1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
use std::fmt;
use std::error::Error;
use crate::msgs::enums::{ContentType, HandshakeType, AlertDescription};
use webpki;
use sct;
#[derive(Debug, PartialEq, Clone)]
pub enum TLSError {
InappropriateMessage {
expect_types: Vec<ContentType>,
got_type: ContentType,
},
InappropriateHandshakeMessage {
expect_types: Vec<HandshakeType>,
got_type: HandshakeType,
},
CorruptMessage,
CorruptMessagePayload(ContentType),
NoCertificatesPresented,
DecryptError,
PeerIncompatibleError(String),
PeerMisbehavedError(String),
AlertReceived(AlertDescription),
WebPKIError(webpki::Error),
InvalidSCT(sct::Error),
General(String),
FailedToGetCurrentTime,
HandshakeNotComplete,
PeerSentOversizedRecord,
NoApplicationProtocol,
}
fn join<T: fmt::Debug>(items: &[T]) -> String {
items.iter()
.map(|x| format!("{:?}", x))
.collect::<Vec<String>>()
.join(" or ")
}
impl fmt::Display for TLSError {
fn fmt(&self, f: &mut fmt::Formatter) -> fmt::Result {
match *self {
TLSError::InappropriateMessage { ref expect_types, ref got_type } => {
write!(f,
"received unexpected message: got {:?} when expecting {}",
got_type,
join::<ContentType>(expect_types))
}
TLSError::InappropriateHandshakeMessage { ref expect_types, ref got_type } => {
write!(f,
"received unexpected handshake message: got {:?} when expecting {}",
got_type,
join::<HandshakeType>(expect_types))
}
TLSError::CorruptMessagePayload(ref typ) => {
write!(f, "received corrupt message of type {:?}", typ)
}
TLSError::PeerIncompatibleError(ref why) => write!(f, "peer is incompatible: {}", why),
TLSError::PeerMisbehavedError(ref why) => write!(f, "peer misbehaved: {}", why),
TLSError::AlertReceived(ref alert) => write!(f, "received fatal alert: {:?}", alert),
TLSError::WebPKIError(ref err) => write!(f, "invalid certificate: {:?}", err),
TLSError::CorruptMessage => write!(f, "received corrupt message"),
TLSError::NoCertificatesPresented => write!(f, "peer sent no certificates"),
TLSError::DecryptError => write!(f, "cannot decrypt peer's message"),
TLSError::PeerSentOversizedRecord => write!(f, "peer sent excess record size"),
TLSError::HandshakeNotComplete => write!(f, "handshake not complete"),
TLSError::NoApplicationProtocol => write!(f, "peer doesn't support any known protocol"),
TLSError::InvalidSCT(ref err) => write!(f, "invalid certificate timestamp: {:?}", err),
TLSError::FailedToGetCurrentTime => write!(f, "failed to get current time"),
TLSError::General(ref err) => write!(f, "unexpected error: {}", err),
}
}
}
impl Error for TLSError {
}
#[cfg(test)]
mod tests {
#[test]
fn smoke() {
use super::TLSError;
use crate::msgs::enums::{ContentType, HandshakeType, AlertDescription};
use webpki;
use sct;
let all = vec![TLSError::InappropriateMessage {
expect_types: vec![ContentType::Alert],
got_type: ContentType::Handshake,
},
TLSError::InappropriateHandshakeMessage {
expect_types: vec![HandshakeType::ClientHello, HandshakeType::Finished],
got_type: HandshakeType::ServerHello,
},
TLSError::CorruptMessage,
TLSError::CorruptMessagePayload(ContentType::Alert),
TLSError::NoCertificatesPresented,
TLSError::DecryptError,
TLSError::PeerIncompatibleError("no tls1.2".to_string()),
TLSError::PeerMisbehavedError("inconsistent something".to_string()),
TLSError::AlertReceived(AlertDescription::ExportRestriction),
TLSError::WebPKIError(webpki::Error::ExtensionValueInvalid),
TLSError::InvalidSCT(sct::Error::MalformedSCT),
TLSError::General("undocumented error".to_string()),
TLSError::FailedToGetCurrentTime,
TLSError::HandshakeNotComplete,
TLSError::PeerSentOversizedRecord,
TLSError::NoApplicationProtocol];
for err in all {
println!("{:?}:", err);
println!(" fmt '{}'", err);
}
}
}