DicomSecurityCertificateExceptionCode Enumeration

Summary

A list of errors that can occur during the certificate exchange/verification phase of TLS DICOM Security negotiation.

Syntax

C++/CLI

public enum DicomSecurityCertificateExceptionCode

public: 
   enum class DicomSecurityCertificateExceptionCode sealed

Members

Value	Member	Description
0	Success	operation was successful
1	Unspecified	unspecified error.
2	UnableToGetIssuerCert	issuer certificate could not be found: this occurs if the issuer certificate of an untrusted certificate cannot be found.
3	UnableToGetCrl	Certificate revocation list (CRL) of a certificate could not be found.
4	UnableToDecryptCertSignature	certificate signature could not be decrypted. This means that the actual signature value could not be determined rather than it not matching the expected value, this is only meaningful for RSA keys.
5	UnableToDecryptCrlSignature	Certificate revocation list (CRL) signature could not be decrypted: this means that the actual signature value could not be determined rather than it not matching the expected value.
6	UnableToDecodeIssuerPublicKey	public key in the certificate SubjectPublicKeyInfo could not be read.
7	CertSignatureFailure	signature of the certificate is invalid.
8	CrlSignatureFailure	signature of the certificate is invalid.
9	CertNotYetValid	certificate is not yet valid: the notBefore date is after the current time.
10	CertHasExpired	certificate has expired: that is the notAfter date is before the current time.
11	CrlNotYetValid	Certificate revocation list (CRL) is not yet valid.
12	CrlHasExpired	Certificate revocation list (CRL) has expired
13	ErrorInCertNotBeforeField	certificate notBefore field contains an invalid time.
14	ErrorInCertNotAfterField	certificate notAfter field contains an invalid time.
15	ErrorInCrlLastUpdateField	CRL lastUpdate field contains an invalid time.
16	ErrorInCrlNextUpdateField	CRL nextUpdate field contains an invalid time.
17	OutOfMem	an error occurred trying to allocate memory.
18	DepthZeroSelfSignedCert	passed certificate is self signed and the same certificate cannot be found in the list of trusted certificates.
19	SelfSignedCertInChain	certificate chain could be built up using the untrusted certificates but the root could not be found locally.
20	UnableToGetIssuerCertLocally	issuer certificate of a locally looked up certificate could not be found. This normally means the list of trusted certificates is not complete.
21	UnableToVerifyLeafSignature	no signatures could be verified because the chain contains only one certificate and it is not self signed.
22	CertChainTooLong	certificate chain length is greater than the supplied maximum depth.
23	CertRevoked	certificate has been revoked.
24	InvalidCa	a CA certificate is invalid. Either it is not a CA or its extensions are not consistent with the supplied purpose.
25	PathLengthExceeded	basicConstraints pathlength parameter has been exceeded.
26	InvalidPurpose	supplied certificate cannot be used for the specified purpose.
27	CertUntrusted	root CA is not marked as trusted for the specified purpose.
28	CertRejected	root CA is marked to reject the specified purpose.
29	SubjectIssuerMismatch	current candidate issuer certificate was rejected because its subject name did not match the issuer name of the current certificate.
30	AkidSkidMismatch	current candidate issuer certificate was rejected because its subject key identifier was present and did not match the authority key identifier current certificate.
31	AkidIssuerSerialMismatch	current candidate issuer certificate was rejected because its issuer name and serial number was present and did not match the authority key identifier of the current certificate.
32	KeyusageNoCertsign	current candidate issuer certificate was rejected because its keyUsage extension does not permit certificate signing.
33	UnableToGetCrlIssuer	unable to get CRL issuer certificate.
34	UnhandledCriticalExtension	un-handled critical extension.
35	KeyusageNoCrlSign	key usage does not include CRL signing.
36	UnhandledCriticalCrlExtension	un-handled critical CRL extension
37	InvalidNonCa	invalid non-CA certificate has CA markings.
38	ProxyPathLengthExceeded	proxy path length constraint exceeded.
39	KeyusageNoDigitalSignature	key usage does not include digital signature, and therefore cannot sign certificates.
40	ProxyCertificatesNotAllowed	proxy certificates not allowed unless the -allow_proxy_certs option is used.
41	InvalidExtension	a certificate extension had an invalid value (for example an incorrect encoding) or some value inconsistent with other extensions.
42	InvalidPolicyExtension	a certificate policies extension had an invalid value (for example an incorrect encoding) or some value inconsistent with other extensions.
43	NoExplicitPolicy	verification flags were set to require and explicit policy but none was present.
44	DifferentCrlScope	The only CRLs that could be found did not match the scope of the certificate.
45	UnsupportedExtensionFeature	Some feature of a certificate extension is not supported
46	UnnestedResource	RFC 3779 resource not subset of parent's resources
47	PermittedViolation	a name constraint violation occurred in the permitted subtrees.
48	ExcludedViolation	a name constraint violation occurred in the excluded subtrees.
49	SubtreeMinmax	a certificate name constraints extension included a minimum or maximum field
50	ApplicationVerification	an application specific error occurred.
51	UnsupportedConstraintType	an unsupported name constraint type was encountered.
52	UnsupportedConstraintSyntax	format of the name constraint is not recognized: for example an email address format of a form not mentioned in RFC3280. This could be caused by a garbage extension or some new feature not currently supported.
53	UnsupportedNameSyntax	unsupported or invalid name syntax.
54	CrlPathValidationError	an error occurred when attempting to verify the CRL path.
56	SuiteBInvalidVersion	Suite B: certificate version invalid.
57	SuiteBInvalidAlgorithm	Suite B: invalid public key algorithm.
58	SuiteBInvalidCurve	Suite B: invalid ECC curve.
59	SuiteBInvalidSignatureAlgorithm	Suite B: invalid signature algorithm.
60	SuiteBLosNotAllowed	Suite B: curve not allowed for this LOS.
61	SuiteBCannotSignP384WithP256	Suite B: cannot sign P-384 with P-256.
62	HostnameMismatch	hostname mismatch.
63	EmailMismatch	email address mismatch.
64	IpAddressMismatch	IP address mismatch.
65	InvalidCall	invalid certificate verification context.
66	StoreLookup	issuer certificate lookup error.
67	ProxySubjectNameViolation	proxy subject name violation.

Requirements

Target Platforms

Reference

Leadtools.Dicom Namespace

DicomSecurityCertificateException

OnVerify

Download our FREE evaluation

Help Version 23.0.2024.8.20

Leadtools.Dicom Assembly

Introduction

Getting Started

Namespaces

Leadtools.Dicom Namespace

Assemblies