ssl-condition

ssl-condition Condition Class

Summary

The condition class for SSL errors.

Package

comm

Superclasses

socket-error

Subclasses

ssl-closed
ssl-error
ssl-failure
ssl-handshake-timeout
ssl-verification-failure
ssl-x509-lookup

Readers

ssl-condition-ssl-code

Description

Instances of the condition class ssl-condition are used for errors inside SSL.

The reader ssl-condition-ssl-code returns a ssl-code indicating the reason for the condition, or nil if the reason was not recorded. When ssl-code is not nil, it can be one of:

A keyword.	Indicates the type of failure. See the list below.
A number.	The code given by the underlying implementation. For the Apple implementation, it will be one of the `errSSL…` constants (Secure Transport Result Codes). The most common codes are defined by the constants of the name `apple-err-ssl-…`, which are listed in the documentation for apple-err-ssl-protocol. For the OpenSSL implementation, it is the result of the OpenSSL C function `ERR_get_error`.
A list.	In LispWorks 8.1, the car of the list is always the keyword `:verification`. The second element is the result of the verification, and has the same meaning as the second return value (`more-info`) of ssl-connection-verify. Note that, for the Apple implementation, the most common failures are converted to keywords (listed below).

When ssl-code is a keyword, it can be one of:

`:client-hello-callback`, `:cert-request-callback` or `:verify-callback`.
	A callback that was passed to create-ssl-server-context or create-ssl-client-context using the keyword given by `ssl-code`, returned `nil`.
`:closed`.	The socket was closed with a proper shutdown. This error can occur when trying to write, which can happen either by an explicit write or during a SSL handshake.
`:min-proto-version`	OpenSSL only. Failed to set the min protocol version.
`:x509-lookup`	OpenSSL only. This is used in ssl-x509-lookup conditions.
`:certificate-key-file`.
	Apple only. Specify a failure to read the certificate or key file.