net_error_list.h 37 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029
  1. // Copyright (c) 2012 The Chromium Authors. All rights reserved.
  2. // Use of this source code is governed by a BSD-style license that can be
  3. // found in the LICENSE file.
  4. // This file intentionally does not have header guards, it's included
  5. // inside a macro to generate enum values. The following line silences a
  6. // presubmit and Tricium warning that would otherwise be triggered by this:
  7. // no-include-guard-because-multiply-included
  8. // NOLINT(build/header_guard)
  9. // This file contains the list of network errors.
  10. //
  11. // Ranges:
  12. // 0- 99 System related errors
  13. // 100-199 Connection related errors
  14. // 200-299 Certificate errors
  15. // 300-399 HTTP errors
  16. // 400-499 Cache errors
  17. // 500-599 ?
  18. // 600-699 FTP errors
  19. // 700-799 Certificate manager errors
  20. // 800-899 DNS resolver errors
  21. // An asynchronous IO operation is not yet complete. This usually does not
  22. // indicate a fatal error. Typically this error will be generated as a
  23. // notification to wait for some external notification that the IO operation
  24. // finally completed.
  25. NET_ERROR(IO_PENDING, -1)
  26. // A generic failure occurred.
  27. NET_ERROR(FAILED, -2)
  28. // An operation was aborted (due to user action).
  29. NET_ERROR(ABORTED, -3)
  30. // An argument to the function is incorrect.
  31. NET_ERROR(INVALID_ARGUMENT, -4)
  32. // The handle or file descriptor is invalid.
  33. NET_ERROR(INVALID_HANDLE, -5)
  34. // The file or directory cannot be found.
  35. NET_ERROR(FILE_NOT_FOUND, -6)
  36. // An operation timed out.
  37. NET_ERROR(TIMED_OUT, -7)
  38. // The file is too large.
  39. NET_ERROR(FILE_TOO_BIG, -8)
  40. // An unexpected error. This may be caused by a programming mistake or an
  41. // invalid assumption.
  42. NET_ERROR(UNEXPECTED, -9)
  43. // Permission to access a resource, other than the network, was denied.
  44. NET_ERROR(ACCESS_DENIED, -10)
  45. // The operation failed because of unimplemented functionality.
  46. NET_ERROR(NOT_IMPLEMENTED, -11)
  47. // There were not enough resources to complete the operation.
  48. NET_ERROR(INSUFFICIENT_RESOURCES, -12)
  49. // Memory allocation failed.
  50. NET_ERROR(OUT_OF_MEMORY, -13)
  51. // The file upload failed because the file's modification time was different
  52. // from the expectation.
  53. NET_ERROR(UPLOAD_FILE_CHANGED, -14)
  54. // The socket is not connected.
  55. NET_ERROR(SOCKET_NOT_CONNECTED, -15)
  56. // The file already exists.
  57. NET_ERROR(FILE_EXISTS, -16)
  58. // The path or file name is too long.
  59. NET_ERROR(FILE_PATH_TOO_LONG, -17)
  60. // Not enough room left on the disk.
  61. NET_ERROR(FILE_NO_SPACE, -18)
  62. // The file has a virus.
  63. NET_ERROR(FILE_VIRUS_INFECTED, -19)
  64. // The client chose to block the request.
  65. NET_ERROR(BLOCKED_BY_CLIENT, -20)
  66. // The network changed.
  67. NET_ERROR(NETWORK_CHANGED, -21)
  68. // The request was blocked by the URL block list configured by the domain
  69. // administrator.
  70. NET_ERROR(BLOCKED_BY_ADMINISTRATOR, -22)
  71. // The socket is already connected.
  72. NET_ERROR(SOCKET_IS_CONNECTED, -23)
  73. // The request was blocked because the forced reenrollment check is still
  74. // pending. This error can only occur on ChromeOS.
  75. // The error can be emitted by code in chrome/browser/policy/policy_helpers.cc.
  76. NET_ERROR(BLOCKED_ENROLLMENT_CHECK_PENDING, -24)
  77. // The upload failed because the upload stream needed to be re-read, due to a
  78. // retry or a redirect, but the upload stream doesn't support that operation.
  79. NET_ERROR(UPLOAD_STREAM_REWIND_NOT_SUPPORTED, -25)
  80. // The request failed because the URLRequestContext is shutting down, or has
  81. // been shut down.
  82. NET_ERROR(CONTEXT_SHUT_DOWN, -26)
  83. // The request failed because the response was delivered along with requirements
  84. // which are not met ('X-Frame-Options' and 'Content-Security-Policy' ancestor
  85. // checks and 'Cross-Origin-Resource-Policy', for instance).
  86. NET_ERROR(BLOCKED_BY_RESPONSE, -27)
  87. // Error -28 was removed (BLOCKED_BY_XSS_AUDITOR).
  88. // The request was blocked by system policy disallowing some or all cleartext
  89. // requests. Used for NetworkSecurityPolicy on Android.
  90. NET_ERROR(CLEARTEXT_NOT_PERMITTED, -29)
  91. // The request was blocked by a Content Security Policy
  92. NET_ERROR(BLOCKED_BY_CSP, -30)
  93. // The request was blocked because of no H/2 or QUIC session.
  94. NET_ERROR(H2_OR_QUIC_REQUIRED, -31)
  95. // A connection was closed (corresponding to a TCP FIN).
  96. NET_ERROR(CONNECTION_CLOSED, -100)
  97. // A connection was reset (corresponding to a TCP RST).
  98. NET_ERROR(CONNECTION_RESET, -101)
  99. // A connection attempt was refused.
  100. NET_ERROR(CONNECTION_REFUSED, -102)
  101. // A connection timed out as a result of not receiving an ACK for data sent.
  102. // This can include a FIN packet that did not get ACK'd.
  103. NET_ERROR(CONNECTION_ABORTED, -103)
  104. // A connection attempt failed.
  105. NET_ERROR(CONNECTION_FAILED, -104)
  106. // The host name could not be resolved.
  107. NET_ERROR(NAME_NOT_RESOLVED, -105)
  108. // The Internet connection has been lost.
  109. NET_ERROR(INTERNET_DISCONNECTED, -106)
  110. // An SSL protocol error occurred.
  111. NET_ERROR(SSL_PROTOCOL_ERROR, -107)
  112. // The IP address or port number is invalid (e.g., cannot connect to the IP
  113. // address 0 or the port 0).
  114. NET_ERROR(ADDRESS_INVALID, -108)
  115. // The IP address is unreachable. This usually means that there is no route to
  116. // the specified host or network.
  117. NET_ERROR(ADDRESS_UNREACHABLE, -109)
  118. // The server requested a client certificate for SSL client authentication.
  119. NET_ERROR(SSL_CLIENT_AUTH_CERT_NEEDED, -110)
  120. // A tunnel connection through the proxy could not be established.
  121. NET_ERROR(TUNNEL_CONNECTION_FAILED, -111)
  122. // No SSL protocol versions are enabled.
  123. NET_ERROR(NO_SSL_VERSIONS_ENABLED, -112)
  124. // The client and server don't support a common SSL protocol version or
  125. // cipher suite.
  126. NET_ERROR(SSL_VERSION_OR_CIPHER_MISMATCH, -113)
  127. // The server requested a renegotiation (rehandshake).
  128. NET_ERROR(SSL_RENEGOTIATION_REQUESTED, -114)
  129. // The proxy requested authentication (for tunnel establishment) with an
  130. // unsupported method.
  131. NET_ERROR(PROXY_AUTH_UNSUPPORTED, -115)
  132. // Error -116 was removed (CERT_ERROR_IN_SSL_RENEGOTIATION)
  133. // The SSL handshake failed because of a bad or missing client certificate.
  134. NET_ERROR(BAD_SSL_CLIENT_AUTH_CERT, -117)
  135. // A connection attempt timed out.
  136. NET_ERROR(CONNECTION_TIMED_OUT, -118)
  137. // There are too many pending DNS resolves, so a request in the queue was
  138. // aborted.
  139. NET_ERROR(HOST_RESOLVER_QUEUE_TOO_LARGE, -119)
  140. // Failed establishing a connection to the SOCKS proxy server for a target host.
  141. NET_ERROR(SOCKS_CONNECTION_FAILED, -120)
  142. // The SOCKS proxy server failed establishing connection to the target host
  143. // because that host is unreachable.
  144. NET_ERROR(SOCKS_CONNECTION_HOST_UNREACHABLE, -121)
  145. // The request to negotiate an alternate protocol failed.
  146. NET_ERROR(ALPN_NEGOTIATION_FAILED, -122)
  147. // The peer sent an SSL no_renegotiation alert message.
  148. NET_ERROR(SSL_NO_RENEGOTIATION, -123)
  149. // Winsock sometimes reports more data written than passed. This is probably
  150. // due to a broken LSP.
  151. NET_ERROR(WINSOCK_UNEXPECTED_WRITTEN_BYTES, -124)
  152. // An SSL peer sent us a fatal decompression_failure alert. This typically
  153. // occurs when a peer selects DEFLATE compression in the mistaken belief that
  154. // it supports it.
  155. NET_ERROR(SSL_DECOMPRESSION_FAILURE_ALERT, -125)
  156. // An SSL peer sent us a fatal bad_record_mac alert. This has been observed
  157. // from servers with buggy DEFLATE support.
  158. NET_ERROR(SSL_BAD_RECORD_MAC_ALERT, -126)
  159. // The proxy requested authentication (for tunnel establishment).
  160. NET_ERROR(PROXY_AUTH_REQUESTED, -127)
  161. // Error -129 was removed (SSL_WEAK_SERVER_EPHEMERAL_DH_KEY).
  162. // Could not create a connection to the proxy server. An error occurred
  163. // either in resolving its name, or in connecting a socket to it.
  164. // Note that this does NOT include failures during the actual "CONNECT" method
  165. // of an HTTP proxy.
  166. NET_ERROR(PROXY_CONNECTION_FAILED, -130)
  167. // A mandatory proxy configuration could not be used. Currently this means
  168. // that a mandatory PAC script could not be fetched, parsed or executed.
  169. NET_ERROR(MANDATORY_PROXY_CONFIGURATION_FAILED, -131)
  170. // -132 was formerly ERR_ESET_ANTI_VIRUS_SSL_INTERCEPTION
  171. // We've hit the max socket limit for the socket pool while preconnecting. We
  172. // don't bother trying to preconnect more sockets.
  173. NET_ERROR(PRECONNECT_MAX_SOCKET_LIMIT, -133)
  174. // The permission to use the SSL client certificate's private key was denied.
  175. NET_ERROR(SSL_CLIENT_AUTH_PRIVATE_KEY_ACCESS_DENIED, -134)
  176. // The SSL client certificate has no private key.
  177. NET_ERROR(SSL_CLIENT_AUTH_CERT_NO_PRIVATE_KEY, -135)
  178. // The certificate presented by the HTTPS Proxy was invalid.
  179. NET_ERROR(PROXY_CERTIFICATE_INVALID, -136)
  180. // An error occurred when trying to do a name resolution (DNS).
  181. NET_ERROR(NAME_RESOLUTION_FAILED, -137)
  182. // Permission to access the network was denied. This is used to distinguish
  183. // errors that were most likely caused by a firewall from other access denied
  184. // errors. See also ERR_ACCESS_DENIED.
  185. NET_ERROR(NETWORK_ACCESS_DENIED, -138)
  186. // The request throttler module cancelled this request to avoid DDOS.
  187. NET_ERROR(TEMPORARILY_THROTTLED, -139)
  188. // A request to create an SSL tunnel connection through the HTTPS proxy
  189. // received a 302 (temporary redirect) response. The response body might
  190. // include a description of why the request failed.
  191. //
  192. // TODO(https://crbug.com/928551): This is deprecated and should not be used by
  193. // new code.
  194. NET_ERROR(HTTPS_PROXY_TUNNEL_RESPONSE_REDIRECT, -140)
  195. // We were unable to sign the CertificateVerify data of an SSL client auth
  196. // handshake with the client certificate's private key.
  197. //
  198. // Possible causes for this include the user implicitly or explicitly
  199. // denying access to the private key, the private key may not be valid for
  200. // signing, the key may be relying on a cached handle which is no longer
  201. // valid, or the CSP won't allow arbitrary data to be signed.
  202. NET_ERROR(SSL_CLIENT_AUTH_SIGNATURE_FAILED, -141)
  203. // The message was too large for the transport. (for example a UDP message
  204. // which exceeds size threshold).
  205. NET_ERROR(MSG_TOO_BIG, -142)
  206. // Error -143 was removed (SPDY_SESSION_ALREADY_EXISTS)
  207. // Error -144 was removed (LIMIT_VIOLATION).
  208. // Websocket protocol error. Indicates that we are terminating the connection
  209. // due to a malformed frame or other protocol violation.
  210. NET_ERROR(WS_PROTOCOL_ERROR, -145)
  211. // Error -146 was removed (PROTOCOL_SWITCHED)
  212. // Returned when attempting to bind an address that is already in use.
  213. NET_ERROR(ADDRESS_IN_USE, -147)
  214. // An operation failed because the SSL handshake has not completed.
  215. NET_ERROR(SSL_HANDSHAKE_NOT_COMPLETED, -148)
  216. // SSL peer's public key is invalid.
  217. NET_ERROR(SSL_BAD_PEER_PUBLIC_KEY, -149)
  218. // The certificate didn't match the built-in public key pins for the host name.
  219. // The pins are set in net/http/transport_security_state.cc and require that
  220. // one of a set of public keys exist on the path from the leaf to the root.
  221. NET_ERROR(SSL_PINNED_KEY_NOT_IN_CERT_CHAIN, -150)
  222. // Server request for client certificate did not contain any types we support.
  223. NET_ERROR(CLIENT_AUTH_CERT_TYPE_UNSUPPORTED, -151)
  224. // Error -152 was removed (ORIGIN_BOUND_CERT_GENERATION_TYPE_MISMATCH)
  225. // An SSL peer sent us a fatal decrypt_error alert. This typically occurs when
  226. // a peer could not correctly verify a signature (in CertificateVerify or
  227. // ServerKeyExchange) or validate a Finished message.
  228. NET_ERROR(SSL_DECRYPT_ERROR_ALERT, -153)
  229. // There are too many pending WebSocketJob instances, so the new job was not
  230. // pushed to the queue.
  231. NET_ERROR(WS_THROTTLE_QUEUE_TOO_LARGE, -154)
  232. // Error -155 was removed (TOO_MANY_SOCKET_STREAMS)
  233. // The SSL server certificate changed in a renegotiation.
  234. NET_ERROR(SSL_SERVER_CERT_CHANGED, -156)
  235. // Error -157 was removed (SSL_INAPPROPRIATE_FALLBACK).
  236. // Error -158 was removed (CT_NO_SCTS_VERIFIED_OK).
  237. // The SSL server sent us a fatal unrecognized_name alert.
  238. NET_ERROR(SSL_UNRECOGNIZED_NAME_ALERT, -159)
  239. // Failed to set the socket's receive buffer size as requested.
  240. NET_ERROR(SOCKET_SET_RECEIVE_BUFFER_SIZE_ERROR, -160)
  241. // Failed to set the socket's send buffer size as requested.
  242. NET_ERROR(SOCKET_SET_SEND_BUFFER_SIZE_ERROR, -161)
  243. // Failed to set the socket's receive buffer size as requested, despite success
  244. // return code from setsockopt.
  245. NET_ERROR(SOCKET_RECEIVE_BUFFER_SIZE_UNCHANGEABLE, -162)
  246. // Failed to set the socket's send buffer size as requested, despite success
  247. // return code from setsockopt.
  248. NET_ERROR(SOCKET_SEND_BUFFER_SIZE_UNCHANGEABLE, -163)
  249. // Failed to import a client certificate from the platform store into the SSL
  250. // library.
  251. NET_ERROR(SSL_CLIENT_AUTH_CERT_BAD_FORMAT, -164)
  252. // Error -165 was removed (SSL_FALLBACK_BEYOND_MINIMUM_VERSION).
  253. // Resolving a hostname to an IP address list included the IPv4 address
  254. // "127.0.53.53". This is a special IP address which ICANN has recommended to
  255. // indicate there was a name collision, and alert admins to a potential
  256. // problem.
  257. NET_ERROR(ICANN_NAME_COLLISION, -166)
  258. // The SSL server presented a certificate which could not be decoded. This is
  259. // not a certificate error code as no X509Certificate object is available. This
  260. // error is fatal.
  261. NET_ERROR(SSL_SERVER_CERT_BAD_FORMAT, -167)
  262. // Certificate Transparency: Received a signed tree head that failed to parse.
  263. NET_ERROR(CT_STH_PARSING_FAILED, -168)
  264. // Certificate Transparency: Received a signed tree head whose JSON parsing was
  265. // OK but was missing some of the fields.
  266. NET_ERROR(CT_STH_INCOMPLETE, -169)
  267. // The attempt to reuse a connection to send proxy auth credentials failed
  268. // before the AuthController was used to generate credentials. The caller should
  269. // reuse the controller with a new connection. This error is only used
  270. // internally by the network stack.
  271. NET_ERROR(UNABLE_TO_REUSE_CONNECTION_FOR_PROXY_AUTH, -170)
  272. // Certificate Transparency: Failed to parse the received consistency proof.
  273. NET_ERROR(CT_CONSISTENCY_PROOF_PARSING_FAILED, -171)
  274. // The SSL server required an unsupported cipher suite that has since been
  275. // removed. This error will temporarily be signaled on a fallback for one or two
  276. // releases immediately following a cipher suite's removal, after which the
  277. // fallback will be removed.
  278. NET_ERROR(SSL_OBSOLETE_CIPHER, -172)
  279. // When a WebSocket handshake is done successfully and the connection has been
  280. // upgraded, the URLRequest is cancelled with this error code.
  281. NET_ERROR(WS_UPGRADE, -173)
  282. // Socket ReadIfReady support is not implemented. This error should not be user
  283. // visible, because the normal Read() method is used as a fallback.
  284. NET_ERROR(READ_IF_READY_NOT_IMPLEMENTED, -174)
  285. // Error -175 was removed (SSL_VERSION_INTERFERENCE).
  286. // No socket buffer space is available.
  287. NET_ERROR(NO_BUFFER_SPACE, -176)
  288. // There were no common signature algorithms between our client certificate
  289. // private key and the server's preferences.
  290. NET_ERROR(SSL_CLIENT_AUTH_NO_COMMON_ALGORITHMS, -177)
  291. // TLS 1.3 early data was rejected by the server. This will be received before
  292. // any data is returned from the socket. The request should be retried with
  293. // early data disabled.
  294. NET_ERROR(EARLY_DATA_REJECTED, -178)
  295. // TLS 1.3 early data was offered, but the server responded with TLS 1.2 or
  296. // earlier. This is an internal error code to account for a
  297. // backwards-compatibility issue with early data and TLS 1.2. It will be
  298. // received before any data is returned from the socket. The request should be
  299. // retried with early data disabled.
  300. //
  301. // See https://tools.ietf.org/html/rfc8446#appendix-D.3 for details.
  302. NET_ERROR(WRONG_VERSION_ON_EARLY_DATA, -179)
  303. // TLS 1.3 was enabled, but a lower version was negotiated and the server
  304. // returned a value indicating it supported TLS 1.3. This is part of a security
  305. // check in TLS 1.3, but it may also indicate the user is behind a buggy
  306. // TLS-terminating proxy which implemented TLS 1.2 incorrectly. (See
  307. // https://crbug.com/boringssl/226.)
  308. NET_ERROR(TLS13_DOWNGRADE_DETECTED, -180)
  309. // The server's certificate has a keyUsage extension incompatible with the
  310. // negotiated TLS key exchange method.
  311. NET_ERROR(SSL_KEY_USAGE_INCOMPATIBLE, -181)
  312. // The ECHConfigList fetched over DNS cannot be parsed.
  313. NET_ERROR(INVALID_ECH_CONFIG_LIST, -182)
  314. // ECH was enabled, but the server was unable to decrypt the encrypted
  315. // ClientHello.
  316. NET_ERROR(ECH_NOT_NEGOTIATED, -183)
  317. // ECH was enabled, the server was unable to decrypt the encrypted ClientHello,
  318. // and additionally did not present a certificate valid for the public name.
  319. NET_ERROR(ECH_FALLBACK_CERTIFICATE_INVALID, -184)
  320. // Certificate error codes
  321. //
  322. // The values of certificate error codes must be consecutive.
  323. // The server responded with a certificate whose common name did not match
  324. // the host name. This could mean:
  325. //
  326. // 1. An attacker has redirected our traffic to their server and is
  327. // presenting a certificate for which they know the private key.
  328. //
  329. // 2. The server is misconfigured and responding with the wrong cert.
  330. //
  331. // 3. The user is on a wireless network and is being redirected to the
  332. // network's login page.
  333. //
  334. // 4. The OS has used a DNS search suffix and the server doesn't have
  335. // a certificate for the abbreviated name in the address bar.
  336. //
  337. NET_ERROR(CERT_COMMON_NAME_INVALID, -200)
  338. // The server responded with a certificate that, by our clock, appears to
  339. // either not yet be valid or to have expired. This could mean:
  340. //
  341. // 1. An attacker is presenting an old certificate for which they have
  342. // managed to obtain the private key.
  343. //
  344. // 2. The server is misconfigured and is not presenting a valid cert.
  345. //
  346. // 3. Our clock is wrong.
  347. //
  348. NET_ERROR(CERT_DATE_INVALID, -201)
  349. // The server responded with a certificate that is signed by an authority
  350. // we don't trust. The could mean:
  351. //
  352. // 1. An attacker has substituted the real certificate for a cert that
  353. // contains their public key and is signed by their cousin.
  354. //
  355. // 2. The server operator has a legitimate certificate from a CA we don't
  356. // know about, but should trust.
  357. //
  358. // 3. The server is presenting a self-signed certificate, providing no
  359. // defense against active attackers (but foiling passive attackers).
  360. //
  361. NET_ERROR(CERT_AUTHORITY_INVALID, -202)
  362. // The server responded with a certificate that contains errors.
  363. // This error is not recoverable.
  364. //
  365. // MSDN describes this error as follows:
  366. // "The SSL certificate contains errors."
  367. // NOTE: It's unclear how this differs from ERR_CERT_INVALID. For consistency,
  368. // use that code instead of this one from now on.
  369. //
  370. NET_ERROR(CERT_CONTAINS_ERRORS, -203)
  371. // The certificate has no mechanism for determining if it is revoked. In
  372. // effect, this certificate cannot be revoked.
  373. NET_ERROR(CERT_NO_REVOCATION_MECHANISM, -204)
  374. // Revocation information for the security certificate for this site is not
  375. // available. This could mean:
  376. //
  377. // 1. An attacker has compromised the private key in the certificate and is
  378. // blocking our attempt to find out that the cert was revoked.
  379. //
  380. // 2. The certificate is unrevoked, but the revocation server is busy or
  381. // unavailable.
  382. //
  383. NET_ERROR(CERT_UNABLE_TO_CHECK_REVOCATION, -205)
  384. // The server responded with a certificate has been revoked.
  385. // We have the capability to ignore this error, but it is probably not the
  386. // thing to do.
  387. NET_ERROR(CERT_REVOKED, -206)
  388. // The server responded with a certificate that is invalid.
  389. // This error is not recoverable.
  390. //
  391. // MSDN describes this error as follows:
  392. // "The SSL certificate is invalid."
  393. //
  394. NET_ERROR(CERT_INVALID, -207)
  395. // The server responded with a certificate that is signed using a weak
  396. // signature algorithm.
  397. NET_ERROR(CERT_WEAK_SIGNATURE_ALGORITHM, -208)
  398. // -209 is available: was CERT_NOT_IN_DNS.
  399. // The host name specified in the certificate is not unique.
  400. NET_ERROR(CERT_NON_UNIQUE_NAME, -210)
  401. // The server responded with a certificate that contains a weak key (e.g.
  402. // a too-small RSA key).
  403. NET_ERROR(CERT_WEAK_KEY, -211)
  404. // The certificate claimed DNS names that are in violation of name constraints.
  405. NET_ERROR(CERT_NAME_CONSTRAINT_VIOLATION, -212)
  406. // The certificate's validity period is too long.
  407. NET_ERROR(CERT_VALIDITY_TOO_LONG, -213)
  408. // Certificate Transparency was required for this connection, but the server
  409. // did not provide CT information that complied with the policy.
  410. NET_ERROR(CERTIFICATE_TRANSPARENCY_REQUIRED, -214)
  411. // The certificate chained to a legacy Symantec root that is no longer trusted.
  412. // https://g.co/chrome/symantecpkicerts
  413. NET_ERROR(CERT_SYMANTEC_LEGACY, -215)
  414. // -216 was QUIC_CERT_ROOT_NOT_KNOWN which has been renumbered to not be in the
  415. // certificate error range.
  416. // The certificate is known to be used for interception by an entity other
  417. // the device owner.
  418. NET_ERROR(CERT_KNOWN_INTERCEPTION_BLOCKED, -217)
  419. // -218 was SSL_OBSOLETE_VERSION which is not longer used. TLS 1.0/1.1 instead
  420. // cause SSL_VERSION_OR_CIPHER_MISMATCH now.
  421. // Add new certificate error codes here.
  422. //
  423. // Update the value of CERT_END whenever you add a new certificate error
  424. // code.
  425. // The value immediately past the last certificate error code.
  426. NET_ERROR(CERT_END, -219)
  427. // The URL is invalid.
  428. NET_ERROR(INVALID_URL, -300)
  429. // The scheme of the URL is disallowed.
  430. NET_ERROR(DISALLOWED_URL_SCHEME, -301)
  431. // The scheme of the URL is unknown.
  432. NET_ERROR(UNKNOWN_URL_SCHEME, -302)
  433. // Attempting to load an URL resulted in a redirect to an invalid URL.
  434. NET_ERROR(INVALID_REDIRECT, -303)
  435. // Attempting to load an URL resulted in too many redirects.
  436. NET_ERROR(TOO_MANY_REDIRECTS, -310)
  437. // Attempting to load an URL resulted in an unsafe redirect (e.g., a redirect
  438. // to file:// is considered unsafe).
  439. NET_ERROR(UNSAFE_REDIRECT, -311)
  440. // Attempting to load an URL with an unsafe port number. These are port
  441. // numbers that correspond to services, which are not robust to spurious input
  442. // that may be constructed as a result of an allowed web construct (e.g., HTTP
  443. // looks a lot like SMTP, so form submission to port 25 is denied).
  444. NET_ERROR(UNSAFE_PORT, -312)
  445. // The server's response was invalid.
  446. NET_ERROR(INVALID_RESPONSE, -320)
  447. // Error in chunked transfer encoding.
  448. NET_ERROR(INVALID_CHUNKED_ENCODING, -321)
  449. // The server did not support the request method.
  450. NET_ERROR(METHOD_NOT_SUPPORTED, -322)
  451. // The response was 407 (Proxy Authentication Required), yet we did not send
  452. // the request to a proxy.
  453. NET_ERROR(UNEXPECTED_PROXY_AUTH, -323)
  454. // The server closed the connection without sending any data.
  455. NET_ERROR(EMPTY_RESPONSE, -324)
  456. // The headers section of the response is too large.
  457. NET_ERROR(RESPONSE_HEADERS_TOO_BIG, -325)
  458. // Error -326 was removed (PAC_STATUS_NOT_OK)
  459. // The evaluation of the PAC script failed.
  460. NET_ERROR(PAC_SCRIPT_FAILED, -327)
  461. // The response was 416 (Requested range not satisfiable) and the server cannot
  462. // satisfy the range requested.
  463. NET_ERROR(REQUEST_RANGE_NOT_SATISFIABLE, -328)
  464. // The identity used for authentication is invalid.
  465. NET_ERROR(MALFORMED_IDENTITY, -329)
  466. // Content decoding of the response body failed.
  467. NET_ERROR(CONTENT_DECODING_FAILED, -330)
  468. // An operation could not be completed because all network IO
  469. // is suspended.
  470. NET_ERROR(NETWORK_IO_SUSPENDED, -331)
  471. // FLIP data received without receiving a SYN_REPLY on the stream.
  472. NET_ERROR(SYN_REPLY_NOT_RECEIVED, -332)
  473. // Converting the response to target encoding failed.
  474. NET_ERROR(ENCODING_CONVERSION_FAILED, -333)
  475. // The server sent an FTP directory listing in a format we do not understand.
  476. NET_ERROR(UNRECOGNIZED_FTP_DIRECTORY_LISTING_FORMAT, -334)
  477. // Obsolete. Was only logged in NetLog when an HTTP/2 pushed stream expired.
  478. // NET_ERROR(INVALID_SPDY_STREAM, -335)
  479. // There are no supported proxies in the provided list.
  480. NET_ERROR(NO_SUPPORTED_PROXIES, -336)
  481. // There is an HTTP/2 protocol error.
  482. NET_ERROR(HTTP2_PROTOCOL_ERROR, -337)
  483. // Credentials could not be established during HTTP Authentication.
  484. NET_ERROR(INVALID_AUTH_CREDENTIALS, -338)
  485. // An HTTP Authentication scheme was tried which is not supported on this
  486. // machine.
  487. NET_ERROR(UNSUPPORTED_AUTH_SCHEME, -339)
  488. // Detecting the encoding of the response failed.
  489. NET_ERROR(ENCODING_DETECTION_FAILED, -340)
  490. // (GSSAPI) No Kerberos credentials were available during HTTP Authentication.
  491. NET_ERROR(MISSING_AUTH_CREDENTIALS, -341)
  492. // An unexpected, but documented, SSPI or GSSAPI status code was returned.
  493. NET_ERROR(UNEXPECTED_SECURITY_LIBRARY_STATUS, -342)
  494. // The environment was not set up correctly for authentication (for
  495. // example, no KDC could be found or the principal is unknown.
  496. NET_ERROR(MISCONFIGURED_AUTH_ENVIRONMENT, -343)
  497. // An undocumented SSPI or GSSAPI status code was returned.
  498. NET_ERROR(UNDOCUMENTED_SECURITY_LIBRARY_STATUS, -344)
  499. // The HTTP response was too big to drain.
  500. NET_ERROR(RESPONSE_BODY_TOO_BIG_TO_DRAIN, -345)
  501. // The HTTP response contained multiple distinct Content-Length headers.
  502. NET_ERROR(RESPONSE_HEADERS_MULTIPLE_CONTENT_LENGTH, -346)
  503. // HTTP/2 headers have been received, but not all of them - status or version
  504. // headers are missing, so we're expecting additional frames to complete them.
  505. NET_ERROR(INCOMPLETE_HTTP2_HEADERS, -347)
  506. // No PAC URL configuration could be retrieved from DHCP. This can indicate
  507. // either a failure to retrieve the DHCP configuration, or that there was no
  508. // PAC URL configured in DHCP.
  509. NET_ERROR(PAC_NOT_IN_DHCP, -348)
  510. // The HTTP response contained multiple Content-Disposition headers.
  511. NET_ERROR(RESPONSE_HEADERS_MULTIPLE_CONTENT_DISPOSITION, -349)
  512. // The HTTP response contained multiple Location headers.
  513. NET_ERROR(RESPONSE_HEADERS_MULTIPLE_LOCATION, -350)
  514. // HTTP/2 server refused the request without processing, and sent either a
  515. // GOAWAY frame with error code NO_ERROR and Last-Stream-ID lower than the
  516. // stream id corresponding to the request indicating that this request has not
  517. // been processed yet, or a RST_STREAM frame with error code REFUSED_STREAM.
  518. // Client MAY retry (on a different connection). See RFC7540 Section 8.1.4.
  519. NET_ERROR(HTTP2_SERVER_REFUSED_STREAM, -351)
  520. // HTTP/2 server didn't respond to the PING message.
  521. NET_ERROR(HTTP2_PING_FAILED, -352)
  522. // Obsolete. Kept here to avoid reuse, as the old error can still appear on
  523. // histograms.
  524. // NET_ERROR(PIPELINE_EVICTION, -353)
  525. // The HTTP response body transferred fewer bytes than were advertised by the
  526. // Content-Length header when the connection is closed.
  527. NET_ERROR(CONTENT_LENGTH_MISMATCH, -354)
  528. // The HTTP response body is transferred with Chunked-Encoding, but the
  529. // terminating zero-length chunk was never sent when the connection is closed.
  530. NET_ERROR(INCOMPLETE_CHUNKED_ENCODING, -355)
  531. // There is a QUIC protocol error.
  532. NET_ERROR(QUIC_PROTOCOL_ERROR, -356)
  533. // The HTTP headers were truncated by an EOF.
  534. NET_ERROR(RESPONSE_HEADERS_TRUNCATED, -357)
  535. // The QUIC crypto handshake failed. This means that the server was unable
  536. // to read any requests sent, so they may be resent.
  537. NET_ERROR(QUIC_HANDSHAKE_FAILED, -358)
  538. // Obsolete. Kept here to avoid reuse, as the old error can still appear on
  539. // histograms.
  540. // NET_ERROR(REQUEST_FOR_SECURE_RESOURCE_OVER_INSECURE_QUIC, -359)
  541. // Transport security is inadequate for the HTTP/2 version.
  542. NET_ERROR(HTTP2_INADEQUATE_TRANSPORT_SECURITY, -360)
  543. // The peer violated HTTP/2 flow control.
  544. NET_ERROR(HTTP2_FLOW_CONTROL_ERROR, -361)
  545. // The peer sent an improperly sized HTTP/2 frame.
  546. NET_ERROR(HTTP2_FRAME_SIZE_ERROR, -362)
  547. // Decoding or encoding of compressed HTTP/2 headers failed.
  548. NET_ERROR(HTTP2_COMPRESSION_ERROR, -363)
  549. // Proxy Auth Requested without a valid Client Socket Handle.
  550. NET_ERROR(PROXY_AUTH_REQUESTED_WITH_NO_CONNECTION, -364)
  551. // HTTP_1_1_REQUIRED error code received on HTTP/2 session.
  552. NET_ERROR(HTTP_1_1_REQUIRED, -365)
  553. // HTTP_1_1_REQUIRED error code received on HTTP/2 session to proxy.
  554. NET_ERROR(PROXY_HTTP_1_1_REQUIRED, -366)
  555. // The PAC script terminated fatally and must be reloaded.
  556. NET_ERROR(PAC_SCRIPT_TERMINATED, -367)
  557. // Obsolete. Kept here to avoid reuse.
  558. // Request is throttled because of a Backoff header.
  559. // See: crbug.com/486891.
  560. // NET_ERROR(TEMPORARY_BACKOFF, -369)
  561. // The server was expected to return an HTTP/1.x response, but did not. Rather
  562. // than treat it as HTTP/0.9, this error is returned.
  563. NET_ERROR(INVALID_HTTP_RESPONSE, -370)
  564. // Initializing content decoding failed.
  565. NET_ERROR(CONTENT_DECODING_INIT_FAILED, -371)
  566. // Received HTTP/2 RST_STREAM frame with NO_ERROR error code. This error should
  567. // be handled internally by HTTP/2 code, and should not make it above the
  568. // SpdyStream layer.
  569. NET_ERROR(HTTP2_RST_STREAM_NO_ERROR_RECEIVED, -372)
  570. // The pushed stream claimed by the request is no longer available.
  571. NET_ERROR(HTTP2_PUSHED_STREAM_NOT_AVAILABLE, -373)
  572. // A pushed stream was claimed and later reset by the server. When this happens,
  573. // the request should be retried.
  574. NET_ERROR(HTTP2_CLAIMED_PUSHED_STREAM_RESET_BY_SERVER, -374)
  575. // An HTTP transaction was retried too many times due for authentication or
  576. // invalid certificates. This may be due to a bug in the net stack that would
  577. // otherwise infinite loop, or if the server or proxy continually requests fresh
  578. // credentials or presents a fresh invalid certificate.
  579. NET_ERROR(TOO_MANY_RETRIES, -375)
  580. // Received an HTTP/2 frame on a closed stream.
  581. NET_ERROR(HTTP2_STREAM_CLOSED, -376)
  582. // Client is refusing an HTTP/2 stream.
  583. NET_ERROR(HTTP2_CLIENT_REFUSED_STREAM, -377)
  584. // A pushed HTTP/2 stream was claimed by a request based on matching URL and
  585. // request headers, but the pushed response headers do not match the request.
  586. NET_ERROR(HTTP2_PUSHED_RESPONSE_DOES_NOT_MATCH, -378)
  587. // The server returned a non-2xx HTTP response code.
  588. //
  589. // Not that this error is only used by certain APIs that interpret the HTTP
  590. // response itself. URLRequest for instance just passes most non-2xx
  591. // response back as success.
  592. NET_ERROR(HTTP_RESPONSE_CODE_FAILURE, -379)
  593. // The certificate presented on a QUIC connection does not chain to a known root
  594. // and the origin connected to is not on a list of domains where unknown roots
  595. // are allowed.
  596. NET_ERROR(QUIC_CERT_ROOT_NOT_KNOWN, -380)
  597. // A GOAWAY frame has been received indicating that the request has not been
  598. // processed and is therefore safe to retry on a different connection.
  599. NET_ERROR(QUIC_GOAWAY_REQUEST_CAN_BE_RETRIED, -381)
  600. // The ACCEPT_CH restart has been triggered too many times
  601. NET_ERROR(TOO_MANY_ACCEPT_CH_RESTARTS, -382)
  602. // The IP address space of the remote endpoint differed from the previous
  603. // observed value during the same request. Any cache entry for the affected
  604. // request should be invalidated.
  605. NET_ERROR(INCONSISTENT_IP_ADDRESS_SPACE, -383)
  606. // The IP address space of the cached remote endpoint is blocked by private
  607. // network access check.
  608. NET_ERROR(CACHED_IP_ADDRESS_SPACE_BLOCKED_BY_PRIVATE_NETWORK_ACCESS_POLICY,
  609. -384)
  610. // The cache does not have the requested entry.
  611. NET_ERROR(CACHE_MISS, -400)
  612. // Unable to read from the disk cache.
  613. NET_ERROR(CACHE_READ_FAILURE, -401)
  614. // Unable to write to the disk cache.
  615. NET_ERROR(CACHE_WRITE_FAILURE, -402)
  616. // The operation is not supported for this entry.
  617. NET_ERROR(CACHE_OPERATION_NOT_SUPPORTED, -403)
  618. // The disk cache is unable to open this entry.
  619. NET_ERROR(CACHE_OPEN_FAILURE, -404)
  620. // The disk cache is unable to create this entry.
  621. NET_ERROR(CACHE_CREATE_FAILURE, -405)
  622. // Multiple transactions are racing to create disk cache entries. This is an
  623. // internal error returned from the HttpCache to the HttpCacheTransaction that
  624. // tells the transaction to restart the entry-creation logic because the state
  625. // of the cache has changed.
  626. NET_ERROR(CACHE_RACE, -406)
  627. // The cache was unable to read a checksum record on an entry. This can be
  628. // returned from attempts to read from the cache. It is an internal error,
  629. // returned by the SimpleCache backend, but not by any URLRequest methods
  630. // or members.
  631. NET_ERROR(CACHE_CHECKSUM_READ_FAILURE, -407)
  632. // The cache found an entry with an invalid checksum. This can be returned from
  633. // attempts to read from the cache. It is an internal error, returned by the
  634. // SimpleCache backend, but not by any URLRequest methods or members.
  635. NET_ERROR(CACHE_CHECKSUM_MISMATCH, -408)
  636. // Internal error code for the HTTP cache. The cache lock timeout has fired.
  637. NET_ERROR(CACHE_LOCK_TIMEOUT, -409)
  638. // Received a challenge after the transaction has read some data, and the
  639. // credentials aren't available. There isn't a way to get them at that point.
  640. NET_ERROR(CACHE_AUTH_FAILURE_AFTER_READ, -410)
  641. // Internal not-quite error code for the HTTP cache. In-memory hints suggest
  642. // that the cache entry would not have been usable with the transaction's
  643. // current configuration (e.g. load flags, mode, etc.)
  644. NET_ERROR(CACHE_ENTRY_NOT_SUITABLE, -411)
  645. // The disk cache is unable to doom this entry.
  646. NET_ERROR(CACHE_DOOM_FAILURE, -412)
  647. // The disk cache is unable to open or create this entry.
  648. NET_ERROR(CACHE_OPEN_OR_CREATE_FAILURE, -413)
  649. // The server's response was insecure (e.g. there was a cert error).
  650. NET_ERROR(INSECURE_RESPONSE, -501)
  651. // An attempt to import a client certificate failed, as the user's key
  652. // database lacked a corresponding private key.
  653. NET_ERROR(NO_PRIVATE_KEY_FOR_CERT, -502)
  654. // An error adding a certificate to the OS certificate database.
  655. NET_ERROR(ADD_USER_CERT_FAILED, -503)
  656. // An error occurred while handling a signed exchange.
  657. NET_ERROR(INVALID_SIGNED_EXCHANGE, -504)
  658. // An error occurred while handling a Web Bundle source.
  659. NET_ERROR(INVALID_WEB_BUNDLE, -505)
  660. // A Trust Tokens protocol operation-executing request failed for one of a
  661. // number of reasons (precondition failure, internal error, bad response).
  662. NET_ERROR(TRUST_TOKEN_OPERATION_FAILED, -506)
  663. // When handling a Trust Tokens protocol operation-executing request, the system
  664. // was able to execute the request's Trust Tokens operation without sending the
  665. // request to its destination: for instance, the results could have been present
  666. // in a local cache (for redemption) or the operation could have been diverted
  667. // to a local provider (for "platform-provided" issuance).
  668. NET_ERROR(TRUST_TOKEN_OPERATION_SUCCESS_WITHOUT_SENDING_REQUEST, -507)
  669. // *** Code -600 is reserved (was FTP_PASV_COMMAND_FAILED). ***
  670. // A generic error for failed FTP control connection command.
  671. // If possible, please use or add a more specific error code.
  672. NET_ERROR(FTP_FAILED, -601)
  673. // The server cannot fulfill the request at this point. This is a temporary
  674. // error.
  675. // FTP response code 421.
  676. NET_ERROR(FTP_SERVICE_UNAVAILABLE, -602)
  677. // The server has aborted the transfer.
  678. // FTP response code 426.
  679. NET_ERROR(FTP_TRANSFER_ABORTED, -603)
  680. // The file is busy, or some other temporary error condition on opening
  681. // the file.
  682. // FTP response code 450.
  683. NET_ERROR(FTP_FILE_BUSY, -604)
  684. // Server rejected our command because of syntax errors.
  685. // FTP response codes 500, 501.
  686. NET_ERROR(FTP_SYNTAX_ERROR, -605)
  687. // Server does not support the command we issued.
  688. // FTP response codes 502, 504.
  689. NET_ERROR(FTP_COMMAND_NOT_SUPPORTED, -606)
  690. // Server rejected our command because we didn't issue the commands in right
  691. // order.
  692. // FTP response code 503.
  693. NET_ERROR(FTP_BAD_COMMAND_SEQUENCE, -607)
  694. // PKCS #12 import failed due to incorrect password.
  695. NET_ERROR(PKCS12_IMPORT_BAD_PASSWORD, -701)
  696. // PKCS #12 import failed due to other error.
  697. NET_ERROR(PKCS12_IMPORT_FAILED, -702)
  698. // CA import failed - not a CA cert.
  699. NET_ERROR(IMPORT_CA_CERT_NOT_CA, -703)
  700. // Import failed - certificate already exists in database.
  701. // Note it's a little weird this is an error but reimporting a PKCS12 is ok
  702. // (no-op). That's how Mozilla does it, though.
  703. NET_ERROR(IMPORT_CERT_ALREADY_EXISTS, -704)
  704. // CA import failed due to some other error.
  705. NET_ERROR(IMPORT_CA_CERT_FAILED, -705)
  706. // Server certificate import failed due to some internal error.
  707. NET_ERROR(IMPORT_SERVER_CERT_FAILED, -706)
  708. // PKCS #12 import failed due to invalid MAC.
  709. NET_ERROR(PKCS12_IMPORT_INVALID_MAC, -707)
  710. // PKCS #12 import failed due to invalid/corrupt file.
  711. NET_ERROR(PKCS12_IMPORT_INVALID_FILE, -708)
  712. // PKCS #12 import failed due to unsupported features.
  713. NET_ERROR(PKCS12_IMPORT_UNSUPPORTED, -709)
  714. // Key generation failed.
  715. NET_ERROR(KEY_GENERATION_FAILED, -710)
  716. // Error -711 was removed (ORIGIN_BOUND_CERT_GENERATION_FAILED)
  717. // Failure to export private key.
  718. NET_ERROR(PRIVATE_KEY_EXPORT_FAILED, -712)
  719. // Self-signed certificate generation failed.
  720. NET_ERROR(SELF_SIGNED_CERT_GENERATION_FAILED, -713)
  721. // The certificate database changed in some way.
  722. NET_ERROR(CERT_DATABASE_CHANGED, -714)
  723. // Error -715 was removed (CHANNEL_ID_IMPORT_FAILED)
  724. // DNS error codes.
  725. // DNS resolver received a malformed response.
  726. NET_ERROR(DNS_MALFORMED_RESPONSE, -800)
  727. // DNS server requires TCP
  728. NET_ERROR(DNS_SERVER_REQUIRES_TCP, -801)
  729. // DNS server failed. This error is returned for all of the following
  730. // error conditions:
  731. // 1 - Format error - The name server was unable to interpret the query.
  732. // 2 - Server failure - The name server was unable to process this query
  733. // due to a problem with the name server.
  734. // 4 - Not Implemented - The name server does not support the requested
  735. // kind of query.
  736. // 5 - Refused - The name server refuses to perform the specified
  737. // operation for policy reasons.
  738. NET_ERROR(DNS_SERVER_FAILED, -802)
  739. // DNS transaction timed out.
  740. NET_ERROR(DNS_TIMED_OUT, -803)
  741. // The entry was not found in cache or other local sources, for lookups where
  742. // only local sources were queried.
  743. // TODO(ericorth): Consider renaming to DNS_LOCAL_MISS or something like that as
  744. // the cache is not necessarily queried either.
  745. NET_ERROR(DNS_CACHE_MISS, -804)
  746. // Suffix search list rules prevent resolution of the given host name.
  747. NET_ERROR(DNS_SEARCH_EMPTY, -805)
  748. // Failed to sort addresses according to RFC3484.
  749. NET_ERROR(DNS_SORT_ERROR, -806)
  750. // Error -807 was removed (DNS_HTTP_FAILED)
  751. // Failed to resolve the hostname of a DNS-over-HTTPS server.
  752. NET_ERROR(DNS_SECURE_RESOLVER_HOSTNAME_RESOLUTION_FAILED, -808)
  753. // DNS identified the request as disallowed for insecure connection (http/ws).
  754. // Error should be handled as if an HTTP redirect was received to redirect to
  755. // https or wss.
  756. NET_ERROR(DNS_NAME_HTTPS_ONLY, -809)
  757. // All DNS requests associated with this job have been cancelled.
  758. NET_ERROR(DNS_REQUEST_CANCELLED, -810)
  759. // The hostname resolution of HTTPS record was expected to be resolved with
  760. // alpn values of supported protocols, but did not.
  761. NET_ERROR(DNS_NO_MACHING_SUPPORTED_ALPN, -811)