
1099 case CSSMERR_DL_UNSUPPORTED_OPERATOR:
1100 return errSecUnsupportedOperator;
1101 case CSSMERR_DL_INVALID_DB_LOCATION:
1102 return errSecInvalidDBLocation;
1103 case CSSMERR_DL_INVALID_ACCESS_REQUEST:
1104 return errSecInvalidAccessRequest;
1105 case CSSMERR_DL_INVALID_INDEX_INFO:
1106 return errSecInvalidIndexInfo;
1107 case CSSMERR_DL_INVALID_NEW_OWNER:
1108 return errSecInvalidNewOwner;
1109 case CSSMERR_DL_INVALID_MODIFY_MODE:
1110 return errSecInvalidModifyMode;
1111 case CSSMERR_DL_RECORD_MODIFIED:
1112 return errSecRecordModified;
1113 case CSSMERR_DL_ENDOFDATA:
1114 return errSecEndOfData;
1115 case CSSMERR_DL_INVALID_VALUE:
1116 return errSecInvalidValue;
1117 case CSSMERR_DL_MULTIPLE_VALUES_UNSUPPORTED:
1118 return errSecMultipleValuesUnsupported;
1119 default:
1120 return osStatus;
1121 }
1122 }
mirror of Security