Tls Alerts - HP NonStop SSL Reference Manual

Note: If you authenticate the HP NonStop SSL server in your clients, you should consider basing trust on the Root CA
certificate (e.g. check the Root CA fingerprint). In case the server certificate is compromised you can simply replace it
without having to update your client configuration.

TLS Alerts

If a TLS Alert happens on an SSL-encrypted session, the TLS alert number will be logged. The following message is an
example for a log message of this type: a plain Telnet client tried to connect on the encrypted socket, resulting in a TLS
alert "50" (DecodeError).
13:37:18.53|30|TLS Alert: 50
The following table contains the TLS alert numbers for TLS 1.0. For more information about the individual alerts, please
refer to the TLS specification RFC 2246 (available under http://www.ietf.org).
TLS Alert Number
0
10
20
21
22
30
40
42
43
44
45
46
47
48
49
50
51
60
70
71
80
90
100
HP NonStop SSL Reference Manual
TLS Alert name
close_notify
unexpected_message
bad_record_mac
decryption_failed
record_overflow
decompression_failure
handshake_failure
bad_certificate
unsupported_certificate
certificate_revoked
certificate_expired
certificate_unknown
illegal_parameter
unknown_ca
access_denied
decode_error
decrypt_error,
export_restriction
protocol_version
insufficient_security
internal_error
user_canceled
no_renegotiation
SSL Reference • 109