From c04cfe5d002e067b0c87e52a1ec4337723f3fe85 Mon Sep 17 00:00:00 2001
From: Sergey Abramchuk <personal@ss-abramchuk.me>
Date: Tue, 18 Aug 2020 14:15:15 +0300
Subject: [PATCH] Add new errors and their description

---
 Sources/OpenVPNAdapter/library/NSError+OpenVPNError.m | 6 ++++++
 Sources/OpenVPNAdapter/library/OpenVPNError.h         | 3 +++
 2 files changed, 9 insertions(+)

diff --git a/Sources/OpenVPNAdapter/library/NSError+OpenVPNError.m b/Sources/OpenVPNAdapter/library/NSError+OpenVPNError.m
index 5d6fd1f..c9f50e9 100644
--- a/Sources/OpenVPNAdapter/library/NSError+OpenVPNError.m
+++ b/Sources/OpenVPNAdapter/library/NSError+OpenVPNError.m
@@ -67,6 +67,9 @@
         @"UDP_CONNECT_ERROR": @(OpenVPNAdapterErrorUDPConnectError),
         @"SSL_ERROR": @(OpenVPNAdapterErrorSSLError),
         @"SSL_PARTIAL_WRITE": @(OpenVPNAdapterErrorSSLPartialWrite),
+        @"SSL_CA_MD_TOO_WEAK": @(OpenVPNAdapterErrorSSLCaMdTooWeak),
+        @"SSL_CA_KEY_TOO_SMALL": @(OpenVPNAdapterErrorSSLCaKeyTooSmall),
+        @"SSL_DH_KEY_TOO_SMALL": @(OpenVPNAdapterErrorSSLDhKeyTooSmall),
         @"ENCAPSULATION_ERROR": @(OpenVPNAdapterErrorEncapsulationError),
         @"EPKI_CERT_ERROR": @(OpenVPNAdapterErrorEPKICertError),
         @"EPKI_SIGN_ERROR": @(OpenVPNAdapterErrorEPKISignError),
@@ -146,6 +149,9 @@
         case OpenVPNAdapterErrorUDPConnectError: return @"Client error on UDP connect.";
         case OpenVPNAdapterErrorSSLError: return @"Errors resulting from read/write on SSL object.";
         case OpenVPNAdapterErrorSSLPartialWrite: return @"SSL object did not process all written cleartext.";
+        case OpenVPNAdapterErrorSSLCaMdTooWeak: return @"CA message digest is too weak";
+        case OpenVPNAdapterErrorSSLCaKeyTooSmall: return @"CA key is too small";
+        case OpenVPNAdapterErrorSSLDhKeyTooSmall: return @"DH key is too small";
         case OpenVPNAdapterErrorEncapsulationError: return @"Exceptions thrown during packet encapsulation.";
         case OpenVPNAdapterErrorEPKICertError: return @"Error obtaining certificate from External PKI provider.";
         case OpenVPNAdapterErrorEPKISignError: return @"Error obtaining RSA signature from External PKI provider.";
diff --git a/Sources/OpenVPNAdapter/library/OpenVPNError.h b/Sources/OpenVPNAdapter/library/OpenVPNError.h
index c32d113..a12dfdb 100644
--- a/Sources/OpenVPNAdapter/library/OpenVPNError.h
+++ b/Sources/OpenVPNAdapter/library/OpenVPNError.h
@@ -55,6 +55,9 @@ typedef NS_ERROR_ENUM(OpenVPNAdapterErrorDomain, OpenVPNAdapterError) {
     OpenVPNAdapterErrorUDPConnectError,
     OpenVPNAdapterErrorSSLError,
     OpenVPNAdapterErrorSSLPartialWrite,
+    OpenVPNAdapterErrorSSLCaMdTooWeak,
+    OpenVPNAdapterErrorSSLCaKeyTooSmall,
+    OpenVPNAdapterErrorSSLDhKeyTooSmall,
     OpenVPNAdapterErrorEncapsulationError,
     OpenVPNAdapterErrorEPKICertError,
     OpenVPNAdapterErrorEPKISignError,