1/* This Source Code Form is subject to the terms of the Mozilla Public 2 * License, v. 2.0. If a copy of the MPL was not distributed with this 3 * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ 4 5/* SSL-specific security error codes */ 6/* caller must include "sslerr.h" */ 7 8ER3(SSL_ERROR_EXPORT_ONLY_SERVER, SSL_ERROR_BASE + 0, 9"Unable to communicate securely. Peer does not support high-grade encryption.") 10 11ER3(SSL_ERROR_US_ONLY_SERVER, SSL_ERROR_BASE + 1, 12"Unable to communicate securely. Peer requires high-grade encryption which is not supported.") 13 14ER3(SSL_ERROR_NO_CYPHER_OVERLAP, SSL_ERROR_BASE + 2, 15"Cannot communicate securely with peer: no common encryption algorithm(s).") 16 17ER3(SSL_ERROR_NO_CERTIFICATE, SSL_ERROR_BASE + 3, 18"Unable to find the certificate or key necessary for authentication.") 19 20ER3(SSL_ERROR_BAD_CERTIFICATE, SSL_ERROR_BASE + 4, 21"Unable to communicate securely with peer: peers's certificate was rejected.") 22 23ER3(SSL_ERROR_UNUSED_5, SSL_ERROR_BASE + 5, 24"Unrecognized SSL error code.") 25 26ER3(SSL_ERROR_BAD_CLIENT, SSL_ERROR_BASE + 6, 27"The server has encountered bad data from the client.") 28 29ER3(SSL_ERROR_BAD_SERVER, SSL_ERROR_BASE + 7, 30"The client has encountered bad data from the server.") 31 32ER3(SSL_ERROR_UNSUPPORTED_CERTIFICATE_TYPE, SSL_ERROR_BASE + 8, 33"Unsupported certificate type.") 34 35ER3(SSL_ERROR_UNSUPPORTED_VERSION, SSL_ERROR_BASE + 9, 36"Peer using unsupported version of security protocol.") 37 38ER3(SSL_ERROR_UNUSED_10, SSL_ERROR_BASE + 10, 39"Unrecognized SSL error code.") 40 41ER3(SSL_ERROR_WRONG_CERTIFICATE, SSL_ERROR_BASE + 11, 42"Client authentication failed: private key in key database does not match public key in certificate database.") 43 44ER3(SSL_ERROR_BAD_CERT_DOMAIN, SSL_ERROR_BASE + 12, 45"Unable to communicate securely with peer: requested domain name does not match the server's certificate.") 46 47ER3(SSL_ERROR_POST_WARNING, SSL_ERROR_BASE + 13, 48"Unrecognized SSL error code.") 49 50ER3(SSL_ERROR_SSL2_DISABLED, (SSL_ERROR_BASE + 14), 51"Peer only supports SSL version 2, which is locally disabled.") 52 53 54ER3(SSL_ERROR_BAD_MAC_READ, (SSL_ERROR_BASE + 15), 55"SSL received a record with an incorrect Message Authentication Code.") 56 57ER3(SSL_ERROR_BAD_MAC_ALERT, (SSL_ERROR_BASE + 16), 58"SSL peer reports incorrect Message Authentication Code.") 59 60ER3(SSL_ERROR_BAD_CERT_ALERT, (SSL_ERROR_BASE + 17), 61"SSL peer cannot verify your certificate.") 62 63ER3(SSL_ERROR_REVOKED_CERT_ALERT, (SSL_ERROR_BASE + 18), 64"SSL peer rejected your certificate as revoked.") 65 66ER3(SSL_ERROR_EXPIRED_CERT_ALERT, (SSL_ERROR_BASE + 19), 67"SSL peer rejected your certificate as expired.") 68 69ER3(SSL_ERROR_SSL_DISABLED, (SSL_ERROR_BASE + 20), 70"Cannot connect: SSL is disabled.") 71 72ER3(SSL_ERROR_FORTEZZA_PQG, (SSL_ERROR_BASE + 21), 73"Cannot connect: SSL peer is in another FORTEZZA domain.") 74 75ER3(SSL_ERROR_UNKNOWN_CIPHER_SUITE , (SSL_ERROR_BASE + 22), 76"An unknown SSL cipher suite has been requested.") 77 78ER3(SSL_ERROR_NO_CIPHERS_SUPPORTED , (SSL_ERROR_BASE + 23), 79"No cipher suites are present and enabled in this program.") 80 81ER3(SSL_ERROR_BAD_BLOCK_PADDING , (SSL_ERROR_BASE + 24), 82"SSL received a record with bad block padding.") 83 84ER3(SSL_ERROR_RX_RECORD_TOO_LONG , (SSL_ERROR_BASE + 25), 85"SSL received a record that exceeded the maximum permissible length.") 86 87ER3(SSL_ERROR_TX_RECORD_TOO_LONG , (SSL_ERROR_BASE + 26), 88"SSL attempted to send a record that exceeded the maximum permissible length.") 89 90/* 91 * Received a malformed (too long or short or invalid content) SSL handshake. 92 */ 93ER3(SSL_ERROR_RX_MALFORMED_HELLO_REQUEST , (SSL_ERROR_BASE + 27), 94"SSL received a malformed Hello Request handshake message.") 95 96ER3(SSL_ERROR_RX_MALFORMED_CLIENT_HELLO , (SSL_ERROR_BASE + 28), 97"SSL received a malformed Client Hello handshake message.") 98 99ER3(SSL_ERROR_RX_MALFORMED_SERVER_HELLO , (SSL_ERROR_BASE + 29), 100"SSL received a malformed Server Hello handshake message.") 101 102ER3(SSL_ERROR_RX_MALFORMED_CERTIFICATE , (SSL_ERROR_BASE + 30), 103"SSL received a malformed Certificate handshake message.") 104 105ER3(SSL_ERROR_RX_MALFORMED_SERVER_KEY_EXCH , (SSL_ERROR_BASE + 31), 106"SSL received a malformed Server Key Exchange handshake message.") 107 108ER3(SSL_ERROR_RX_MALFORMED_CERT_REQUEST , (SSL_ERROR_BASE + 32), 109"SSL received a malformed Certificate Request handshake message.") 110 111ER3(SSL_ERROR_RX_MALFORMED_HELLO_DONE , (SSL_ERROR_BASE + 33), 112"SSL received a malformed Server Hello Done handshake message.") 113 114ER3(SSL_ERROR_RX_MALFORMED_CERT_VERIFY , (SSL_ERROR_BASE + 34), 115"SSL received a malformed Certificate Verify handshake message.") 116 117ER3(SSL_ERROR_RX_MALFORMED_CLIENT_KEY_EXCH , (SSL_ERROR_BASE + 35), 118"SSL received a malformed Client Key Exchange handshake message.") 119 120ER3(SSL_ERROR_RX_MALFORMED_FINISHED , (SSL_ERROR_BASE + 36), 121"SSL received a malformed Finished handshake message.") 122 123/* 124 * Received a malformed (too long or short) SSL record. 125 */ 126ER3(SSL_ERROR_RX_MALFORMED_CHANGE_CIPHER , (SSL_ERROR_BASE + 37), 127"SSL received a malformed Change Cipher Spec record.") 128 129ER3(SSL_ERROR_RX_MALFORMED_ALERT , (SSL_ERROR_BASE + 38), 130"SSL received a malformed Alert record.") 131 132ER3(SSL_ERROR_RX_MALFORMED_HANDSHAKE , (SSL_ERROR_BASE + 39), 133"SSL received a malformed Handshake record.") 134 135ER3(SSL_ERROR_RX_MALFORMED_APPLICATION_DATA , (SSL_ERROR_BASE + 40), 136"SSL received a malformed Application Data record.") 137 138/* 139 * Received an SSL handshake that was inappropriate for the state we're in. 140 * E.g. Server received message from server, or wrong state in state machine. 141 */ 142ER3(SSL_ERROR_RX_UNEXPECTED_HELLO_REQUEST , (SSL_ERROR_BASE + 41), 143"SSL received an unexpected Hello Request handshake message.") 144 145ER3(SSL_ERROR_RX_UNEXPECTED_CLIENT_HELLO , (SSL_ERROR_BASE + 42), 146"SSL received an unexpected Client Hello handshake message.") 147 148ER3(SSL_ERROR_RX_UNEXPECTED_SERVER_HELLO , (SSL_ERROR_BASE + 43), 149"SSL received an unexpected Server Hello handshake message.") 150 151ER3(SSL_ERROR_RX_UNEXPECTED_CERTIFICATE , (SSL_ERROR_BASE + 44), 152"SSL received an unexpected Certificate handshake message.") 153 154ER3(SSL_ERROR_RX_UNEXPECTED_SERVER_KEY_EXCH , (SSL_ERROR_BASE + 45), 155"SSL received an unexpected Server Key Exchange handshake message.") 156 157ER3(SSL_ERROR_RX_UNEXPECTED_CERT_REQUEST , (SSL_ERROR_BASE + 46), 158"SSL received an unexpected Certificate Request handshake message.") 159 160ER3(SSL_ERROR_RX_UNEXPECTED_HELLO_DONE , (SSL_ERROR_BASE + 47), 161"SSL received an unexpected Server Hello Done handshake message.") 162 163ER3(SSL_ERROR_RX_UNEXPECTED_CERT_VERIFY , (SSL_ERROR_BASE + 48), 164"SSL received an unexpected Certificate Verify handshake message.") 165 166ER3(SSL_ERROR_RX_UNEXPECTED_CLIENT_KEY_EXCH , (SSL_ERROR_BASE + 49), 167"SSL received an unexpected Client Key Exchange handshake message.") 168 169ER3(SSL_ERROR_RX_UNEXPECTED_FINISHED , (SSL_ERROR_BASE + 50), 170"SSL received an unexpected Finished handshake message.") 171 172/* 173 * Received an SSL record that was inappropriate for the state we're in. 174 */ 175ER3(SSL_ERROR_RX_UNEXPECTED_CHANGE_CIPHER , (SSL_ERROR_BASE + 51), 176"SSL received an unexpected Change Cipher Spec record.") 177 178ER3(SSL_ERROR_RX_UNEXPECTED_ALERT , (SSL_ERROR_BASE + 52), 179"SSL received an unexpected Alert record.") 180 181ER3(SSL_ERROR_RX_UNEXPECTED_HANDSHAKE , (SSL_ERROR_BASE + 53), 182"SSL received an unexpected Handshake record.") 183 184ER3(SSL_ERROR_RX_UNEXPECTED_APPLICATION_DATA, (SSL_ERROR_BASE + 54), 185"SSL received an unexpected Application Data record.") 186 187/* 188 * Received record/message with unknown discriminant. 189 */ 190ER3(SSL_ERROR_RX_UNKNOWN_RECORD_TYPE , (SSL_ERROR_BASE + 55), 191"SSL received a record with an unknown content type.") 192 193ER3(SSL_ERROR_RX_UNKNOWN_HANDSHAKE , (SSL_ERROR_BASE + 56), 194"SSL received a handshake message with an unknown message type.") 195 196ER3(SSL_ERROR_RX_UNKNOWN_ALERT , (SSL_ERROR_BASE + 57), 197"SSL received an alert record with an unknown alert description.") 198 199/* 200 * Received an alert reporting what we did wrong. (more alerts above) 201 */ 202ER3(SSL_ERROR_CLOSE_NOTIFY_ALERT , (SSL_ERROR_BASE + 58), 203"SSL peer has closed this connection.") 204 205ER3(SSL_ERROR_HANDSHAKE_UNEXPECTED_ALERT , (SSL_ERROR_BASE + 59), 206"SSL peer was not expecting a handshake message it received.") 207 208ER3(SSL_ERROR_DECOMPRESSION_FAILURE_ALERT , (SSL_ERROR_BASE + 60), 209"SSL peer was unable to successfully decompress an SSL record it received.") 210 211ER3(SSL_ERROR_HANDSHAKE_FAILURE_ALERT , (SSL_ERROR_BASE + 61), 212"SSL peer was unable to negotiate an acceptable set of security parameters.") 213 214ER3(SSL_ERROR_ILLEGAL_PARAMETER_ALERT , (SSL_ERROR_BASE + 62), 215"SSL peer rejected a handshake message for unacceptable content.") 216 217ER3(SSL_ERROR_UNSUPPORTED_CERT_ALERT , (SSL_ERROR_BASE + 63), 218"SSL peer does not support certificates of the type it received.") 219 220ER3(SSL_ERROR_CERTIFICATE_UNKNOWN_ALERT , (SSL_ERROR_BASE + 64), 221"SSL peer had some unspecified issue with the certificate it received.") 222 223 224ER3(SSL_ERROR_GENERATE_RANDOM_FAILURE , (SSL_ERROR_BASE + 65), 225"SSL experienced a failure of its random number generator.") 226 227ER3(SSL_ERROR_SIGN_HASHES_FAILURE , (SSL_ERROR_BASE + 66), 228"Unable to digitally sign data required to verify your certificate.") 229 230ER3(SSL_ERROR_EXTRACT_PUBLIC_KEY_FAILURE , (SSL_ERROR_BASE + 67), 231"SSL was unable to extract the public key from the peer's certificate.") 232 233ER3(SSL_ERROR_SERVER_KEY_EXCHANGE_FAILURE , (SSL_ERROR_BASE + 68), 234"Unspecified failure while processing SSL Server Key Exchange handshake.") 235 236ER3(SSL_ERROR_CLIENT_KEY_EXCHANGE_FAILURE , (SSL_ERROR_BASE + 69), 237"Unspecified failure while processing SSL Client Key Exchange handshake.") 238 239ER3(SSL_ERROR_ENCRYPTION_FAILURE , (SSL_ERROR_BASE + 70), 240"Bulk data encryption algorithm failed in selected cipher suite.") 241 242ER3(SSL_ERROR_DECRYPTION_FAILURE , (SSL_ERROR_BASE + 71), 243"Bulk data decryption algorithm failed in selected cipher suite.") 244 245ER3(SSL_ERROR_SOCKET_WRITE_FAILURE , (SSL_ERROR_BASE + 72), 246"Attempt to write encrypted data to underlying socket failed.") 247 248ER3(SSL_ERROR_MD5_DIGEST_FAILURE , (SSL_ERROR_BASE + 73), 249"MD5 digest function failed.") 250 251ER3(SSL_ERROR_SHA_DIGEST_FAILURE , (SSL_ERROR_BASE + 74), 252"SHA-1 digest function failed.") 253 254ER3(SSL_ERROR_MAC_COMPUTATION_FAILURE , (SSL_ERROR_BASE + 75), 255"MAC computation failed.") 256 257ER3(SSL_ERROR_SYM_KEY_CONTEXT_FAILURE , (SSL_ERROR_BASE + 76), 258"Failure to create Symmetric Key context.") 259 260ER3(SSL_ERROR_SYM_KEY_UNWRAP_FAILURE , (SSL_ERROR_BASE + 77), 261"Failure to unwrap the Symmetric key in Client Key Exchange message.") 262 263ER3(SSL_ERROR_PUB_KEY_SIZE_LIMIT_EXCEEDED , (SSL_ERROR_BASE + 78), 264"SSL Server attempted to use domestic-grade public key with export cipher suite.") 265 266ER3(SSL_ERROR_IV_PARAM_FAILURE , (SSL_ERROR_BASE + 79), 267"PKCS11 code failed to translate an IV into a param.") 268 269ER3(SSL_ERROR_INIT_CIPHER_SUITE_FAILURE , (SSL_ERROR_BASE + 80), 270"Failed to initialize the selected cipher suite.") 271 272ER3(SSL_ERROR_SESSION_KEY_GEN_FAILURE , (SSL_ERROR_BASE + 81), 273"Client failed to generate session keys for SSL session.") 274 275ER3(SSL_ERROR_NO_SERVER_KEY_FOR_ALG , (SSL_ERROR_BASE + 82), 276"Server has no key for the attempted key exchange algorithm.") 277 278ER3(SSL_ERROR_TOKEN_INSERTION_REMOVAL , (SSL_ERROR_BASE + 83), 279"PKCS#11 token was inserted or removed while operation was in progress.") 280 281ER3(SSL_ERROR_TOKEN_SLOT_NOT_FOUND , (SSL_ERROR_BASE + 84), 282"No PKCS#11 token could be found to do a required operation.") 283 284ER3(SSL_ERROR_NO_COMPRESSION_OVERLAP , (SSL_ERROR_BASE + 85), 285"Cannot communicate securely with peer: no common compression algorithm(s).") 286 287ER3(SSL_ERROR_HANDSHAKE_NOT_COMPLETED , (SSL_ERROR_BASE + 86), 288"Cannot perform the operation until the handshake is complete.") 289 290ER3(SSL_ERROR_BAD_HANDSHAKE_HASH_VALUE , (SSL_ERROR_BASE + 87), 291"Received incorrect handshakes hash values from peer.") 292 293ER3(SSL_ERROR_CERT_KEA_MISMATCH , (SSL_ERROR_BASE + 88), 294"The certificate provided cannot be used with the selected key exchange algorithm.") 295 296ER3(SSL_ERROR_NO_TRUSTED_SSL_CLIENT_CA , (SSL_ERROR_BASE + 89), 297"No certificate authority is trusted for SSL client authentication.") 298 299ER3(SSL_ERROR_SESSION_NOT_FOUND , (SSL_ERROR_BASE + 90), 300"Client's SSL session ID not found in server's session cache.") 301 302ER3(SSL_ERROR_DECRYPTION_FAILED_ALERT , (SSL_ERROR_BASE + 91), 303"Peer was unable to decrypt an SSL record it received.") 304 305ER3(SSL_ERROR_RECORD_OVERFLOW_ALERT , (SSL_ERROR_BASE + 92), 306"Peer received an SSL record that was longer than is permitted.") 307 308ER3(SSL_ERROR_UNKNOWN_CA_ALERT , (SSL_ERROR_BASE + 93), 309"Peer does not recognize and trust the CA that issued your certificate.") 310 311ER3(SSL_ERROR_ACCESS_DENIED_ALERT , (SSL_ERROR_BASE + 94), 312"Peer received a valid certificate, but access was denied.") 313 314ER3(SSL_ERROR_DECODE_ERROR_ALERT , (SSL_ERROR_BASE + 95), 315"Peer could not decode an SSL handshake message.") 316 317ER3(SSL_ERROR_DECRYPT_ERROR_ALERT , (SSL_ERROR_BASE + 96), 318"Peer reports failure of signature verification or key exchange.") 319 320ER3(SSL_ERROR_EXPORT_RESTRICTION_ALERT , (SSL_ERROR_BASE + 97), 321"Peer reports negotiation not in compliance with export regulations.") 322 323ER3(SSL_ERROR_PROTOCOL_VERSION_ALERT , (SSL_ERROR_BASE + 98), 324"Peer reports incompatible or unsupported protocol version.") 325 326ER3(SSL_ERROR_INSUFFICIENT_SECURITY_ALERT , (SSL_ERROR_BASE + 99), 327"Server requires ciphers more secure than those supported by client.") 328 329ER3(SSL_ERROR_INTERNAL_ERROR_ALERT , (SSL_ERROR_BASE + 100), 330"Peer reports it experienced an internal error.") 331 332ER3(SSL_ERROR_USER_CANCELED_ALERT , (SSL_ERROR_BASE + 101), 333"Peer user canceled handshake.") 334 335ER3(SSL_ERROR_NO_RENEGOTIATION_ALERT , (SSL_ERROR_BASE + 102), 336"Peer does not permit renegotiation of SSL security parameters.") 337 338ER3(SSL_ERROR_SERVER_CACHE_NOT_CONFIGURED , (SSL_ERROR_BASE + 103), 339"SSL server cache not configured and not disabled for this socket.") 340 341ER3(SSL_ERROR_UNSUPPORTED_EXTENSION_ALERT , (SSL_ERROR_BASE + 104), 342"SSL peer does not support requested TLS hello extension.") 343 344ER3(SSL_ERROR_CERTIFICATE_UNOBTAINABLE_ALERT , (SSL_ERROR_BASE + 105), 345"SSL peer could not obtain your certificate from the supplied URL.") 346 347ER3(SSL_ERROR_UNRECOGNIZED_NAME_ALERT , (SSL_ERROR_BASE + 106), 348"SSL peer has no certificate for the requested DNS name.") 349 350ER3(SSL_ERROR_BAD_CERT_STATUS_RESPONSE_ALERT , (SSL_ERROR_BASE + 107), 351"SSL peer was unable to get an OCSP response for its certificate.") 352 353ER3(SSL_ERROR_BAD_CERT_HASH_VALUE_ALERT , (SSL_ERROR_BASE + 108), 354"SSL peer reported bad certificate hash value.") 355 356ER3(SSL_ERROR_RX_UNEXPECTED_NEW_SESSION_TICKET, (SSL_ERROR_BASE + 109), 357"SSL received an unexpected New Session Ticket handshake message.") 358 359ER3(SSL_ERROR_RX_MALFORMED_NEW_SESSION_TICKET, (SSL_ERROR_BASE + 110), 360"SSL received a malformed New Session Ticket handshake message.") 361 362ER3(SSL_ERROR_DECOMPRESSION_FAILURE, (SSL_ERROR_BASE + 111), 363"SSL received a compressed record that could not be decompressed.") 364 365ER3(SSL_ERROR_RENEGOTIATION_NOT_ALLOWED, (SSL_ERROR_BASE + 112), 366"Renegotiation is not allowed on this SSL socket.") 367 368ER3(SSL_ERROR_UNSAFE_NEGOTIATION, (SSL_ERROR_BASE + 113), 369"Peer attempted old style (potentially vulnerable) handshake.") 370 371ER3(SSL_ERROR_RX_UNEXPECTED_UNCOMPRESSED_RECORD, (SSL_ERROR_BASE + 114), 372"SSL received an unexpected uncompressed record.") 373 374ER3(SSL_ERROR_WEAK_SERVER_EPHEMERAL_DH_KEY, (SSL_ERROR_BASE + 115), 375"SSL received a weak ephemeral Diffie-Hellman key in Server Key Exchange handshake message.") 376 377ER3(SSL_ERROR_NEXT_PROTOCOL_DATA_INVALID, (SSL_ERROR_BASE + 116), 378"SSL received invalid NPN extension data.") 379 380ER3(SSL_ERROR_FEATURE_NOT_SUPPORTED_FOR_SSL2, (SSL_ERROR_BASE + 117), 381"SSL feature not supported for SSL 2.0 connections.") 382 383ER3(SSL_ERROR_FEATURE_NOT_SUPPORTED_FOR_SERVERS, (SSL_ERROR_BASE + 118), 384"SSL feature not supported for servers.") 385 386ER3(SSL_ERROR_FEATURE_NOT_SUPPORTED_FOR_CLIENTS, (SSL_ERROR_BASE + 119), 387"SSL feature not supported for clients.") 388 389ER3(SSL_ERROR_INVALID_VERSION_RANGE, (SSL_ERROR_BASE + 120), 390"SSL version range is not valid.") 391 392ER3(SSL_ERROR_CIPHER_DISALLOWED_FOR_VERSION, (SSL_ERROR_BASE + 121), 393"SSL peer selected a cipher suite disallowed for the selected protocol version.") 394 395ER3(SSL_ERROR_RX_MALFORMED_HELLO_VERIFY_REQUEST, (SSL_ERROR_BASE + 122), 396"SSL received a malformed Hello Verify Request handshake message.") 397 398ER3(SSL_ERROR_RX_UNEXPECTED_HELLO_VERIFY_REQUEST, (SSL_ERROR_BASE + 123), 399"SSL received an unexpected Hello Verify Request handshake message.") 400 401ER3(SSL_ERROR_FEATURE_NOT_SUPPORTED_FOR_VERSION, (SSL_ERROR_BASE + 124), 402"SSL feature not supported for the protocol version.") 403 404ER3(SSL_ERROR_RX_UNEXPECTED_CERT_STATUS, (SSL_ERROR_BASE + 125), 405"SSL received an unexpected Certificate Status handshake message.") 406 407ER3(SSL_ERROR_UNSUPPORTED_HASH_ALGORITHM, (SSL_ERROR_BASE + 126), 408"Unsupported hash algorithm used by TLS peer.") 409 410ER3(SSL_ERROR_DIGEST_FAILURE, (SSL_ERROR_BASE + 127), 411"Digest function failed.") 412 413ER3(SSL_ERROR_INCORRECT_SIGNATURE_ALGORITHM, (SSL_ERROR_BASE + 128), 414"Incorrect signature algorithm specified in a digitally-signed element.") 415 416ER3(SSL_ERROR_BAD_CHANNEL_ID_DATA, (SSL_ERROR_BASE + 129), 417"SSL received a malformed TLS Channel ID extension.") 418 419ER3(SSL_ERROR_INVALID_CHANNEL_ID_KEY, (SSL_ERROR_BASE + 130), 420"The application provided an invalid TLS Channel ID key.") 421 422ER3(SSL_ERROR_GET_CHANNEL_ID_FAILED, (SSL_ERROR_BASE + 131), 423"The application could not get a TLS Channel ID.") 424 425ER3(SSL_ERROR_INAPPROPRIATE_FALLBACK_ALERT, (SSL_ERROR_BASE + 132), 426"The connection was using a lesser TLS version as a result of a previous" 427" handshake failure, but the server indicated that it should not have been" 428" needed.") 429