This topic describes only module-specific error codes. For details about universal error codes, see Universal Error Codes.
19020001 Memory Error
Error Message
Memory malloc failed.
Description
A memory error occurs.
Possible Causes
The memory allocation failed.
Solution
- Check whether the system is running properly.
- Check whether the service data is too long.
19020002 Runtime Error
Error Message
Runtime error.
Description
This error code is reported if an error occurs during running.
Possible Causes
- This error code is reported if memory copy fails in the system.
- A null pointer occurs in the system. For example, the certificate chain verifier object is null.
- This error code is reported if the native object fails to be obtained or the parameter fails to be converted. For example, the NAPI or ANI interface fails to be called.
Solution
- Check whether the memory space is sufficient. If not, clear the memory and try again.
- Check whether the system is normal. If not, try again later or restart the device.
- If the fault persists, collect log information and contact Huawei technical support.
19020003 Parameter Check Failure
Error Message
Parameter check failed.
Description
An error occurs during parameter verification.
Possible Causes
The input value is out of range.
Solution
Check whether the input parameters are correct.
19030001 Failed to Invoke the Third-party Cryptographic API
Error Message
Crypto operation error.
Description
Failed to invoke the third-party cryptographic API.
Possible Causes
An error occurs when the cryptography framework interacts with a third-party algorithm library.
Solution
- Check whether the input parameters are correct.
- Check whether the third-party algorithm library functions properly.
19030002 Certificate Signature Verification Failed
Error Message
The certificate signature verification failed.
Description
The certificate signature verification failed.
Possible Causes
Incorrect certificate signature information is found during the signature verification.
Solution
Check whether the certificate is correct.
19030003 Certificate Has Not Taken Effect
Error Message
The certificate has not taken effect.
Description
The certificate has not taken effect.
Possible Causes
The certificate has not taken effect. The effective time of the certificate is later than the current system time or the time specified by the service.
Solution
- Check whether the certificate is correct.
- Check whether the system time is correct.
- Compare the certificate effective time with the current system time to determine whether the certificate has taken effect.
19030004 Certificate Expired
Error Message
The certificate has expired.
Description
The certificate has expired.
Possible Causes
The certificate has expired. The certificate expiration time is earlier than the current system time or the time specified by the service.
Solution
- Check whether the certificate is correct.
- Check whether the system time is correct.
- Compare the certificate expiration time with the current system time to determine whether the certificate has expired.
19030005 Failed to Obtain the Certificate Issuer
Error Message
Failed to obtain the certificate issuer.
Description
Failed to obtain the certificate issuer.
Possible Causes
The certificate issuer cannot be obtained during certificate verification.
Solution
Check whether the certificate is correct.
19030006 Key Cannot be Used for Signing a Certificate
Error Message
The key cannot be used for signing a certificate.
Description
The key cannot be used for signing a certificate.
Possible Causes
The key cannot be used to sign certificates.
Solution
Check whether the certificate is correct.
19030007 Key Cannot be Used for Digital Signature
Error Message
The key cannot be used for digital signature.
Description
The key cannot be used for digital signature.
Possible Causes
The key cannot be used for digital signature.
Solution
Check whether the certificate is correct.
19030008 Incorrect Private Key Password
Error Message
Maybe wrong password.
Description
The password for the private key is incorrect.
Possible Causes
The password for the private key is incorrect.
Solution
Check that the private key password is correct.
19030009 Untrusted Certificate
Error Message
Untrusted certificate.
Description
This error code is reported if the certificate is untrusted.
Possible Causes
During certificate chain verification, the certificate is not a trust anchor certificate.
Solution
If you trust the root certificate of the certificate to be verified, add it to the trust certificate list and try again. Otherwise, do not trust the certificate to be verified.
19030010 Certificate Revoked
Error Message
The certificate has been revoked.
Description
This error code is reported if the certificate has been revoked.
Possible Causes
The certificate is in the CRL or the OCSP response indicates that the certificate has been revoked.
Solution
The certificate has been revoked. Do not trust the certificate. Replace the certificate with a valid one.
19030011 Unknown Key Extensions
Error Message
Unsupported critical extension.
Description
The certificate has unknown key extensions.
Possible Causes
The certificate has unidentified key extensions. All key extensions must be processed according to X.509.
Solution
You can ignore the error by setting ignoreErrs, and obtain the extension data through the certificate algorithm library APIs for verification.
19030012 Host Name Mismatch
Error Message
Hostname mismatch in the certificate.
Description
This error code is reported if the hostname is not matched.
Possible Causes
The subject alternative name (SAN) or common name (CN) of the certificate does not contain the specified host name.
Solution
Check whether the hostnames parameter is correctly set. If it is correct, do not trust the certificate.
19030013 Email Address Mismatch
Error Message
Email address mismatch in the certificate.
Description
This error code is reported if the email address in the certificate is not matched.
Possible Causes
The certificate does not contain the specified email address.
Solution
Check whether the emailAddresses parameter is correctly set. If it is correct, do not trust the certificate.
19030014 Key Usage Mismatch
Error Message
Key usage mismatch in the certificate.
Description
Certificate key usage mismatch in the certificate.
Possible Causes
The key usage extension of the certificate does not contain the specified key usage.
Solution
Check whether the keyUsage parameter is correctly set. If it is correct, do not trust the certificate.
19030015 Failed to Obtain the CRL
Error Message
Failed to obtain the certificate revocation list.
Description
Failed to obtain the CRL.
Possible Causes
- No CRL data is provided.
- The certificate does not contain the CRL distribution point (CDP) extension.
- The CRL cannot be downloaded from the CDP extension.
Solution
- Check whether the CRL data is provided.
- If online CRL download is enabled, check whether the certificate contains the CDP extension.
- If online CRL download is enabled, check whether the Internet connection is normal and ensure normal Internet access.
- You can set ignoreErrs to ignore the error indicating that the CRL is not found during verification of the certificate revocation status if it is allowed.
19030016 Invalid CRL
Error Message
The certificate revocation list has not taken effect.
Description
The CRL has not taken effect.
Possible Causes
The effective time of the CRL is later than the current verification time.
Solution
- You can set ignoreErrs to ignore the error if the CRL effective time is allowed to be later than the current verification time.
- If date is not set, check whether the device time is correct.
- If date is set, check whether the parameter is set properly.
19030017 CRL Has Expired
Error Message
The certificate revocation list has expired.
Description
The CRL has expired.
Possible Causes
The expiration time of the CRL is earlier than the current verification time.
Solution
- You can set ignoreErrs to ignore the error if the CRL expiration time is allowed to be earlier than the current verification time.
- If date is not set, check whether the device time is correct.
- If date is set, check whether the parameter is set properly.
19030018 Failed to Verify the CRL Signature
Error Message
Failed to verify the signature of the certificate revocation list.
Description
Failed to verify the signature of the CRL.
Possible Causes
The CRL signature verification fails. The possible cause is that the signature is incorrect or the issuer certificate is not matched.
Solution
Check whether the CRL data is correct and whether the issuer certificate is matched.
19030019 Failed to Obtain the CRL Issuer
Error Message
Failed to find the issuer of the certificate revocation list.
Description
Failed to obtain the issuer of the CRL.
Possible Causes
The CRL issuer certificate is not found.
Solution
This error may occur during partial certificate chain verification. You are advised to verify only the revocation status of the end entity certificate in this scenario. If you want to verify the revocation status of all certificates, do not to set partial certificate chain verification.
19030020 Failed to Obtain the OCSP Response
Error Message
Failed to obtain the OCSP response.
Description
Failed to obtain the Online Certificate Status Protocol (OCSP) response.
Possible Causes
- No OCSP response data is provided.
- The certificate does not contain the OCSP URL in the AIA extension.
- No response can be obtained from the OCSP server.
Solution
- Check whether the OCSP response data is provided.
- If online OCSP check is enabled, check whether the certificate contains the OCSP URL.
- If online OCSP check is enabled, check whether the Internet connection is normal and ensure normal Internet access.
- You can set ignoreErrs to ignore the error indicating that the OCSP response is not found during verification of the certificate revocation status if it is allowed.
19030021 Invalid OCSP response.
Error Message
Invalid OCSP response.
Description
The OCSP response is invalid.
Possible Causes
The OCSP response data is in an incorrect format, cannot be parsed, or has expired.
Solution
- Check whether the OCSP response data is correct.
19030022 OCSP Signature Verification Failure
Error Message
Failed to verify the OCSP signature.
Description
This error code is reported if the OCSP signature verification fails.
Possible Causes
The signature verification of the OCSP response fails. The possible cause is that the signature is incorrect or the signer certificate is not matched.
Solution
Add the signer certificate and issuer certificate of the OCSP response to the untrusted or trusted certificate list, and add the root certificate to the trusted certificate list.
19030023 Unknown OCSP Certificate Status
Error Message
Unknown OCSP certificate status.
Description
The status of the OCSP certificate is unknown.
Possible Causes
The OCSP server cannot determine the certificate status.
Solution
Check whether the OCSP server is working properly or verify the certificate revocation status using other methods.
19030024 Network Connection Timeout
Error Message
Network connection timed out.
Description
This error code is reported if network connection times out.
Possible Causes
- Downloading the intermediate CA certificate times out.
- CRL download times out.
- The OCSP request times out.
Solution
Check the Internet connection and ensure that the related server can be accessed.