Citrix ADC 12.1 NITRO API Reference

GENTOOL ERRORS

August 17, 2023

Contributed by:

GENTOOL ERRORS

Error Code	Error Code(Decimal)	Error Code(Hex)	Error Message
NSERR_SSL_CONFFILE	1601	0x641	Error in SSL conf file
NSERR_SSL_NOCONFFILE	1602	0x642	Unable to load SSL configuration info
NSERR_SSL_SIGFAIL	1603	0x643	Signing operation failed
NSERR_SSL_INVALFORMAT	1604	0x644	Invalid format
NSERR_SSL_OUTFILE	1605	0x645	Problem in writing output file
NSERR_SSL_VERIFY_FAIL	1606	0x646	Signature verification failed
NSERR_SSL_FILECREATE	1607	0x647	Unable to create output file
NSERR_SSL_MINKEYSIZE	1608	0x648	Key size less than 1024 is not supported on FIPS Firmware Version 1.1.
NSERR_SSL_INVALID_REQ	1609	0x649	Invalid certificate request
NSERR_SSL_GENTOOL	1610	0x64A	Internal failure in SSL cert/key generation tool
NSERR_SSL_PEM_ONLY	1611	0x64B	Only PEM format private key can be encrypted
NSERR_SSL_PASSMISMATCH	1612	0x64C	Password verification failed
NSERR_SSL_PASSREQ	1613	0x64D	Password required for private key
NSERR_SSL_INVALPASS	1614	0x64E	Invalid password
NSERR_SSL_MAXKEYSIZE	1615	0x64F	Maximum allowed key size is 2048
NSERR_SSL_GNTOOLARG_MISSING	1616	0x650	Required argument missing
NSERR_SSL_INVAL_PUBEXP	1617	0x651	Invalid public exponent value
NSERR_SSL_INVALID_VALUE	1618	0x652	Invalid value
NSERR_SSL_MISSING_KVAL	1619	0x653	Value missing for the argument
NSERR_SSL_INVAL_DHGEN	1620	0x654	Invalid DH generator value
NSERR_SSL_NOFILE_CERTREQ	1621	0x655	No such certificate request file exists
NSERR_SSL_REQ_NOMATCH	1622	0x656	Certificate Request (CSR) and private key do not match
NSERR_SSL_PKCS12	1623	0x657	Problem in input PKCS12 file
NSERR_SSL_NOFILE_CAPVTKEY	1624	0x658	No such CA key file present
NSERR_SSL_NOFILE_CACERT	1625	0x659	No such CA certificate file exists
NSERR_SSL_NOFILE_SERIAL	1626	0x65A	No such serial file exists
NSERR_SSL_NOFILE_PKCS12	1627	0x65B	No such PKCS12 file exists
NSERR_SSL_READ_CACERT	1628	0x65C	In reading input CA certficate file
NSERR_READ_CERT	1629	0x65D	Error in reading input certficate file
NSERR_IMP_EXP_NOT_TOGETHER	1630	0x65E	Import and export can not be specified together
NSERR_NOFILE_CERT	1631	0x65F	No such certificate file exists
NSERR_NOFILE_KEY	1632	0x660	No such key file exists
NSERR_CACERTPKEY_MISMATCH	1633	0x661	CA certificate not matching with CA private-key
NSERR_WRONG_REV_ENTRY	1634	0x662	Invalid revocation entry in CAs database
NSERR_WRONG_REV_DATE	1635	0x663	Invalid revocation data in CAs database
NSERR_WRONG_SERIAL_NO	1636	0x664	Invalid serial number in CAs database
NSERR_CREATE_DATABASE_ENTRY	1637	0x665	Revocation entry creation failed
NSERR_ALREADY_REVKD	1638	0x666	Certificate already revoked
NSERR_LOAD_PKEY	1639	0x667	Private key loading failed
NSERR_CERTPKEY_NEEDED	1640	0x668	Both certificate and private key are needed for export
NSERR_PKCS12_NEEDED	1641	0x669	PKCS12 file missing for import
NSERR_ERR_FILEEXISTS	1642	0x66A	Cannot create output file. File already exists
NSERR_FIPSKEY_KEYFILE_OPTION	1643	0x66B	Both -keyFileName and -fipsKeyName cannot be specified
NSERR_OUTFILELENBIG	1644	0x66C	Output file name too long
NSERR_SSL_DEFPATH	1645	0x66D	Output filepath should be under the partitions default SSL directory
NSERR_SSL_CRL_DEFPATH	1646	0x66E	Output CRL filepath should be under the partitions default CRL directory
NSERR_SSL_DEFLOCATION	1647	0x66F	Input file(s) not present or not accessible in current partition
NSERR_SSL_DNS_DEFPATH	1648	0x670	Output filepath should be under the partitions default DNS directory
NSERR_DHREQD	1791	0x6FF	DH required
NSERR_SSL_CRL_DEFLOCATION	1650	0x672	Input CRL file not present or not accessible in current partition
NSERR_SSL_NOFIPS_KEY	1651	0x673	No such FIPS key
NSERR_SSL_IMPROPER_SERIALFILE	1652	0x674	Invalid serial file
NSERR_SSL_SERIAL_NUM_REVOKED	1653	0x675	Certificate serial number match with another certificate already revoked in the CRL
NSERR_SSL_MAXRSAKEYSIZE	1654	0x676	Maximum allowed key size is 4096
NSERR_SSL_MUSTBEPEM	1655	0x677	The input file must be in PEM or SIM format.
NSERR_SSL_CANTBEPEM	1656	0x678	The input file cannot be in PEM format.
NSERR_SSL_BAD_LABEL	1657	0x679	The keylabel cannot be publicor private.
NSERR_SSL_HSMKEY_LOAD	1664	0x680	Unable to Load Key in external Hardware Security Module (HSM).
NSERR_SSL_HSMKEY_PPE	1665	0x681	Internal error while adding HSM key.
NSERR_ERR_SSL_HSMKEY_NOKEY	1666	0x682	Missing argument [Key].
NSERR_ERR_SSL_HSMKEY_DELETE	1667	0x683	Unable to Delete Key in external Hardware Security Module (HSM).
NSERR_ERR_SSL_HSMKEY_NOMATCH	1668	0x684	Specified HSM Type does not match.
NSERR_ERR_SSL_HSMKEY_REFEXT	1669	0x685	The HSM key is referenced by a certificate
NSERR_ERR_SSL_HSMKEY_NOTEXISTS	1670	0x686	No such HSM key.
NSERR_ERR_SSL_HSMKEY_NOSTORE	1671	0x687	Specified keystore does not exist.
NSERR_ERR_SSL_GW_NOTUP	1672	0x688	Gateway daemon is booting up please wait for 20 to 30 secs.
NSERR_ERR_SSL_HSMKEY_FIPS	1673	0x689	Operation not permitted on a MPX-FIPS System.
NSERR_ERR_SSL_SANCERT_DUP	1674	0x68A	Duplicate domain cert cannot be added.
NSERR_SSL_ECDSA_SUPPORT	1675	0x68B	ECDSA certificates are not supported for this entity/platform.
NSERR_SSL_ECDSA_CURVE_SUPPORT	1676	0x68C	The EC curve in the ECDSA certificate is not supported.
NSERR_SSL_LINK_LOOP	1677	0x68D	Certificate cant be linked. This is creating a loop.
NSERR_SSL_N3FIPSREBOOT	1678	0x68E	N3FIPS InitHSM is not done, Please reboot again
NSERR_SSL_N3FIPS_FILECREATE	1679	0x68F	FIPS config folder /nsconfig/fips is not present, please create it manually and reboot the system, after reboot reset and set fips again
NSERR_SSL_SIGHASH_SUPPORT	1680	0x690	List contains unsupported SigHash type for this entity/platform.
NSERR_SSL_SAN_CERT_ENTRY	1681	0x691	Unsupported OID for SAN entry in certificate
NSERR_CIPHER_BACKEND	1682	0x692	The cipher alias cannot be bound to this entity. It is only applicable for a SSL backend service or a SSL serviceGroup
NSERR_SSL_CIPHER_NOT_SUPPORTED_ON_PLATFORM	1683	0x693	This Cipher/CipherAlias is not supported on this platform.
NSERR_SSL_I2D_X509_NAME_FAILURE	1684	0x694	Failed to encode X509_NAME into DER format
NSERR_DTLS_CIPHER_SUPPORT	1685	0x695	This cipher alias cannot be bound. DTLS vServer/Service only supports DEFAULT_DTLS/DEFAULT_DTLS_BACKEND ciphers respectively.
NSERR_DTLS_CIPHER_BACKEND	1686	0x696	The cipher alias cannot be bound to this entity. It is only applicable for a DTLS backend service or a DTLS serviceGroup.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Was this helpful

GENTOOL ERRORS

August 17, 2023

Contributed by:

August 17, 2023

Contributed by:

GENTOOL ERRORS

GENTOOL ERRORS

In this article