1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
|
/****************************************************************************
**
** Copyright (C) 2009 Nokia Corporation and/or its subsidiary(-ies).
** Contact: Nokia Corporation (qt-info@nokia.com)
**
** This file is part of the QtNetwork module of the Qt Toolkit.
**
** $QT_BEGIN_LICENSE:LGPL$
** No Commercial Usage
** This file contains pre-release code and may not be distributed.
** You may use this file in accordance with the terms and conditions
** contained in the either Technology Preview License Agreement or the
** Beta Release License Agreement.
**
** GNU Lesser General Public License Usage
** Alternatively, this file may be used under the terms of the GNU Lesser
** General Public License version 2.1 as published by the Free Software
** Foundation and appearing in the file LICENSE.LGPL included in the
** packaging of this file. Please review the following information to
** ensure the GNU Lesser General Public License version 2.1 requirements
** will be met: http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html.
**
** In addition, as a special exception, Nokia gives you certain
** additional rights. These rights are described in the Nokia Qt LGPL
** Exception version 1.0, included in the file LGPL_EXCEPTION.txt in this
** package.
**
** GNU General Public License Usage
** Alternatively, this file may be used under the terms of the GNU
** General Public License version 3.0 as published by the Free Software
** Foundation and appearing in the file LICENSE.GPL included in the
** packaging of this file. Please review the following information to
** ensure the GNU General Public License version 3.0 requirements will be
** met: http://www.gnu.org/copyleft/gpl.html.
**
** If you are unsure which license is appropriate for your use, please
** contact the sales department at http://qt.nokia.com/contact.
** $QT_END_LICENSE$
**
****************************************************************************/
/*!
\class QSslError
\brief The QSslError class provides an SSL error.
\since 4.3
\reentrant
\ingroup io
\ingroup ssl
\inmodule QtNetwork
QSslError provides a simple API for managing errors during QSslSocket's
SSL handshake.
\sa QSslSocket, QSslCertificate, QSslCipher
*/
/*!
\enum QSslError::SslError
Describes all recognized errors that can occur during an SSL handshake.
\value NoError
\value UnableToGetIssuerCertificate
\value UnableToDecryptCertificateSignature
\value UnableToDecodeIssuerPublicKey
\value CertificateSignatureFailed
\value CertificateNotYetValid
\value CertificateExpired
\value InvalidNotBeforeField
\value InvalidNotAfterField
\value SelfSignedCertificate
\value SelfSignedCertificateInChain
\value UnableToGetLocalIssuerCertificate
\value UnableToVerifyFirstCertificate
\value CertificateRevoked
\value InvalidCaCertificate
\value PathLengthExceeded
\value InvalidPurpose
\value CertificateUntrusted
\value CertificateRejected
\value SubjectIssuerMismatch
\value AuthorityIssuerSerialNumberMismatch
\value NoPeerCertificate
\value HostNameMismatch
\value UnspecifiedError
\value NoSslSupport
\sa QSslError::errorString()
*/
#include "qsslerror.h"
#ifndef QT_NO_DEBUG_STREAM
#include <QtCore/qdebug.h>
QT_BEGIN_NAMESPACE
#endif
class QSslErrorPrivate
{
public:
QSslError::SslError error;
QSslCertificate certificate;
};
/*!
Constructs a QSslError object. The two optional arguments specify the \a
error that occurred, and which \a certificate the error relates to.
\sa QSslCertificate
*/
QSslError::QSslError(SslError error, const QSslCertificate &certificate)
: d(new QSslErrorPrivate)
{
d->error = error;
d->certificate = certificate;
}
/*!
Constructs an identical copy of \a other.
*/
QSslError::QSslError(const QSslError &other)
: d(new QSslErrorPrivate)
{
*d = *other.d;
}
/*!
Destroys the QSslError object.
*/
QSslError::~QSslError()
{
delete d;
}
/*!
\since 4.4
Assigns the contents of \a other to this error.
*/
QSslError &QSslError::operator=(const QSslError &other)
{
*d = *other.d;
return *this;
}
/*!
\since 4.4
Returns true if this error is equal to \a other; otherwise returns false.
*/
bool QSslError::operator==(const QSslError &other) const
{
return d->error == other.d->error
&& d->certificate == other.d->certificate;
}
/*!
\fn bool QSslError::operator!=(const QSslError &other) const
\since 4.4
Returns true if this error is not equal to \a other; otherwise returns
false.
*/
/*!
Returns the type of the error.
\sa errorString(), certificate()
*/
QSslError::SslError QSslError::error() const
{
return d->error;
}
/*!
Returns a short localized human-readable description of the error.
\sa error(), certificate()
*/
QString QSslError::errorString() const
{
QString errStr;
switch (d->error) {
case NoError:
errStr = QObject::tr(QT_TRANSLATE_NOOP(QSslError, "No error"));
break;
case UnableToGetIssuerCertificate:
errStr = QObject::tr(QT_TRANSLATE_NOOP(QSslError, "The issuer certificate could not be found"));
break;
case UnableToDecryptCertificateSignature:
errStr = QObject::tr(QT_TRANSLATE_NOOP(QSslError, "The certificate signature could not be decrypted"));
break;
case UnableToDecodeIssuerPublicKey:
errStr = QObject::tr(QT_TRANSLATE_NOOP(QSslError, "The public key in the certificate could not be read"));
break;
case CertificateSignatureFailed:
errStr = QObject::tr(QT_TRANSLATE_NOOP(QSslError, "The signature of the certificate is invalid"));
break;
case CertificateNotYetValid:
errStr = QObject::tr(QT_TRANSLATE_NOOP(QSslError, "The certificate is not yet valid"));
break;
case CertificateExpired:
errStr = QObject::tr(QT_TRANSLATE_NOOP(QSslError, "The certificate has expired"));
break;
case InvalidNotBeforeField:
errStr = QObject::tr(QT_TRANSLATE_NOOP(QSslError, "The certificate's notBefore field contains an invalid time"));
break;
case InvalidNotAfterField:
errStr = QObject::tr(QT_TRANSLATE_NOOP(QSslError, "The certificate's notAfter field contains an invalid time"));
break;
case SelfSignedCertificate:
errStr = QObject::tr(QT_TRANSLATE_NOOP(QSslError, "The certificate is self-signed, and untrusted"));
break;
case SelfSignedCertificateInChain:
errStr = QObject::tr(QT_TRANSLATE_NOOP(QSslError, "The root certificate of the certificate chain is self-signed, and untrusted"));
break;
case UnableToGetLocalIssuerCertificate:
errStr = QObject::tr(QT_TRANSLATE_NOOP(QSslError, "The issuer certificate of a locally looked up certificate could not be found"));
break;
case UnableToVerifyFirstCertificate:
errStr = QObject::tr(QT_TRANSLATE_NOOP(QSslError, "No certificates could be verified"));
break;
case InvalidCaCertificate:
errStr = QObject::tr(QT_TRANSLATE_NOOP(QSslError, "One of the CA certificates is invalid"));
break;
case PathLengthExceeded:
errStr = QObject::tr(QT_TRANSLATE_NOOP(QSslError, "The basicConstraints pathlength parameter has been exceeded"));
break;
case InvalidPurpose:
errStr = QObject::tr(QT_TRANSLATE_NOOP(QSslError, "The supplied certificate is unsuited for this purpose"));
break;
case CertificateUntrusted:
errStr = QObject::tr(QT_TRANSLATE_NOOP(QSslError, "The root CA certificate is not trusted for this purpose"));
break;
case CertificateRejected:
errStr = QObject::tr(QT_TRANSLATE_NOOP(QSslError, "The root CA certificate is marked to reject the specified purpose"));
break;
case SubjectIssuerMismatch: // hostname mismatch
errStr = QObject::tr(QT_TRANSLATE_NOOP(QSslError,
"The current candidate issuer certificate was rejected because its"
" subject name did not match the issuer name of the current certificate"));
break;
case AuthorityIssuerSerialNumberMismatch:
errStr = QObject::tr(QT_TRANSLATE_NOOP(QSslError, "The current candidate issuer certificate was rejected because"
" its issuer name and serial number was present and did not match the"
" authority key identifier of the current certificate"));
break;
case NoPeerCertificate:
errStr = QObject::tr(QT_TRANSLATE_NOOP(QSslError, "The peer did not present any certificate"));
break;
case HostNameMismatch:
errStr = QObject::tr(QT_TRANSLATE_NOOP(QSslError,
"The host name did not match any of the valid hosts"
" for this certificate"));
break;
case NoSslSupport:
break;
default:
errStr = QObject::tr(QT_TRANSLATE_NOOP(QSslError, "Unknown error"));
break;
}
return errStr;
}
/*!
Returns the certificate associated with this error, or a null certificate
if the error does not relate to any certificate.
\sa error(), errorString()
*/
QSslCertificate QSslError::certificate() const
{
return d->certificate;
}
#ifndef QT_NO_DEBUG_STREAM
//class QDebug;
QDebug operator<<(QDebug debug, const QSslError &error)
{
debug << error.errorString();
return debug;
}
QDebug operator<<(QDebug debug, const QSslError::SslError &error)
{
debug << QSslError(error).errorString();
return debug;
}
#endif
QT_END_NAMESPACE
|
