The LDAP tools code no longer has any knowledge of the NSS file names; the certpath2keypath() function has been deleted and we now simply use the certdbpath as keydbpath when it is provided (it makes no difference in the end). But note that because we need to maintain backwards compatibility, the libssldap code used by the ldapssl_.*_init() functions still knows the default name of the NSS module file (secmod.db), and the code also relies on the fact that the suffix for the key and cert files is ".db" and that the first letter in the main part of the name is either 'c' or 'k'. Also fixed a bug that caused the module file name specified on the LDAP tools command line (-m name) to be ignored. The ldapsearch and ldapcmp tools now exit with LDAP_NO_MEMORY if an LDIF fragment can't be constructed. Also fixed some issues reported by lint: Return values that were ignored. Make more functions and global variables static. Add /*ARGSUSED*/ and similar lint-friendly comments. git-svn-id: svn://10.0.0.236/trunk@139935 18797224-902f-48f8-a5cc-f745e15eee43
190 lines
4.3 KiB
C
190 lines
4.3 KiB
C
/*
|
|
* The contents of this file are subject to the Netscape Public
|
|
* License Version 1.1 (the "License"); you may not use this file
|
|
* except in compliance with the License. You may obtain a copy of
|
|
* the License at http://www.mozilla.org/NPL/
|
|
*
|
|
* Software distributed under the License is distributed on an "AS
|
|
* IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
|
|
* implied. See the License for the specific language governing
|
|
* rights and limitations under the License.
|
|
*
|
|
* The Original Code is Mozilla Communicator client code, released
|
|
* March 31, 1998.
|
|
*
|
|
* The Initial Developer of the Original Code is Netscape
|
|
* Communications Corporation. Portions created by Netscape are
|
|
* Copyright (C) 1998-1999 Netscape Communications Corporation. All
|
|
* Rights Reserved.
|
|
*
|
|
* Contributor(s):
|
|
*/
|
|
|
|
/*
|
|
* errormap.c - map NSPR and NSS errors to strings
|
|
*/
|
|
|
|
#if defined( _WINDOWS )
|
|
#include <windows.h>
|
|
#include "proto-ntutil.h"
|
|
#endif
|
|
|
|
#include <nspr.h>
|
|
#include <ssl.h>
|
|
|
|
#include <ldap.h>
|
|
#include <ldap_ssl.h>
|
|
|
|
|
|
/*
|
|
* function protoypes
|
|
*/
|
|
static const char *SECU_Strerror(PRErrorCode errNum);
|
|
|
|
|
|
|
|
/*
|
|
* return the string equivalent of an NSPR error
|
|
*/
|
|
|
|
const char *
|
|
LDAP_CALL
|
|
ldapssl_err2string( const int prerrno )
|
|
{
|
|
const char *s;
|
|
|
|
if (( s = SECU_Strerror( (PRErrorCode)prerrno )) == NULL ) {
|
|
s = "unknown";
|
|
}
|
|
|
|
return( s );
|
|
}
|
|
|
|
/*
|
|
****************************************************************************
|
|
* The code below this point was provided by Nelson Bolyard <nelsonb> of the
|
|
* Netscape Certificate Server team on 27-March-1998.
|
|
* Taken from the file ns/security/cmd/lib/secerror.c on NSS_1_BRANCH.
|
|
* Last updated from there: 24-July-1998 by Mark Smith <mcs>
|
|
* Last updated from there: 14-July-1999 by chuck boatwright <cboatwri>
|
|
*
|
|
*
|
|
* All of the Directory Server specific changes are enclosed inside
|
|
* #ifdef NS_DIRECTORY.
|
|
****************************************************************************
|
|
*/
|
|
#include "nspr.h"
|
|
|
|
/*
|
|
* XXXceb as a hack, we will locally define NS_DIRECTORY
|
|
*/
|
|
#define NS_DIRECTORY 1
|
|
|
|
struct tuple_str {
|
|
PRErrorCode errNum;
|
|
const char * errString;
|
|
};
|
|
|
|
typedef struct tuple_str tuple_str;
|
|
|
|
#define ER2(a,b) {a, b},
|
|
#define ER3(a,b,c) {a, c},
|
|
|
|
#include "secerr.h"
|
|
#include "sslerr.h"
|
|
|
|
static const tuple_str errStrings[] = {
|
|
|
|
/* keep this list in asceding order of error numbers */
|
|
#ifdef NS_DIRECTORY
|
|
#include "sslerrstrs.h"
|
|
#include "secerrstrs.h"
|
|
#include "prerrstrs.h"
|
|
/*
|
|
* XXXceb -- LDAPSDK won't care about disconnect
|
|
#include "disconnect_error_strings.h"
|
|
*/
|
|
|
|
#else /* NS_DIRECTORY */
|
|
#include "SSLerrs.h"
|
|
#include "SECerrs.h"
|
|
#include "NSPRerrs.h"
|
|
#endif /* NS_DIRECTORY */
|
|
|
|
};
|
|
|
|
static const PRInt32 numStrings = sizeof(errStrings) / sizeof(tuple_str);
|
|
|
|
/* Returns a UTF-8 encoded constant error string for "errNum".
|
|
* Returns NULL of errNum is unknown.
|
|
*/
|
|
#ifdef NS_DIRECTORY
|
|
static
|
|
#endif /* NS_DIRECTORY */
|
|
const char *
|
|
SECU_Strerror(PRErrorCode errNum) {
|
|
PRInt32 low = 0;
|
|
PRInt32 high = numStrings - 1;
|
|
PRInt32 i;
|
|
PRErrorCode num;
|
|
static int initDone;
|
|
|
|
/* make sure table is in ascending order.
|
|
* binary search depends on it.
|
|
*/
|
|
if (!initDone) {
|
|
PRErrorCode lastNum = 0x80000000;
|
|
for (i = low; i <= high; ++i) {
|
|
num = errStrings[i].errNum;
|
|
if (num <= lastNum) {
|
|
|
|
/*
|
|
* XXXceb
|
|
* We aren't handling out of sequence errors.
|
|
*/
|
|
|
|
|
|
#if 0
|
|
#ifdef NS_DIRECTORY
|
|
LDAPDebug( LDAP_DEBUG_ANY,
|
|
"sequence error in error strings at item %d\n"
|
|
"error %d (%s)\n",
|
|
i, lastNum, errStrings[i-1].errString );
|
|
LDAPDebug( LDAP_DEBUG_ANY,
|
|
"should come after \n"
|
|
"error %d (%s)\n",
|
|
num, errStrings[i].errString, 0 );
|
|
#else /* NS_DIRECTORY */
|
|
fprintf(stderr,
|
|
"sequence error in error strings at item %d\n"
|
|
"error %d (%s)\n"
|
|
"should come after \n"
|
|
"error %d (%s)\n",
|
|
i, lastNum, errStrings[i-1].errString,
|
|
num, errStrings[i].errString);
|
|
#endif /* NS_DIRECTORY */
|
|
#endif /* 0 */
|
|
}
|
|
lastNum = num;
|
|
}
|
|
initDone = 1;
|
|
}
|
|
|
|
/* Do binary search of table. */
|
|
while (low + 1 < high) {
|
|
i = (low + high) / 2;
|
|
num = errStrings[i].errNum;
|
|
if (errNum == num)
|
|
return errStrings[i].errString;
|
|
if (errNum < num)
|
|
high = i;
|
|
else
|
|
low = i;
|
|
}
|
|
if (errNum == errStrings[low].errNum)
|
|
return errStrings[low].errString;
|
|
if (errNum == errStrings[high].errNum)
|
|
return errStrings[high].errString;
|
|
return NULL;
|
|
}
|