TElSAMLIdentityProvider.OnSSLError event

TElSAMLIdentityProvider.OnSSLError

This event is fired when an error occurs during the SSL/TLS protocol flow

Declaration

[C#]
event TSBErrorEvent OnSSLError;
delegate void TSBErrorEvent(Object Sender, int ErrorCode, bool Fatal, bool Remote);

[VB.NET]
Event OnSSLError As TSBErrorEvent
Delegate Sub TSBErrorEvent(ByVal Sender As Object, ByVal ErrorCode As Integer, ByVal Fatal As Boolean, ByVal Remote As Boolean)

[Pascal]
event OnSSLError : TSBErrorEvent delegate FOnSSLError;
TSBErrorEvent = procedure(Sender : TObject; ErrorCode : integer; Fatal : boolean; Remote : boolean) of object;

[C++]
    void get_OnSSLError(TSBErrorEvent &pMethodOutResult, void * &pDataOutResult);
    void set_OnSSLError(TSBErrorEvent pMethodValue, void * pDataValue);
    typedef void (SB_CALLBACK *TSBErrorEvent)(void * _ObjectData, TObjectHandle Sender, int32_t ErrorCode, int8_t Fatal, int8_t Remote);

[PHP]
    TSBErrorEvent|callable|NULL get_OnSSLError()
    void set_OnSSLError(TSBErrorEvent|callable|NULL $Value)
    callable TSBErrorEvent(TObject $Sender, integer $ErrorCode, bool $Fatal, bool $Remote)

[Java]
    TSBErrorEvent getOnSSLError();
    void setOnSSLError(TSBErrorEvent Value);
    TSBErrorEvent.Callback OnSSLError = new TSBErrorEvent.Callback() {
        public void TSBErrorEventCallback(TObject Sender, int ErrorCode, boolean Fatal, boolean Remote) {
            //...
        }
    }

Parameters

ErrorCode - the error code, see values below
Fatal - the error is fatal and the session will be closed immediately
Remote - the error was reported by the remote side

Error codes:

Definition	Value	Possible reason and steps to take
ERROR_SSL_CONNECTION_CANCELLED_BY_USER	73729 (0x12001)
ERROR_SSL_TIMEOUT	73730 (0x12002)
ERROR_SSL_UNSUPPORTED_MAC_ALGORITHM	73731 (0x12003)
ERROR_SSL_UNEXPECTED_MESSAGE	75777 (0x12801)	Connection is made to/from a service that doesn’t talk proper SSL (e.g. a plain HTTP connection is made to an HTTPS port). Re-check that both client and server services are talking SSL. Unsupported version of the protocol. Try to play with Versions property of the SSL component and check if any of the combination helps.
ERROR_SSL_BAD_RECORD_MAC	75778 (0x12802)	The peers failed to negotiate a shared key material. Try connecting with different cipher suites one-by-one and check if any of them helps. If neither does, try to use a different protocol version.
ERROR_SSL_DECRYPTION_FAILED	75779 (0x12803)
ERROR_SSL_DECODE_ERROR	75792 (0x12810)
ERROR_SSL_DECRYPT_ERROR	75793 (0x12811)
ERROR_SSL_RECORD_OVERFLOW	75780 (0x12804)	Packet size too large. Try to decrease the maximal size of the packet by adjusting the MaxFragmentLength extension.
ERROR_SSL_DECOMPRESSION_FAILURE	75781 (0x12805)	Compression or decompression failure. Switch off compression (CompressionAlgorithms property).
ERROR_SSL_HANDSHAKE_FAILURE	75782 (0x12806)	Incompatible versions or cipher suite lists. Try to play with version and cipher suite sets. Check that the server certificate is provided and has an associated private key.
ERROR_SSL_ILLEGAL_PARAMETER	75789 (0x1280D)
ERROR_SSL_NO_CERTIFICATE	75783 (0x12807)	The certificate provided by the peer is not valid.
ERROR_SSL_BAD_CERTIFICATE	75784 (0x12808)
ERROR_SSL_UNSUPPORTED_CERTIFICATE	75785 (0x12809)
ERROR_SSL_CERTIFICATE_REVOKED	75786 (0x1280A)
ERROR_SSL_CERTIFICATE_EXPIRED	75787 (0x1280B)
ERROR_SSL_CERTIFICATE_UNKNOWN	75788 (0x1280C)
ERROR_SSL_UNKNOWN_CA	75790 (0x1280E)
ERROR_SSL_ACCESS_DENIED	75791 (0x1280F)	The requested application-layer resource cannot be accessed by the requestor. Check with the administrator of the remote resource.
ERROR_SSL_EXPORT_RESTRICTION	75794 (0x12812)	The peer is only configured to use exportable cipher suites. Switch on support for "EXPORT" cipher suites.
ERROR_SSL_PROTOCOL_VERSION	75795 (0x12813)	The peers have not been able to negotiate a version to use (no shared protocol versions).
ERROR_SSL_INSUFFICIENT_SECURITY	75796 (0x12814)	The cipher suites mutually supported by the peers are too weak and do not provide an adequate level of security.
ERROR_SSL_INTERNAL_ERROR	75797 (0x12815)	Contact the vendor.
ERROR_SSL_USER_CANCELED	75798 (0x12816)	Application layer has shut down the connection.
ERROR_SSL_NO_RENEGOTIATION	75799 (0x12817)	One of the peers requested a renegotiation, which was refused by the other. Note that you will get this error (as a warning) if you return Allow = false from the OnRenegotiationStart event handler.
ERROR_SSL_CLOSE_NOTIFY	75800 (0x12818)	Does not indicate an error condition. The SSL connection was closed gracefully and can be restored or cloned in future.
ERROR_SSL_UNKNOWN_PROTOCOL_ERROR	75801 (0x12819)
Internal errors. These errors should not occur in normal circumstances. Customers are expected to contact support team for further investigation of any of the below issues.
ERROR_SSL_CLIENT_KEX_COMPUTATION_ERROR	73732 (0x12004)	Failed to calculate key exchange record. Please contact the support team.
ERROR_SSL_COMPRESSION_ERROR	73733 (0x12005)	Unidentified compression error. Please contact the support team.
ERROR_SSL_CRYPTO_NOT_INITIALIZED	73734 (0x12006)	Encryption subsystem not initialized. Please contact the support team.
ERROR_SSL_PRIVATE_KEY_OPERATION_FAILED	73735 (0x12007)	Private key operation failed. Please ensure that the private key of the certificate used for authentication is accessible (e.g. that the hardware token is in). If the key is fine, please contact the support team.

Description

This event is fired by TElSAMLIdentityProvider when an error occurs during the secure protocol flow.