1/*
2 * a error2str function to make sense of all the
3 * error codes we have laying ardoun
4 *
5 * a Net::DNS like library for C
6 * LibDNS Team @ NLnet Labs
7 * (c) NLnet Labs, 2005-2006
8 * See the file LICENSE for the license
9 */
10
11#include <ldns/config.h>
12
13#include <ldns/ldns.h>
14
15ldns_lookup_table ldns_error_str[] = {
16	{ LDNS_STATUS_OK, "All OK" },
17	{ LDNS_STATUS_EMPTY_LABEL, "Empty label" },
18        { LDNS_STATUS_LABEL_OVERFLOW, "Label length overflow" },
19        { LDNS_STATUS_DOMAINNAME_OVERFLOW, "Domainname length overflow" },
20        { LDNS_STATUS_DOMAINNAME_UNDERFLOW, "Domainname length underflow (zero length)" },
21        { LDNS_STATUS_DDD_OVERFLOW, "\\DDD sequence overflow (>255)" },
22        { LDNS_STATUS_PACKET_OVERFLOW, "Packet size overflow" },
23        { LDNS_STATUS_INVALID_POINTER, "Invalid compression pointer" },
24        { LDNS_STATUS_MEM_ERR, "General memory error" },
25        { LDNS_STATUS_INTERNAL_ERR, "Internal error, this should not happen" },
26        { LDNS_STATUS_SSL_ERR, "Error in SSL library" },
27        { LDNS_STATUS_ERR, "General LDNS error" },
28        { LDNS_STATUS_INVALID_INT, "Conversion error, integer expected" },
29        { LDNS_STATUS_INVALID_IP4, "Conversion error, ip4 addr expected" },
30        { LDNS_STATUS_INVALID_IP6, "Conversion error, ip6 addr expected" },
31        { LDNS_STATUS_INVALID_STR, "Conversion error, string expected" },
32	{ LDNS_STATUS_INVALID_B32_EXT, "Conversion error, b32 ext encoding expected" },
33        { LDNS_STATUS_INVALID_B64, "Conversion error, b64 encoding expected" },
34        { LDNS_STATUS_INVALID_HEX, "Conversion error, hex encoding expected" },
35        { LDNS_STATUS_INVALID_TIME, "Conversion error, time encoding expected" },
36        { LDNS_STATUS_NETWORK_ERR, "Could not send or receive, because of network error" },
37        { LDNS_STATUS_ADDRESS_ERR, "Could not start AXFR, because of address error" },
38        { LDNS_STATUS_FILE_ERR, "Could not open the files" },
39        { LDNS_STATUS_UNKNOWN_INET, "Uknown address family" },
40        { LDNS_STATUS_NOT_IMPL, "This function is not implemented (yet), please notify the developers - or not..." },
41	{ LDNS_STATUS_NULL, "Supplied value pointer null" },
42        { LDNS_STATUS_CRYPTO_UNKNOWN_ALGO, "Unknown cryptographic algorithm" },
43        { LDNS_STATUS_CRYPTO_ALGO_NOT_IMPL, "Cryptographic algorithm not implemented" },
44        { LDNS_STATUS_CRYPTO_NO_RRSIG, "No DNSSEC signature(s)" },
45        { LDNS_STATUS_CRYPTO_NO_DNSKEY, "No DNSSEC public key(s)" },
46        { LDNS_STATUS_CRYPTO_TYPE_COVERED_ERR, "The signature does not cover this RRset" },
47        { LDNS_STATUS_CRYPTO_NO_TRUSTED_DNSKEY, "No signatures found for trusted DNSSEC public key(s)" },
48        { LDNS_STATUS_CRYPTO_NO_DS, "No DS record(s)" },
49        { LDNS_STATUS_CRYPTO_NO_TRUSTED_DS, "Could not validate DS record(s)" },
50        { LDNS_STATUS_CRYPTO_NO_MATCHING_KEYTAG_DNSKEY, "No keys with the keytag and algorithm from the RRSIG found" },
51        { LDNS_STATUS_CRYPTO_VALIDATED, "Valid DNSSEC signature" },
52        { LDNS_STATUS_CRYPTO_BOGUS, "Bogus DNSSEC signature" },
53        { LDNS_STATUS_CRYPTO_SIG_EXPIRED, "DNSSEC signature has expired" },
54        { LDNS_STATUS_CRYPTO_SIG_NOT_INCEPTED, "DNSSEC signature not incepted yet" },
55	{ LDNS_STATUS_CRYPTO_TSIG_BOGUS, "Bogus TSIG signature" },
56	{ LDNS_STATUS_CRYPTO_TSIG_ERR, "Could not create TSIG signature" },
57        { LDNS_STATUS_CRYPTO_EXPIRATION_BEFORE_INCEPTION, "DNSSEC signature has expiration date earlier than inception date" },
58	{ LDNS_STATUS_ENGINE_KEY_NOT_LOADED, "Unable to load private key from engine" },
59        { LDNS_STATUS_NSEC3_ERR, "Error in NSEC3 denial of existence proof" },
60	{ LDNS_STATUS_RES_NO_NS, "No (valid) nameservers defined in the resolver" },
61	{ LDNS_STATUS_RES_QUERY, "No correct query given to resolver" },
62	{ LDNS_STATUS_WIRE_INCOMPLETE_HEADER, "header section incomplete" },
63	{ LDNS_STATUS_WIRE_INCOMPLETE_QUESTION, "question section incomplete" },
64	{ LDNS_STATUS_WIRE_INCOMPLETE_ANSWER, "answer section incomplete" },
65	{ LDNS_STATUS_WIRE_INCOMPLETE_AUTHORITY, "authority section incomplete" },
66	{ LDNS_STATUS_WIRE_INCOMPLETE_ADDITIONAL, "additional section incomplete" },
67	{ LDNS_STATUS_NO_DATA, "No data" },
68	{ LDNS_STATUS_CERT_BAD_ALGORITHM, "Bad algorithm type for CERT record" },
69	{ LDNS_STATUS_SYNTAX_TYPE_ERR, "Syntax error, could not parse the RR's type" },
70	{ LDNS_STATUS_SYNTAX_CLASS_ERR, "Syntax error, could not parse the RR's class" },
71	{ LDNS_STATUS_SYNTAX_TTL_ERR, "Syntax error, could not parse the RR's TTL" },
72	{ LDNS_STATUS_SYNTAX_INCLUDE_ERR_NOTIMPL, "Syntax error, $INCLUDE not implemented" },
73	{ LDNS_STATUS_SYNTAX_RDATA_ERR, "Syntax error, could not parse the RR's rdata" },
74	{ LDNS_STATUS_SYNTAX_DNAME_ERR, "Syntax error, could not parse the RR's dname(s)" },
75	{ LDNS_STATUS_SYNTAX_VERSION_ERR, "Syntax error, version mismatch" },
76	{ LDNS_STATUS_SYNTAX_ALG_ERR, "Syntax error, algorithm unknown or non parseable" },
77	{ LDNS_STATUS_SYNTAX_KEYWORD_ERR, "Syntax error, unknown keyword in input" },
78	{ LDNS_STATUS_SYNTAX_ERR, "Syntax error, could not parse the RR" },
79	{ LDNS_STATUS_SYNTAX_EMPTY, "Empty line was returned" },
80	{ LDNS_STATUS_SYNTAX_TTL, "$TTL directive was seen in the zone" },
81	{ LDNS_STATUS_SYNTAX_ORIGIN, "$ORIGIN directive was seen in the zone" },
82	{ LDNS_STATUS_SYNTAX_INCLUDE, "$INCLUDE directive was seen in the zone" },
83	{ LDNS_STATUS_SYNTAX_ITERATIONS_OVERFLOW, "Iterations count for NSEC3 record higher than maximum" },
84	{ LDNS_STATUS_SYNTAX_MISSING_VALUE_ERR, "Syntax error, value expected" },
85	{ LDNS_STATUS_SYNTAX_INTEGER_OVERFLOW, "Syntax error, integer value too large" },
86	{ LDNS_STATUS_SYNTAX_BAD_ESCAPE, "Syntax error, bad escape sequence" },
87	{ LDNS_STATUS_SOCKET_ERROR, "Error creating socket" },
88	{ LDNS_STATUS_DNSSEC_EXISTENCE_DENIED, "Existence denied by NSEC" },
89	{ LDNS_STATUS_DNSSEC_NSEC_RR_NOT_COVERED, "RR not covered by the given NSEC RRs" },
90	{ LDNS_STATUS_DNSSEC_NSEC_WILDCARD_NOT_COVERED, "wildcard not covered by the given NSEC RRs" },
91	{ LDNS_STATUS_DNSSEC_NSEC3_ORIGINAL_NOT_FOUND, "original of NSEC3 hashed name could not be found" },
92	{ LDNS_STATUS_MISSING_RDATA_FIELDS_RRSIG, "The RRSIG has to few rdata fields" },
93	{ LDNS_STATUS_MISSING_RDATA_FIELDS_KEY, "The DNSKEY has to few rdata fields" },
94	{ LDNS_STATUS_CRYPTO_SIG_EXPIRED_WITHIN_MARGIN,
95		"DNSSEC signature will expire too soon" },
96	{ LDNS_STATUS_CRYPTO_SIG_NOT_INCEPTED_WITHIN_MARGIN,
97		"DNSSEC signature not incepted long enough" },
98	{ LDNS_STATUS_DANE_UNKNOWN_CERTIFICATE_USAGE,
99		"Unknown TLSA Certificate Usage" },
100	{ LDNS_STATUS_DANE_UNKNOWN_SELECTOR, "Unknown TLSA Selector" },
101	{ LDNS_STATUS_DANE_UNKNOWN_MATCHING_TYPE,
102		"Unknown TLSA Matching Type" },
103	{ LDNS_STATUS_DANE_UNKNOWN_PROTOCOL,
104		"Unknown protocol. Only IPv4 and IPv6 are understood" },
105	{ LDNS_STATUS_DANE_UNKNOWN_TRANSPORT,
106		"Unknown transport. Should be one of {tcp, udp, sctp}" },
107	{ LDNS_STATUS_DANE_MISSING_EXTRA_CERTS,  /* Trust anchor assertion */
108		"More than one certificate should be provided" },
109	{ LDNS_STATUS_DANE_EXTRA_CERTS_NOT_USED, /* Trust anchor assertion */
110		"Non of the extra certificates is used to sign the first" },
111	{ LDNS_STATUS_DANE_OFFSET_OUT_OF_RANGE,   /* Trust anchor assertion */
112		"The offset was out of range" },
113	{ LDNS_STATUS_DANE_INSECURE,             /* Unused by library */
114		"The queried resource records were insecure" },
115	{ LDNS_STATUS_DANE_BOGUS,             /* Unused by library */
116		"The queried resource records were bogus" },
117	{ LDNS_STATUS_DANE_TLSA_DID_NOT_MATCH,
118		"The TLSA record(s) "
119		"did not match with the server certificate (chain)" },
120	{ LDNS_STATUS_DANE_NON_CA_CERTIFICATE,
121		"The certificate was not a CA certificate" },
122	{ LDNS_STATUS_DANE_PKIX_DID_NOT_VALIDATE,
123		"Could not PKIX validate" },
124	{ LDNS_STATUS_DANE_PKIX_NO_SELF_SIGNED_TRUST_ANCHOR,
125		"The validation path "
126		"did not end in a self-signed certificate" },
127	{ 0, NULL }
128};
129
130const char *
131ldns_get_errorstr_by_id(ldns_status err)
132{
133        ldns_lookup_table *lt;
134
135        lt = ldns_lookup_by_id(ldns_error_str, err);
136
137        if (lt) {
138                return lt->name;
139        }
140        return NULL;
141}
142