/src/openssl/ssl/ssl_stat.c
Line  | Count  | Source  | 
1  |  | /*  | 
2  |  |  * Copyright 1995-2025 The OpenSSL Project Authors. All Rights Reserved.  | 
3  |  |  * Copyright 2005 Nokia. All rights reserved.  | 
4  |  |  *  | 
5  |  |  * Licensed under the Apache License 2.0 (the "License").  You may not use  | 
6  |  |  * this file except in compliance with the License.  You can obtain a copy  | 
7  |  |  * in the file LICENSE in the source distribution or at  | 
8  |  |  * https://www.openssl.org/source/license.html  | 
9  |  |  */  | 
10  |  |  | 
11  |  | #include <stdio.h>  | 
12  |  | #include "ssl_local.h"  | 
13  |  | #include "internal/ssl_unwrap.h"  | 
14  |  |  | 
15  |  | const char *SSL_state_string_long(const SSL *s)  | 
16  | 0  | { | 
17  | 0  |     const SSL_CONNECTION *sc = SSL_CONNECTION_FROM_CONST_SSL(s);  | 
18  |  | 
  | 
19  | 0  |     if (sc == NULL || ossl_statem_in_error(sc))  | 
20  | 0  |         return "error";  | 
21  |  |  | 
22  | 0  |     switch (SSL_get_state(s)) { | 
23  | 0  |     case TLS_ST_CR_CERT_STATUS:  | 
24  | 0  |         return "SSLv3/TLS read certificate status";  | 
25  | 0  |     case TLS_ST_CW_NEXT_PROTO:  | 
26  | 0  |         return "SSLv3/TLS write next proto";  | 
27  | 0  |     case TLS_ST_SR_NEXT_PROTO:  | 
28  | 0  |         return "SSLv3/TLS read next proto";  | 
29  | 0  |     case TLS_ST_SW_CERT_STATUS:  | 
30  | 0  |         return "SSLv3/TLS write certificate status";  | 
31  | 0  |     case TLS_ST_BEFORE:  | 
32  | 0  |         return "before SSL initialization";  | 
33  | 0  |     case TLS_ST_OK:  | 
34  | 0  |         return "SSL negotiation finished successfully";  | 
35  | 0  |     case TLS_ST_CW_CLNT_HELLO:  | 
36  | 0  |         return "SSLv3/TLS write client hello";  | 
37  | 0  |     case TLS_ST_CR_SRVR_HELLO:  | 
38  | 0  |         return "SSLv3/TLS read server hello";  | 
39  | 0  |     case TLS_ST_CR_CERT:  | 
40  | 0  |         return "SSLv3/TLS read server certificate";  | 
41  | 0  |     case TLS_ST_CR_COMP_CERT:  | 
42  | 0  |         return "TLSv1.3 read server compressed certificate";  | 
43  | 0  |     case TLS_ST_CR_KEY_EXCH:  | 
44  | 0  |         return "SSLv3/TLS read server key exchange";  | 
45  | 0  |     case TLS_ST_CR_CERT_REQ:  | 
46  | 0  |         return "SSLv3/TLS read server certificate request";  | 
47  | 0  |     case TLS_ST_CR_SESSION_TICKET:  | 
48  | 0  |         return "SSLv3/TLS read server session ticket";  | 
49  | 0  |     case TLS_ST_CR_SRVR_DONE:  | 
50  | 0  |         return "SSLv3/TLS read server done";  | 
51  | 0  |     case TLS_ST_CW_CERT:  | 
52  | 0  |         return "SSLv3/TLS write client certificate";  | 
53  | 0  |     case TLS_ST_CW_COMP_CERT:  | 
54  | 0  |         return "TLSv1.3 write client compressed certificate";  | 
55  | 0  |     case TLS_ST_CW_KEY_EXCH:  | 
56  | 0  |         return "SSLv3/TLS write client key exchange";  | 
57  | 0  |     case TLS_ST_CW_CERT_VRFY:  | 
58  | 0  |         return "SSLv3/TLS write certificate verify";  | 
59  | 0  |     case TLS_ST_CW_CHANGE:  | 
60  | 0  |     case TLS_ST_SW_CHANGE:  | 
61  | 0  |         return "SSLv3/TLS write change cipher spec";  | 
62  | 0  |     case TLS_ST_CW_FINISHED:  | 
63  | 0  |     case TLS_ST_SW_FINISHED:  | 
64  | 0  |         return "SSLv3/TLS write finished";  | 
65  | 0  |     case TLS_ST_CR_CHANGE:  | 
66  | 0  |     case TLS_ST_SR_CHANGE:  | 
67  | 0  |         return "SSLv3/TLS read change cipher spec";  | 
68  | 0  |     case TLS_ST_CR_FINISHED:  | 
69  | 0  |     case TLS_ST_SR_FINISHED:  | 
70  | 0  |         return "SSLv3/TLS read finished";  | 
71  | 0  |     case TLS_ST_SR_CLNT_HELLO:  | 
72  | 0  |         return "SSLv3/TLS read client hello";  | 
73  | 0  |     case TLS_ST_SW_HELLO_REQ:  | 
74  | 0  |         return "SSLv3/TLS write hello request";  | 
75  | 0  |     case TLS_ST_SW_SRVR_HELLO:  | 
76  | 0  |         return "SSLv3/TLS write server hello";  | 
77  | 0  |     case TLS_ST_SW_CERT:  | 
78  | 0  |         return "SSLv3/TLS write certificate";  | 
79  | 0  |     case TLS_ST_SW_COMP_CERT:  | 
80  | 0  |         return "TLSv1.3 write server compressed certificate";  | 
81  | 0  |     case TLS_ST_SW_KEY_EXCH:  | 
82  | 0  |         return "SSLv3/TLS write key exchange";  | 
83  | 0  |     case TLS_ST_SW_CERT_REQ:  | 
84  | 0  |         return "SSLv3/TLS write certificate request";  | 
85  | 0  |     case TLS_ST_SW_SESSION_TICKET:  | 
86  | 0  |         return "SSLv3/TLS write session ticket";  | 
87  | 0  |     case TLS_ST_SW_SRVR_DONE:  | 
88  | 0  |         return "SSLv3/TLS write server done";  | 
89  | 0  |     case TLS_ST_SR_CERT:  | 
90  | 0  |         return "SSLv3/TLS read client certificate";  | 
91  | 0  |     case TLS_ST_SR_COMP_CERT:  | 
92  | 0  |         return "TLSv1.3 read client compressed certificate";  | 
93  | 0  |     case TLS_ST_SR_KEY_EXCH:  | 
94  | 0  |         return "SSLv3/TLS read client key exchange";  | 
95  | 0  |     case TLS_ST_SR_CERT_VRFY:  | 
96  | 0  |         return "SSLv3/TLS read certificate verify";  | 
97  | 0  |     case DTLS_ST_CR_HELLO_VERIFY_REQUEST:  | 
98  | 0  |         return "DTLS1 read hello verify request";  | 
99  | 0  |     case DTLS_ST_SW_HELLO_VERIFY_REQUEST:  | 
100  | 0  |         return "DTLS1 write hello verify request";  | 
101  | 0  |     case TLS_ST_SW_ENCRYPTED_EXTENSIONS:  | 
102  | 0  |         return "TLSv1.3 write encrypted extensions";  | 
103  | 0  |     case TLS_ST_CR_ENCRYPTED_EXTENSIONS:  | 
104  | 0  |         return "TLSv1.3 read encrypted extensions";  | 
105  | 0  |     case TLS_ST_CR_CERT_VRFY:  | 
106  | 0  |         return "TLSv1.3 read server certificate verify";  | 
107  | 0  |     case TLS_ST_SW_CERT_VRFY:  | 
108  | 0  |         return "TLSv1.3 write server certificate verify";  | 
109  | 0  |     case TLS_ST_CR_HELLO_REQ:  | 
110  | 0  |         return "SSLv3/TLS read hello request";  | 
111  | 0  |     case TLS_ST_SW_KEY_UPDATE:  | 
112  | 0  |         return "TLSv1.3 write server key update";  | 
113  | 0  |     case TLS_ST_CW_KEY_UPDATE:  | 
114  | 0  |         return "TLSv1.3 write client key update";  | 
115  | 0  |     case TLS_ST_SR_KEY_UPDATE:  | 
116  | 0  |         return "TLSv1.3 read client key update";  | 
117  | 0  |     case TLS_ST_CR_KEY_UPDATE:  | 
118  | 0  |         return "TLSv1.3 read server key update";  | 
119  | 0  |     case TLS_ST_EARLY_DATA:  | 
120  | 0  |         return "TLSv1.3 early data";  | 
121  | 0  |     case TLS_ST_PENDING_EARLY_DATA_END:  | 
122  | 0  |         return "TLSv1.3 pending early data end";  | 
123  | 0  |     case TLS_ST_CW_END_OF_EARLY_DATA:  | 
124  | 0  |         return "TLSv1.3 write end of early data";  | 
125  | 0  |     case TLS_ST_SR_END_OF_EARLY_DATA:  | 
126  | 0  |         return "TLSv1.3 read end of early data";  | 
127  | 0  |     default:  | 
128  | 0  |         return "unknown state";  | 
129  | 0  |     }  | 
130  | 0  | }  | 
131  |  |  | 
132  |  | const char *SSL_state_string(const SSL *s)  | 
133  | 0  | { | 
134  | 0  |     const SSL_CONNECTION *sc = SSL_CONNECTION_FROM_CONST_SSL(s);  | 
135  |  | 
  | 
136  | 0  |     if (sc == NULL || ossl_statem_in_error(sc))  | 
137  | 0  |         return "SSLERR";  | 
138  |  |  | 
139  | 0  |     switch (SSL_get_state(s)) { | 
140  | 0  |     case TLS_ST_SR_NEXT_PROTO:  | 
141  | 0  |         return "TRNP";  | 
142  | 0  |     case TLS_ST_SW_SESSION_TICKET:  | 
143  | 0  |         return "TWST";  | 
144  | 0  |     case TLS_ST_SW_CERT_STATUS:  | 
145  | 0  |         return "TWCS";  | 
146  | 0  |     case TLS_ST_CR_CERT_STATUS:  | 
147  | 0  |         return "TRCS";  | 
148  | 0  |     case TLS_ST_CR_SESSION_TICKET:  | 
149  | 0  |         return "TRST";  | 
150  | 0  |     case TLS_ST_CW_NEXT_PROTO:  | 
151  | 0  |         return "TWNP";  | 
152  | 0  |     case TLS_ST_BEFORE:  | 
153  | 0  |         return "PINIT";  | 
154  | 0  |     case TLS_ST_OK:  | 
155  | 0  |         return "SSLOK";  | 
156  | 0  |     case TLS_ST_CW_CLNT_HELLO:  | 
157  | 0  |         return "TWCH";  | 
158  | 0  |     case TLS_ST_CR_SRVR_HELLO:  | 
159  | 0  |         return "TRSH";  | 
160  | 0  |     case TLS_ST_CR_CERT:  | 
161  | 0  |         return "TRSC";  | 
162  | 0  |     case TLS_ST_CR_COMP_CERT:  | 
163  | 0  |         return "TRSCC";  | 
164  | 0  |     case TLS_ST_CR_KEY_EXCH:  | 
165  | 0  |         return "TRSKE";  | 
166  | 0  |     case TLS_ST_CR_CERT_REQ:  | 
167  | 0  |         return "TRCR";  | 
168  | 0  |     case TLS_ST_CR_SRVR_DONE:  | 
169  | 0  |         return "TRSD";  | 
170  | 0  |     case TLS_ST_CW_CERT:  | 
171  | 0  |         return "TWCC";  | 
172  | 0  |     case TLS_ST_CW_COMP_CERT:  | 
173  | 0  |         return "TWCCC";  | 
174  | 0  |     case TLS_ST_CW_KEY_EXCH:  | 
175  | 0  |         return "TWCKE";  | 
176  | 0  |     case TLS_ST_CW_CERT_VRFY:  | 
177  | 0  |         return "TWCV";  | 
178  | 0  |     case TLS_ST_SW_CHANGE:  | 
179  | 0  |     case TLS_ST_CW_CHANGE:  | 
180  | 0  |         return "TWCCS";  | 
181  | 0  |     case TLS_ST_SW_FINISHED:  | 
182  | 0  |     case TLS_ST_CW_FINISHED:  | 
183  | 0  |         return "TWFIN";  | 
184  | 0  |     case TLS_ST_SR_CHANGE:  | 
185  | 0  |     case TLS_ST_CR_CHANGE:  | 
186  | 0  |         return "TRCCS";  | 
187  | 0  |     case TLS_ST_SR_FINISHED:  | 
188  | 0  |     case TLS_ST_CR_FINISHED:  | 
189  | 0  |         return "TRFIN";  | 
190  | 0  |     case TLS_ST_SW_HELLO_REQ:  | 
191  | 0  |         return "TWHR";  | 
192  | 0  |     case TLS_ST_SR_CLNT_HELLO:  | 
193  | 0  |         return "TRCH";  | 
194  | 0  |     case TLS_ST_SW_SRVR_HELLO:  | 
195  | 0  |         return "TWSH";  | 
196  | 0  |     case TLS_ST_SW_CERT:  | 
197  | 0  |         return "TWSC";  | 
198  | 0  |     case TLS_ST_SW_COMP_CERT:  | 
199  | 0  |         return "TWSCC";  | 
200  | 0  |     case TLS_ST_SW_KEY_EXCH:  | 
201  | 0  |         return "TWSKE";  | 
202  | 0  |     case TLS_ST_SW_CERT_REQ:  | 
203  | 0  |         return "TWCR";  | 
204  | 0  |     case TLS_ST_SW_SRVR_DONE:  | 
205  | 0  |         return "TWSD";  | 
206  | 0  |     case TLS_ST_SR_CERT:  | 
207  | 0  |         return "TRCC";  | 
208  | 0  |     case TLS_ST_SR_COMP_CERT:  | 
209  | 0  |         return "TRCCC";  | 
210  | 0  |     case TLS_ST_SR_KEY_EXCH:  | 
211  | 0  |         return "TRCKE";  | 
212  | 0  |     case TLS_ST_SR_CERT_VRFY:  | 
213  | 0  |         return "TRCV";  | 
214  | 0  |     case DTLS_ST_CR_HELLO_VERIFY_REQUEST:  | 
215  | 0  |         return "DRCHV";  | 
216  | 0  |     case DTLS_ST_SW_HELLO_VERIFY_REQUEST:  | 
217  | 0  |         return "DWCHV";  | 
218  | 0  |     case TLS_ST_SW_ENCRYPTED_EXTENSIONS:  | 
219  | 0  |         return "TWEE";  | 
220  | 0  |     case TLS_ST_CR_ENCRYPTED_EXTENSIONS:  | 
221  | 0  |         return "TREE";  | 
222  | 0  |     case TLS_ST_CR_CERT_VRFY:  | 
223  | 0  |         return "TRSCV";  | 
224  | 0  |     case TLS_ST_SW_CERT_VRFY:  | 
225  | 0  |         return "TWSCV";  | 
226  | 0  |     case TLS_ST_CR_HELLO_REQ:  | 
227  | 0  |         return "TRHR";  | 
228  | 0  |     case TLS_ST_SW_KEY_UPDATE:  | 
229  | 0  |         return "TWSKU";  | 
230  | 0  |     case TLS_ST_CW_KEY_UPDATE:  | 
231  | 0  |         return "TWCKU";  | 
232  | 0  |     case TLS_ST_SR_KEY_UPDATE:  | 
233  | 0  |         return "TRCKU";  | 
234  | 0  |     case TLS_ST_CR_KEY_UPDATE:  | 
235  | 0  |         return "TRSKU";  | 
236  | 0  |     case TLS_ST_EARLY_DATA:  | 
237  | 0  |         return "TED";  | 
238  | 0  |     case TLS_ST_PENDING_EARLY_DATA_END:  | 
239  | 0  |         return "TPEDE";  | 
240  | 0  |     case TLS_ST_CW_END_OF_EARLY_DATA:  | 
241  | 0  |         return "TWEOED";  | 
242  | 0  |     case TLS_ST_SR_END_OF_EARLY_DATA:  | 
243  | 0  |         return "TWEOED";  | 
244  | 0  |     default:  | 
245  | 0  |         return "UNKWN";  | 
246  | 0  |     }  | 
247  | 0  | }  | 
248  |  |  | 
249  |  | const char *SSL_alert_type_string_long(int value)  | 
250  | 0  | { | 
251  | 0  |     switch (value >> 8) { | 
252  | 0  |     case SSL3_AL_WARNING:  | 
253  | 0  |         return "warning";  | 
254  | 0  |     case SSL3_AL_FATAL:  | 
255  | 0  |         return "fatal";  | 
256  | 0  |     default:  | 
257  | 0  |         return "unknown";  | 
258  | 0  |     }  | 
259  | 0  | }  | 
260  |  |  | 
261  |  | const char *SSL_alert_type_string(int value)  | 
262  | 0  | { | 
263  | 0  |     switch (value >> 8) { | 
264  | 0  |     case SSL3_AL_WARNING:  | 
265  | 0  |         return "W";  | 
266  | 0  |     case SSL3_AL_FATAL:  | 
267  | 0  |         return "F";  | 
268  | 0  |     default:  | 
269  | 0  |         return "U";  | 
270  | 0  |     }  | 
271  | 0  | }  | 
272  |  |  | 
273  |  | const char *SSL_alert_desc_string(int value)  | 
274  | 0  | { | 
275  | 0  |     switch (value & 0xff) { | 
276  | 0  |     case SSL3_AD_CLOSE_NOTIFY:  | 
277  | 0  |         return "CN";  | 
278  | 0  |     case SSL3_AD_UNEXPECTED_MESSAGE:  | 
279  | 0  |         return "UM";  | 
280  | 0  |     case SSL3_AD_BAD_RECORD_MAC:  | 
281  | 0  |         return "BM";  | 
282  | 0  |     case SSL3_AD_DECOMPRESSION_FAILURE:  | 
283  | 0  |         return "DF";  | 
284  | 0  |     case SSL3_AD_HANDSHAKE_FAILURE:  | 
285  | 0  |         return "HF";  | 
286  | 0  |     case SSL3_AD_NO_CERTIFICATE:  | 
287  | 0  |         return "NC";  | 
288  | 0  |     case SSL3_AD_BAD_CERTIFICATE:  | 
289  | 0  |         return "BC";  | 
290  | 0  |     case SSL3_AD_UNSUPPORTED_CERTIFICATE:  | 
291  | 0  |         return "UC";  | 
292  | 0  |     case SSL3_AD_CERTIFICATE_REVOKED:  | 
293  | 0  |         return "CR";  | 
294  | 0  |     case SSL3_AD_CERTIFICATE_EXPIRED:  | 
295  | 0  |         return "CE";  | 
296  | 0  |     case SSL3_AD_CERTIFICATE_UNKNOWN:  | 
297  | 0  |         return "CU";  | 
298  | 0  |     case SSL3_AD_ILLEGAL_PARAMETER:  | 
299  | 0  |         return "IP";  | 
300  | 0  |     case TLS1_AD_DECRYPTION_FAILED:  | 
301  | 0  |         return "DC";  | 
302  | 0  |     case TLS1_AD_RECORD_OVERFLOW:  | 
303  | 0  |         return "RO";  | 
304  | 0  |     case TLS1_AD_UNKNOWN_CA:  | 
305  | 0  |         return "CA";  | 
306  | 0  |     case TLS1_AD_ACCESS_DENIED:  | 
307  | 0  |         return "AD";  | 
308  | 0  |     case TLS1_AD_DECODE_ERROR:  | 
309  | 0  |         return "DE";  | 
310  | 0  |     case TLS1_AD_DECRYPT_ERROR:  | 
311  | 0  |         return "CY";  | 
312  | 0  |     case TLS1_AD_EXPORT_RESTRICTION:  | 
313  | 0  |         return "ER";  | 
314  | 0  |     case TLS1_AD_PROTOCOL_VERSION:  | 
315  | 0  |         return "PV";  | 
316  | 0  |     case TLS1_AD_INSUFFICIENT_SECURITY:  | 
317  | 0  |         return "IS";  | 
318  | 0  |     case TLS1_AD_INTERNAL_ERROR:  | 
319  | 0  |         return "IE";  | 
320  | 0  |     case TLS1_AD_USER_CANCELLED:  | 
321  | 0  |         return "US";  | 
322  | 0  |     case TLS1_AD_NO_RENEGOTIATION:  | 
323  | 0  |         return "NR";  | 
324  | 0  |     case TLS1_AD_UNSUPPORTED_EXTENSION:  | 
325  | 0  |         return "UE";  | 
326  | 0  |     case TLS1_AD_CERTIFICATE_UNOBTAINABLE:  | 
327  | 0  |         return "CO";  | 
328  | 0  |     case TLS1_AD_UNRECOGNIZED_NAME:  | 
329  | 0  |         return "UN";  | 
330  | 0  |     case TLS1_AD_BAD_CERTIFICATE_STATUS_RESPONSE:  | 
331  | 0  |         return "BR";  | 
332  | 0  |     case TLS1_AD_BAD_CERTIFICATE_HASH_VALUE:  | 
333  | 0  |         return "BH";  | 
334  | 0  |     case TLS1_AD_UNKNOWN_PSK_IDENTITY:  | 
335  | 0  |         return "UP";  | 
336  | 0  |     default:  | 
337  | 0  |         return "UK";  | 
338  | 0  |     }  | 
339  | 0  | }  | 
340  |  |  | 
341  |  | const char *SSL_alert_desc_string_long(int value)  | 
342  | 0  | { | 
343  | 0  |     switch (value & 0xff) { | 
344  | 0  |     case SSL3_AD_CLOSE_NOTIFY:  | 
345  | 0  |         return "close notify";  | 
346  | 0  |     case SSL3_AD_UNEXPECTED_MESSAGE:  | 
347  | 0  |         return "unexpected message";  | 
348  | 0  |     case SSL3_AD_BAD_RECORD_MAC:  | 
349  | 0  |         return "bad record mac";  | 
350  | 0  |     case SSL3_AD_DECOMPRESSION_FAILURE:  | 
351  | 0  |         return "decompression failure";  | 
352  | 0  |     case SSL3_AD_HANDSHAKE_FAILURE:  | 
353  | 0  |         return "handshake failure";  | 
354  | 0  |     case SSL3_AD_NO_CERTIFICATE:  | 
355  | 0  |         return "no certificate";  | 
356  | 0  |     case SSL3_AD_BAD_CERTIFICATE:  | 
357  | 0  |         return "bad certificate";  | 
358  | 0  |     case SSL3_AD_UNSUPPORTED_CERTIFICATE:  | 
359  | 0  |         return "unsupported certificate";  | 
360  | 0  |     case SSL3_AD_CERTIFICATE_REVOKED:  | 
361  | 0  |         return "certificate revoked";  | 
362  | 0  |     case SSL3_AD_CERTIFICATE_EXPIRED:  | 
363  | 0  |         return "certificate expired";  | 
364  | 0  |     case SSL3_AD_CERTIFICATE_UNKNOWN:  | 
365  | 0  |         return "certificate unknown";  | 
366  | 0  |     case SSL3_AD_ILLEGAL_PARAMETER:  | 
367  | 0  |         return "illegal parameter";  | 
368  | 0  |     case TLS1_AD_DECRYPTION_FAILED:  | 
369  | 0  |         return "decryption failed";  | 
370  | 0  |     case TLS1_AD_RECORD_OVERFLOW:  | 
371  | 0  |         return "record overflow";  | 
372  | 0  |     case TLS1_AD_UNKNOWN_CA:  | 
373  | 0  |         return "unknown CA";  | 
374  | 0  |     case TLS1_AD_ACCESS_DENIED:  | 
375  | 0  |         return "access denied";  | 
376  | 0  |     case TLS1_AD_DECODE_ERROR:  | 
377  | 0  |         return "decode error";  | 
378  | 0  |     case TLS1_AD_DECRYPT_ERROR:  | 
379  | 0  |         return "decrypt error";  | 
380  | 0  |     case TLS1_AD_EXPORT_RESTRICTION:  | 
381  | 0  |         return "export restriction";  | 
382  | 0  |     case TLS1_AD_PROTOCOL_VERSION:  | 
383  | 0  |         return "protocol version";  | 
384  | 0  |     case TLS1_AD_INSUFFICIENT_SECURITY:  | 
385  | 0  |         return "insufficient security";  | 
386  | 0  |     case TLS1_AD_INTERNAL_ERROR:  | 
387  | 0  |         return "internal error";  | 
388  | 0  |     case TLS1_AD_USER_CANCELLED:  | 
389  | 0  |         return "user canceled";  | 
390  | 0  |     case TLS1_AD_NO_RENEGOTIATION:  | 
391  | 0  |         return "no renegotiation";  | 
392  | 0  |     case TLS1_AD_UNSUPPORTED_EXTENSION:  | 
393  | 0  |         return "unsupported extension";  | 
394  | 0  |     case TLS1_AD_CERTIFICATE_UNOBTAINABLE:  | 
395  | 0  |         return "certificate unobtainable";  | 
396  | 0  |     case TLS1_AD_UNRECOGNIZED_NAME:  | 
397  | 0  |         return "unrecognized name";  | 
398  | 0  |     case TLS1_AD_BAD_CERTIFICATE_STATUS_RESPONSE:  | 
399  | 0  |         return "bad certificate status response";  | 
400  | 0  |     case TLS1_AD_BAD_CERTIFICATE_HASH_VALUE:  | 
401  | 0  |         return "bad certificate hash value";  | 
402  | 0  |     case TLS1_AD_UNKNOWN_PSK_IDENTITY:  | 
403  | 0  |         return "unknown PSK identity";  | 
404  | 0  |     case TLS1_AD_NO_APPLICATION_PROTOCOL:  | 
405  | 0  |         return "no application protocol";  | 
406  | 0  |     default:  | 
407  | 0  |         return "unknown";  | 
408  | 0  |     }  | 
409  | 0  | }  |