ZyXEL Communications ZyWall 10W User Manual page 655

LOG MESSAGE
Failed to decode the
received CRL
Failed to decode the
received ARL
Rcvd data <size> too large!
Max size allowed: <max
size>
Cert trusted: <subject name>
Due to <reason codes>, cert
not trusted: <subject name>
Chart S-15 Certificate Path Verification Failure Reason Codes
CODE
1 Algorithm mismatch between the certificate and the search constraints.
2 Key usage mismatch between the certificate and the search constraints.
3 Certificate was not valid in the time interval.
4 (Not used)
5 Certificate is not valid.
6 Certificate signature was not verified correctly.
7 Certificate was revoked by a CRL.
8 Certificate was not added to the cache.
Log Descriptions
Chart S-14 PKI Logs
The router received a corrupted CRL (Certificate Revocation List)
from the LDAP server whose address and port are recorded in the
Source field.
The router received a corrupted ARL (Authority Revocation List)
from the LDAP server whose address and port are recorded in the
Source field.
The router received directory data that was too large (the size is
listed) from the LDAP server whose address and port are recorded
in the Source field. The maximum size of directory data that the
router allows is also recorded.
The router has verified the path of the certificate with the listed
subject name.
Due to the reasons listed, the certificate with the listed subject
name has not passed the path verification. The recorded reason
codes are only approximate reasons for not trusting the certificate.
Please refer to Chart S-15 for the corresponding descriptions of the
codes.
DESCRIPTION
ZyWALL Series Internet Security Gateway
DESCRIPTION
S-15