Informational Messages - HP NonStop SSL Reference Manual

Table of Contents

Advertisement

<hash_algorithm> fingerprint <fingerprint> trusted. <hash_algorithm> is a cryptographically broken
hash algorithm! DO NOT USE <hash_algorithm> FINGERPRINTS ANYMORE! It is strongly
recommended to specify fingerprints calculated with a secure hash algorithm
(<secure_fingerprint_algorithms>)!
This is a warning message indicating that the <hash_algorithm> has been cryptographically broken. It is
recommended to use a more secure hash algorithm instead, please see section HASHALGORITHMS for details.
ADH ciphers enabled, these include *NO AUTHENTICATION*!. MITM attack easy! Not recommended,
use at your own risk !!!
This is a Warning message to indicate that one of the ADH ciphers is used. These have severe security limitations,
so should be used only if you are fully aware of what you are doing.
Apparently out of memory - could not allocate new SSL_CTX for determining all supported ciphers.
The process ran out of heap space and could not allocate further memory.
Could not set cipher string \"ALL\" on dummySSLCtx in internal_set_cipher_list
This message might indicate a bug, please contact HP support.
Could not set cipherstring "HIGH:!ADH:!PSK:RC4" to main openssl_high context, using default
ciphers <default_ciphers>
This message might indicate a bug, please contact HP support.
adding client CA file '<filename>' failed
This message is displayed when a client CA file configured via the CLIENTAUTH parameter could not be
processed. Please view the prior log messages for detailed error information.
server fingerprint invalid, session rejected: PEERCERTFINGERPRINT='<fingerprint>',
MD5='<actual_md5_fingerprint>', SHA1='<actual_sha1_fingerprint>'
This message is displayed only when the parameter PEERCERTFINGERPRINT is used and when the actual
fingerprint of the remote certificate does not match the configured fingerprint. Please see parameter
PEERCERTFINGERPRINT for details.
server common name invalid, session rejected: PEERCERTCOMMONNAME='<peercert_cn>',
CN='<actual_peercert_cn>'
This message is displayed only when the parameter PEERCERTCOMMONNAME is used and when the actual
common name of the remote certificate does not match the configured common name. Please see parameter
PEERCERTCOMMONNAME for details.

Informational messages

The following messages display information about actual events. No corrective action is necessary.
issuer= <an certificate issuer>
Notification about the issuer of the currently processed certificate during SSL session establishment
F|#<session>-<ip address> close
[FTPS mode only] Notification about a session with host identified by ip address being closed.
F|#<session> - <ip address> new connection
[FTPS mode only] Notification about a new connection being established with remote client identified by ip address
HP NonStop SSL Reference Manual
Appendix • 123

Hide quick links:

Advertisement

Table of Contents
loading

Table of Contents