// Copyright © 2013 The CefSharp Authors. All rights reserved. // // Use of this source code is governed by a BSD-style license that can be found in the LICENSE file. namespace CefSharp { /// /// This file contains the list of network errors. /// /// For a complete up-to-date list, see the CEF source code /// (cef_errorcode_t in include/internal/cef_types.h) /// and the Chromium source code (net/base/net_error_list.h). /// public enum CefErrorCode { /// /// No error occurred. /// None = 0, // // Ranges: // 0- 99 System related errors // 100-199 Connection related errors // 200-299 Certificate errors // 300-399 HTTP errors // 400-499 Cache errors // 500-599 ? // 600-699 FTP errors // 700-799 Certificate manager errors // 800-899 DNS resolver errors /// /// An asynchronous IO operation is not yet complete. This usually does not /// indicate a fatal error. Typically this error will be generated as a /// notification to wait for some external notification that the IO operation /// finally completed. /// IoPending = -1, /// /// A generic failure occurred. /// Failed = -2, /// /// A request was aborted, possibly by the user. /// Aborted = -3, /// /// An argument to the function is incorrect. /// InvalidArgument = -4, /// /// The handle or file descriptor is invalid. /// InvalidHandle = -5, /// /// The file or directory cannot be found. /// FileNotFound = -6, /// /// An operation timed out. /// TimedOut = -7, /// /// The file is too large. /// FileTooBig = -8, /// /// An unexpected error. This may be caused by a programming mistake or an invalid assumption /// Unexpected = -9, /// /// Permission to access a resource, other than the network, was denied. /// AccessDenied = -10, /// /// The operation failed because of unimplemented functionality. /// NotImplemented = -11, /// /// There were not enough resources to complete the operation. /// InsufficientResources = -12, /// /// Memory allocation failed. /// OutOfMemory = -13, /// /// The file upload failed because the file's modification time was different /// from the expectation. /// UploadFileChanged = -14, /// /// The socket is not connected. /// SocketNotConnected = -15, /// /// The file already exists. /// FileExists = -16, /// /// The path or file name is too long. /// FilePathTooLong = -17, /// /// Not enough room left on the disk. /// FileNoSpace = -18, /// /// The file has a virus. /// FileVirusInfected = -19, /// /// The client chose to block the request. /// BlockedByClient = -20, /// /// The network changed. /// NetworkChanged = -21, /// /// The request was blocked by the URL blacklist configured by the domain /// administrator. /// BlockedByAdministrator = -22, /// /// The socket is already connected. /// SocketIsConnected = -23, /// /// The request was blocked because the forced reenrollment check is still /// pending. This error can only occur on ChromeOS. /// The error can be emitted by code in chrome/browser/policy/policy_helpers.cc. /// BlockedEnrollmentCheckPending = -24, // The upload failed because the upload stream needed to be re-read, due to a // retry or a redirect, but the upload stream doesn't support that operation. UploadStreamRewindNotSupported = -25, // The request failed because the URLRequestContext is shutting down, or has // been shut down. ContextShutDown = -26, // The request failed because the response was delivered along with requirements // which are not met ('X-Frame-Options' and 'Content-Security-Policy' ancestor // checks and 'Cross-Origin-Resource-Policy', for instance). BlockedByResponse = -27, // Error -28 was removed (BLOCKED_BY_XSS_AUDITOR). // The request was blocked by system policy disallowing some or all cleartext // requests. Used for NetworkSecurityPolicy on Android. CleartextNotPermitted = -29, /// /// A connection was closed (corresponding to a TCP FIN). /// ConnectionClosed = -100, /// /// A connection was reset (corresponding to a TCP RST). /// ConnectionReset = -101, /// /// A connection attempt was refused. /// ConnectionRefused = -102, /// /// A connection timed out as a result of not receiving an ACK for data sent. /// This can include a FIN packet that did not get ACK'd. /// ConnectionAborted = -103, /// /// A connection attempt failed. /// ConnectionFailed = -104, /// /// The host name could not be resolved. /// NameNotResolved = -105, /// /// The Internet connection has been lost. /// InternetDisconnected = -106, /// /// An SSL protocol error occurred. /// SslProtocolError = -107, /// /// The IP address or port number is invalid (e.g., cannot connect to the IP address 0 or the port 0). /// AddressInvalid = -108, /// /// The IP address is unreachable. This usually means that there is no route to the specified host or network. /// AddressUnreachable = -109, /// /// The server requested a client certificate for SSL client authentication. /// SslClientAuthCertNeeded = -110, /// /// A tunnel connection through the proxy could not be established. /// TunnelConnectionFailed = -111, /// /// No SSL protocol versions are enabled. /// NoSslVersionsEnabled = -112, /// /// The client and server don't support a common SSL protocol version or cipher suite. /// SslVersionOrCipherMismatch = -113, /// /// The server requested a renegotiation (rehandshake). /// SslRenegotiationRequested = -114, /// /// The proxy requested authentication (for tunnel establishment) with an /// unsupported method. /// ProxyAuthUnsupported = -115, /// /// During SSL renegotiation (rehandshake), the server sent a certificate with /// an error. /// /// Note: this error is not in the -2xx range so that it won't be handled as a /// certificate error. /// CertErrorInSslRenegotiation = -116, /// /// The SSL handshake failed because of a bad or missing client certificate. /// BadSslClientAuthCert = -117, /// /// A connection attempt timed out. /// ConnectionTimedOut = -118, /// /// There are too many pending DNS resolves, so a request in the queue was /// aborted. /// HostResolverQueueTooLarge = -119, /// /// Failed establishing a connection to the SOCKS proxy server for a target host. /// SocksConnectionFailed = -120, /// /// The SOCKS proxy server failed establishing connection to the target host /// because that host is unreachable. /// SocksConnectionHostUnreachable = -121, /// /// The request to negotiate an alternate protocol failed. /// NpnNegotiationFailed = -122, /// /// The peer sent an SSL no_renegotiation alert message. /// SslNoRenegotiation = -123, /// /// Winsock sometimes reports more data written than passed. This is probably /// due to a broken LSP. /// WinsockUnexpectedWrittenBytes = -124, /// /// An SSL peer sent us a fatal decompression_failure alert. This typically /// occurs when a peer selects DEFLATE compression in the mistaken belief that /// it supports it. /// SslDecompressionFailureAlert = -125, /// /// An SSL peer sent us a fatal bad_record_mac alert. This has been observed /// from servers with buggy DEFLATE support. /// SslBadRecordMacAlert = -126, /// /// The proxy requested authentication (for tunnel establishment). /// ProxyAuthRequested = -127, /// /// A known TLS strict server didn't offer the renegotiation extension. /// //Removed //SslUnsafeNegotiation = -128, // Error -129 was removed (SSL_WEAK_SERVER_EPHEMERAL_DH_KEY). /// /// Could not create a connection to the proxy server. An error occurred /// either in resolving its name, or in connecting a socket to it. /// Note that this does NOT include failures during the actual "CONNECT" method /// of an HTTP proxy. /// ProxyConnectionFailed = -130, /// /// A mandatory proxy configuration could not be used. Currently this means /// that a mandatory PAC script could not be fetched, parsed or executed. /// MandatoryProxyConfigurationFailed = -131, /// /// We've hit the max socket limit for the socket pool while preconnecting. We /// don't bother trying to preconnect more sockets. /// PreconnectMaxSocketLimit = -133, /// /// The permission to use the SSL client certificate's private key was denied. /// SslClientAuthPrivateKeyAccessDenied = -134, /// /// The SSL client certificate has no private key. /// SslClientAuthCertNoPrivateKey = -135, /// /// The certificate presented by the HTTPS Proxy was invalid. /// ProxyCertificateInvalid = -136, /// /// An error occurred when trying to do a name resolution (DNS). /// NameResolutionFailed = -137, /// /// Permission to access the network was denied. This is used to distinguish /// errors that were most likely caused by a firewall from other access denied /// errors. See also ERR_ACCESS_DENIED. /// NetworkAccessDenied = -138, /// /// The request throttler module cancelled this request to avoid DDOS. /// TemporarilyThrottled = -139, /// /// A request to create an SSL tunnel connection through the HTTPS proxy /// received a non-200 (OK) and non-407 (Proxy Auth) response. The response /// body might include a description of why the request failed. /// HttpsProxyTunnelResponse = -140, /// /// We were unable to sign the CertificateVerify data of an SSL client auth /// handshake with the client certificate's private key. /// /// Possible causes for this include the user implicitly or explicitly /// denying access to the private key, the private key may not be valid for /// signing, the key may be relying on a cached handle which is no longer /// valid, or the CSP won't allow arbitrary data to be signed. /// SslClientAuthSignatureFailed = -141, /// /// The message was too large for the transport. (for example a UDP message /// which exceeds size threshold). /// MsgTooBig = -142, // Error -143 was removed (SPDY_SESSION_ALREADY_EXISTS) // Error -144 was removed (LIMIT_VIOLATION). /// /// Websocket protocol error. Indicates that we are terminating the connection /// due to a malformed frame or other protocol violation. /// WsProtocolError = -145, // Error -146 was removed (PROTOCOL_SWITCHED) /// /// Returned when attempting to bind an address that is already in use. /// AddressInUse = -147, /// /// An operation failed because the SSL handshake has not completed. /// SslHandshakeNotCompleted = -148, /// /// SSL peer's public key is invalid. /// SslBadPeerPublicKey = -149, /// /// The certificate didn't match the built-in public key pins for the host name. /// The pins are set in net/http/transport_security_state.cc and require that /// one of a set of public keys exist on the path from the leaf to the root. /// SslPinnedKeyNotInCertChain = -150, /// /// Server request for client certificate did not contain any types we support. /// ClientAuthCertTypeUnsupported = -151, // Error -152 was removed (ORIGIN_BOUND_CERT_GENERATION_TYPE_MISMATCH) /// /// An SSL peer sent us a fatal decrypt_error alert. This typically occurs when /// a peer could not correctly verify a signature (in CertificateVerify or /// ServerKeyExchange) or validate a Finished message. /// SslDecryptErrorAlert = -153, /// /// There are too many pending WebSocketJob instances, so the new job was not /// pushed to the queue. /// WsThrottleQueueTooLarge = -154, /// /// There are too many active SocketStream instances, so the new connect request /// was rejected. /// TooManySocketStreams = -155, /// /// The SSL server certificate changed in a renegotiation. /// SslServerCertChanged = -156, // Error -157 was removed (SSL_INAPPROPRIATE_FALLBACK). // Error -158 was removed (CT_NO_SCTS_VERIFIED_OK). /// /// The SSL server sent us a fatal unrecognized_name alert. /// SslUnrecognizedNameAlert = -159, /// /// Failed to set the socket's receive buffer size as requested. /// SocketSetReceiveBufferSizeError = -160, /// /// Failed to set the socket's send buffer size as requested. /// SocketSetSendBufferSizeError = -161, /// /// Failed to set the socket's receive buffer size as requested, despite success /// return code from setsockopt. /// SocketReceiveBufferSizeUnchangeable = -162, /// /// Failed to set the socket's send buffer size as requested, despite success /// return code from setsockopt. /// SocketSendBufferSizeUnchangeable = -163, /// /// Failed to import a client certificate from the platform store into the SSL /// library. /// SslClientAuthCertBadFormat = -164, // Error -165 was removed (SSL_FALLBACK_BEYOND_MINIMUM_VERSION). /// /// Resolving a hostname to an IP address list included the IPv4 address /// "127.0.53.53". This is a special IP address which ICANN has recommended to /// indicate there was a name collision, and alert admins to a potential /// problem. /// ICANNNameCollision = -166, /// /// The SSL server presented a certificate which could not be decoded. This is /// not a certificate error code as no X509Certificate object is available. This /// error is fatal. /// SslServerCertBadFormat = -167, /// /// Certificate Transparency: Received a signed tree head that failed to parse. /// CtSthParsingFailed = -168, /// /// Certificate Transparency: Received a signed tree head whose JSON parsing was /// OK but was missing some of the fields. /// CtSthIncomplete = -169, /// /// The attempt to reuse a connection to send proxy auth credentials failed /// before the AuthController was used to generate credentials. The caller should /// reuse the controller with a new connection. This error is only used /// internally by the network stack. /// UnableToReuseConnectionForProxyAuth = -170, /// /// Certificate Transparency: Failed to parse the received consistency proof. /// CtConsistencyProofParsingFailed = -171, /// /// The SSL server required an unsupported cipher suite that has since been /// removed. This error will temporarily be signaled on a fallback for one or two /// releases immediately following a cipher suite's removal, after which the /// fallback will be removed. /// SslObsoleteCipher = -172, /// /// When a WebSocket handshake is done successfully and the connection has been /// upgraded, the URLRequest is cancelled with this error code. /// WsUpgrade = -173, /// /// Socket ReadIfReady support is not implemented. This error should not be user /// visible, because the normal Read() method is used as a fallback. /// ReadIfReadyNotImplemented = -174, // Error -175 was removed (SSL_VERSION_INTERFERENCE). /// /// No socket buffer space is available. /// NoBufferSpace = -176, /// //// There were no common signature algorithms between our client certificate /// private key and the server's preferences. /// SslClientAuthNoCommonAlgorithms = -177, /// /// TLS 1.3 early data was rejected by the server. This will be received before /// any data is returned from the socket. The request should be retried with /// early data disabled. /// EarlyDataRejected = -178, /// /// TLS 1.3 early data was offered, but the server responded with TLS 1.2 or /// earlier. This is an internal error code to account for a /// backwards-compatibility issue with early data and TLS 1.2. It will be /// received before any data is returned from the socket. The request should be /// retried with early data disabled. /// /// See https://tools.ietf.org/html/rfc8446#appendix-D.3 for details. /// WrongVersionOnEarlyData = -179, /// /// TLS 1.3 was enabled, but a lower version was negotiated and the server /// returned a value indicating it supported TLS 1.3. This is part of a security /// check in TLS 1.3, but it may also indicate the user is behind a buggy /// TLS-terminating proxy which implemented TLS 1.2 incorrectly. (See /// https://crbug.com/boringssl/226.) /// Tls13DownGradeDetected = -180, /// /// The server's certificate has a keyUsage extension incompatible with the /// negotiated TLS key exchange method. /// SslKeyUsageIncompatible = -181, // Certificate error codes // // The values of certificate error codes must be consecutive. // The server responded with a certificate whose common name did not match // the host name. This could mean: // // 1. An attacker has redirected our traffic to their server and is // presenting a certificate for which they know the private key. // // 2. The server is misconfigured and responding with the wrong cert. // // 3. The user is on a wireless network and is being redirected to the // network's login page. // // 4. The OS has used a DNS search suffix and the server doesn't have // a certificate for the abbreviated name in the address bar. // /// /// The server responded with a certificate whose common name did not match the host name. /// This could mean: /// 1. An attacker has redirected our traffic to his server and is presenting a certificate /// for which he knows the private key. /// 2. The server is misconfigured and responding with the wrong cert. /// 3. The user is on a wireless network and is being redirected to the network's login page. /// 4. The OS has used a DNS search suffix and the server doesn't have a certificate for the /// abbreviated name in the address bar. /// CertCommonNameInvalid = -200, /// /// The server responded with a certificate that, by our clock, appears to either not yet be valid or to have expired. /// This could mean: /// 1. An attacker is presenting an old certificate for which he has managed to obtain the private key /// 2. The server is misconfigured and is not presenting a valid cert. /// 3. Our clock is wrong. /// CertDateInvalid = -201, /// /// The server responded with a certificate that is signed by an authority we don't trust. /// The could mean: /// 1. An attacker has substituted the real certificate for a cert that /// contains his public key and is signed by his cousin. /// 2. The server operator has a legitimate certificate from a CA we don't know about, but should trust. /// 3. The server is presenting a self-signed certificate, providing no defense against active attackers (but foiling passive attackers). /// CertAuthorityInvalid = -202, /// /// The server responded with a certificate that contains errors. This error is not recoverable. /// MSDN describes this error as follows: /// "The SSL certificate contains errors." /// NOTE: It's unclear how this differs from ERR_CERT_INVALID. For consistency, /// use that code instead of this one from now on. /// CertContainsErrors = -203, /// /// The certificate has no mechanism for determining if it is revoked. In effect, this certificate cannot be revoked. /// CertNoRevocationMechanism = -204, /// /// Revocation information for the security certificate for this site is not available. /// This could mean: /// 1. An attacker has compromised the private key in the certificate and is blocking our attempt to /// find out that the cert was revoked. /// 2. The certificate is unrevoked, but the revocation server is busy or unavailable. /// CertUnableToCheckRevocation = -205, /// /// The server responded with a certificate has been revoked. /// We have the capability to ignore this error, but it is probably not the thing to do. /// CertRevoked = -206, /// /// The server responded with a certificate that is invalid. This error is not recoverable. /// CertInvalid = -207, /// /// The server responded with a certificate that is signed using a weak /// signature algorithm. /// CertWeakSignatureAlgorithm = -208, // -209 is availible: was CERT_NOT_IN_DNS. /// /// The host name specified in the certificate is not unique. /// CertNonUniqueName = -210, /// /// The server responded with a certificate that contains a weak key (e.g. /// a too-small RSA key). /// CertWeakKey = -211, /// /// The certificate claimed DNS names that are in violation of name constraints. /// CertNameConstraintViolation = -212, /// /// The certificate's validity period is too long. /// CertValidityTooLong = -213, /// /// Certificate Transparency was required for this connection, but the server // did not provide CT information that complied with the policy. /// CertificateTransparencyRequired = -214, /// /// The certificate chained to a legacy Symantec root that is no longer trusted. /// https://g.co/chrome/symantecpkicerts /// CertSymantecLegacy = -215, // -216 was QUIC_CERT_ROOT_NOT_KNOWN which has been renumbered to not be in the // certificate error range. /// /// The certificate is known to be used for interception by an entity other /// the device owner. /// CertKnownInterceptionBlocked = -217, /// /// The connection uses an obsolete version of SSL/TLS. /// SslObsoleteVersion = -218, /// /// Add new certificate error codes here. /// /// Update the value of CERT_END whenever you add a new certificate error /// code. /// /// The value immediately past the last certificate error code. /// CertEnd = -219, /// /// The URL is invalid. /// InvalidUrl = -300, /// /// The scheme of the URL is disallowed. /// DisallowedUrlScheme = -301, /// /// The scheme of the URL is unknown. /// UnknownUrlScheme = -302, /// /// Attempting to load an URL resulted in too many redirects. /// TooManyRedirects = -310, /// /// Attempting to load an URL resulted in an unsafe redirect (e.g., a redirect to file:// is considered unsafe). /// UnsafeRedirect = -311, /// /// Attempting to load an URL with an unsafe port number. These are port /// numbers that correspond to services, which are not robust to spurious input /// that may be constructed as a result of an allowed web construct (e.g., HTTP /// looks a lot like SMTP, so form submission to port 25 is denied). /// UnsafePort = -312, /// /// The server's response was invalid. /// InvalidResponse = -320, /// /// Error in chunked transfer encoding. /// InvalidChunkedEncoding = -321, /// /// The server did not support the request method. /// MethodNotSupported = -322, /// /// The response was 407 (Proxy Authentication Required), yet we did not send the request to a proxy. /// UnexpectedProxyAuth = -323, /// /// The server closed the connection without sending any data. /// EmptyResponse = -324, /// /// The headers section of the response is too large. /// ResponseHeadersTooBig = -325, // Error -326 was removed (PAC_STATUS_NOT_OK) /// /// The evaluation of the PAC script failed. /// PacScriptFailed = -327, /// /// The response was 416 (Requested range not satisfiable) and the server cannot /// satisfy the range requested. /// RequestRangeNotSatisfiable = -328, /// /// The identity used for authentication is invalid. /// MalformedIdentity = -329, /// /// Content decoding of the response body failed. /// ContentDecodingFailed = -330, /// /// An operation could not be completed because all network IO /// is suspended. /// NetworkIoSuspended = -331, /// /// FLIP data received without receiving a SYN_REPLY on the stream. /// SynReplyNotReceived = -332, /// /// Converting the response to target encoding failed. /// EncodingConversionFailed = -333, /// /// The server sent an FTP directory listing in a format we do not understand. /// UnrecognizedFtpDirectoryListingFormat = -334, // Obsolete. Was only logged in NetLog when an HTTP/2 pushed stream expired. // NET_ERROR(INVALID_SPDY_STREAM, -335) /// /// There are no supported proxies in the provided list. /// NoSupportedProxies = -336, /// /// There is a SPDY protocol error. /// SpdyProtocolError = -337, /// /// Credentials could not be established during HTTP Authentication. /// InvalidAuthCredentials = -338, /// /// An HTTP Authentication scheme was tried which is not supported on this /// machine. /// UnsupportedAuthScheme = -339, /// /// Detecting the encoding of the response failed. /// EncodingDetectionFailed = -340, /// /// (GSSAPI) No Kerberos credentials were available during HTTP Authentication. /// MissingAuthCredentials = -341, /// /// An unexpected, but documented, SSPI or GSSAPI status code was returned. /// UnexpectedSecurityLibraryStatus = -342, /// /// The environment was not set up correctly for authentication (for /// example, no KDC could be found or the principal is unknown. /// MisconfiguredAuthEnvironment = -343, /// /// An undocumented SSPI or GSSAPI status code was returned. /// UndocumentedSecurityLibraryStatus = -344, /// /// The HTTP response was too big to drain. /// ResponseBodyTooBigToDrain = -345, /// /// The HTTP response contained multiple distinct Content-Length headers. /// ResponseHeadersMultipleContentLength = -346, /// /// SPDY Headers have been received, but not all of them - status or version /// headers are missing, so we're expecting additional frames to complete them. /// IncompleteSpdyHeaders = -347, /// /// No PAC URL configuration could be retrieved from DHCP. This can indicate /// either a failure to retrieve the DHCP configuration, or that there was no /// PAC URL configured in DHCP. /// PacNotInDhcp = -348, /// /// The HTTP response contained multiple Content-Disposition headers. /// ResponseHeadersMultipleContentDisposition = -349, /// /// The HTTP response contained multiple Location headers. /// ResponseHeadersMultipleLocation = -350, /// /// SPDY server refused the stream. Client should retry. This should never be a /// user-visible error. /// SpdyServerRefusedStream = -351, /// /// SPDY server didn't respond to the PING message. /// SpdyPingFailed = -352, // Obsolete. Kept here to avoid reuse, as the old error can still appear on // histograms. // NET_ERROR(PIPELINE_EVICTION, -353) /// /// The HTTP response body transferred fewer bytes than were advertised by the /// Content-Length header when the connection is closed. /// ContentLengthMismatch = -354, /// /// The HTTP response body is transferred with Chunked-Encoding, but the /// terminating zero-length chunk was never sent when the connection is closed. /// IncompleteChunkedEncoding = -355, /// /// There is a QUIC protocol error. /// QuicProtocolError = -356, /// /// The HTTP headers were truncated by an EOF. /// ResponseHeadersTruncated = -357, /// /// The QUIC crytpo handshake failed. This means that the server was unable /// to read any requests sent, so they may be resent. /// QuicHandshakeFailed = -358, // Obsolete. Kept here to avoid reuse, as the old error can still appear on // histograms. // NET_ERROR(REQUEST_FOR_SECURE_RESOURCE_OVER_INSECURE_QUIC, -359) /// /// Transport security is inadequate for the SPDY version. /// SpdyInadequateTransportSecurity = -360, /// /// The peer violated SPDY flow control. /// SpdyFlowControlError = -361, /// /// The peer sent an improperly sized SPDY frame. /// SpdyFrameSizeError = -362, /// /// Decoding or encoding of compressed SPDY headers failed. /// SpdyCompressionError = -363, /// /// Proxy Auth Requested without a valid Client Socket Handle. /// ProxyAuthRequestedWithNoConnection = -364, /// /// HTTP_1_1_REQUIRED error code received on HTTP/2 session. /// Http11Required = -365, /// /// HTTP_1_1_REQUIRED error code received on HTTP/2 session to proxy. /// ProxyHttp11Required = -366, /// /// The PAC script terminated fatally and must be reloaded. /// PacScriptTerminated = -367, // Obsolete. Kept here to avoid reuse. // Request is throttled because of a Backoff header. // See: crbug.com/486891. // NET_ERROR(TEMPORARY_BACKOFF, -369) /// /// The server was expected to return an HTTP/1.x response, but did not. Rather /// than treat it as HTTP/0.9, this error is returned. /// InvalidHttpResponse = -370, /// /// Initializing content decoding failed. /// ContentDecodingInitFailed = -371, /// /// Received HTTP/2 RST_STREAM frame with NO_ERROR error code. This error should /// be handled internally by HTTP/2 code, and should not make it above the /// SpdyStream layer. /// Http2RstStreamNoErrorReceived = -372, /// /// The pushed stream claimed by the request is no longer available. /// Http2PushedStreamNoAvailable = -373, /// /// A pushed stream was claimed and later reset by the server. When this happens, /// the request should be retried. /// Http2ClaimedPushStreamResetByServer = -374, /// /// An HTTP transaction was retried too many times due for authentication or /// invalid certificates. This may be due to a bug in the net stack that would /// otherwise infinite loop, or if the server or proxy continually requests fresh /// credentials or presents a fresh invalid certificate. /// TooManyRetries = -375, /// /// Received an HTTP/2 frame on a closed stream. /// Http2StreamClosed = -376, /// /// Client is refusing an HTTP/2 stream. /// Http2ClientRefusedStream = -377, /// /// A pushed HTTP/2 stream was claimed by a request based on matching URL and /// request headers, but the pushed response headers do not match the request. /// Http2PushedResponseDoesNotMatch = -378, /// /// The server returned a non-2xx HTTP response code. /// /// Not that this error is only used by certain APIs that interpret the HTTP /// response itself. URLRequest for instance just passes most non-2xx /// response back as success. /// HttpResponseCodeFailure = -379, /// /// The certificate presented on a QUIC connection does not chain to a known root /// and the origin connected to is not on a list of domains where unknown roots /// are allowed. /// QuicCertRootNotKnown = -380, /// /// The cache does not have the requested entry. /// CacheMiss = -400, /// /// Unable to read from the disk cache. /// CacheReadFailure = -401, /// /// Unable to write to the disk cache. /// CacheWriteFailure = -402, /// /// The operation is not supported for this entry. /// CacheOperationNotSupported = -403, /// /// The disk cache is unable to open this entry. /// CacheOpenFailure = -404, /// /// The disk cache is unable to create this entry. /// CacheCreateFailure = -405, /// /// Multiple transactions are racing to create disk cache entries. This is an /// internal error returned from the HttpCache to the HttpCacheTransaction that /// tells the transaction to restart the entry-creation logic because the state /// of the cache has changed. /// CacheRace = -406, /// /// The cache was unable to read a checksum record on an entry. This can be /// returned from attempts to read from the cache. It is an internal error, /// returned by the SimpleCache backend, but not by any URLRequest methods /// or members. /// CacheChecksumReadFailure = -407, /// /// The cache found an entry with an invalid checksum. This can be returned from /// attempts to read from the cache. It is an internal error, returned by the /// SimpleCache backend, but not by any URLRequest methods or members. /// CacheChecksumMismatch = -408, /// /// Internal error code for the HTTP cache. The cache lock timeout has fired. /// CacheLockTimeout = -409, /// /// Received a challenge after the transaction has read some data, and the /// credentials aren't available. There isn't a way to get them at that point. /// CacheAuthFailureAfterRead = -410, /// /// Internal not-quite error code for the HTTP cache. In-memory hints suggest /// that the cache entry would not have been useable with the transaction's /// current configuration (e.g. load flags, mode, etc.) /// CacheEntryNotSuitable = -411, /// /// The disk cache is unable to doom this entry. /// CacheDoomFailure = -412, /// /// The disk cache is unable to open or create this entry. /// CacheOpenOrCreateFilure = -413, /// /// The server's response was insecure (e.g. there was a cert error). /// InsecureResponse = -501, /// /// The server responded to a <keygen> with a generated client cert that we /// don't have the matching private key for. /// NoPrivateKeyForCert = -502, /// /// An error adding to the OS certificate database (e.g. OS X Keychain). /// AddUserCertFailed = -503, /// /// An error occurred while handling a signed exchange. /// InvalidSignedExchange = -504, /// /// An error occurred while handling a Web Bundle source. /// InvalidWebBundle = -505, /// /// A generic error for failed FTP control connection command. /// If possible, please use or add a more specific error code. /// FtpFailed = -601, /// /// The server cannot fulfill the request at this point. This is a temporary /// error. /// FTP response code 421. /// FtpServiceUnavailable = -602, /// /// The server has aborted the transfer. /// FTP response code 426. /// FtpTransferAborted = -603, /// /// The file is busy, or some other temporary error condition on opening /// the file. /// FTP response code 450. /// FtpFileBusy = -604, /// /// Server rejected our command because of syntax errors. /// FTP response codes 500, 501. /// FtpSyntaxError = -605, /// /// Server does not support the command we issued. /// FTP response codes 502, 504. /// FtpCommandNotSupported = -606, /// /// Server rejected our command because we didn't issue the commands in right /// order. /// FTP response code 503. /// FtpBadCommandSequence = -607, /// /// PKCS #12 import failed due to incorrect password. /// Pkcs12ImportBadPassword = -701, /// /// PKCS #12 import failed due to other error. /// Pkcs12ImportFailed = -702, /// /// CA import failed - not a CA cert. /// ImportCaCertNotCa = -703, /// /// Import failed - certificate already exists in database. /// Note it's a little weird this is an error but reimporting a PKCS12 is ok /// (no-op). That's how Mozilla does it, though. /// ImportCertAlreadyExists = -704, /// /// CA import failed due to some other error. /// ImportCaCertFailed = -705, /// /// Server certificate import failed due to some internal error. /// ImportServerCertFailed = -706, /// /// PKCS #12 import failed due to invalid MAC. /// Pkcs12ImportInvalidMac = -707, /// /// PKCS #12 import failed due to invalid/corrupt file. /// Pkcs12ImportInvalidFile = -708, /// /// PKCS #12 import failed due to unsupported features. /// Pkcs12ImportUnsupported = -709, /// /// Key generation failed. /// KeyGenerationFailed = -710, /// /// Server-bound certificate generation failed. /// //Error -711 was removed (ORIGIN_BOUND_CERT_GENERATION_FAILED) //OriginBoundCertGenerationFailed = -711, /// /// Failure to export private key. /// PrivateKeyExportFailed = -712, /// /// Self-signed certificate generation failed. /// SelfSignedCertGenerationFailed = -713, /// /// The certificate database changed in some way. /// CertDatabaseChanged = -714, /// /// Failure to import Channel ID. /// //Error -715 was removed (CHANNEL_ID_IMPORT_FAILED) //ChannelIdImportFailed = -715, /// /// DNS resolver received a malformed response. /// DnsMalformedResponse = -800, /// /// DNS server requires TCP /// DnsServerRequiresTcp = -801, /// /// DNS server failed. This error is returned for all of the following /// error conditions: /// 1 - Format error - The name server was unable to interpret the query. /// 2 - Server failure - The name server was unable to process this query /// due to a problem with the name server. /// 4 - Not Implemented - The name server does not support the requested /// kind of query. /// 5 - Refused - The name server refuses to perform the specified /// operation for policy reasons. /// DnsServerFailed = -802, /// /// DNS transaction timed out. /// DnsTimedOut = -803, /// /// The entry was not found in cache, for cache-only lookups. /// DnsCacheMiss = -804, /// /// Suffix search list rules prevent resolution of the given host name. /// DnsSearchEmpty = -805, /// /// Failed to sort addresses according to RFC3484. /// DnsSortError = -806, // Error -807 was removed (DNS_HTTP_FAILED) /// /// Failed to resolve the hostname of a DNS-over-HTTPS server. /// DnsSecureResolverHostnameResolutionFailed = -808 }; }