You are troubleshooting an SSL related issue on ProxySG and are seeing errors in sslproxy debug logs and want to know what the SWE error codes mean.
Using advanced URL /sslproxy/debug and cfssl/debug on ProxySG
Note: You will usually be better served looking at /sslproxy/debug and /cfssl/debug logs with +INFO enabled if possible.
CFSSL logs will tell you the OpenSSL error code. (So even if you are troubleshooting an issue with SSL Interception it could be helpful to grab both sslproxy and cfssl debug logs.
In case it is helpful, here is a list of the SWE error codes
SWE = SSL Worker Error
Error |
Code |
SWE_OK = 0 |
0 |
SWE_OTHER_ERROR |
1 |
|
|
// I/O errors |
|
SWE_CLIENT_READ_ERROR |
2 |
SWE_CLIENT_WRITE_ERROR |
3 |
SWE_SERVER_READ_ERROR |
4 |
SWE_SERVER_WRITE_ERROR |
5 |
SWE_SERVER_CONNECT_ERROR |
6 |
SWE_ADN_DELAYED_HANDOFF_ERROR |
7 |
SWE_SERVER_EXTRA_CONNECT_ERROR |
8 |
SWE_TUNNEL_CONNECT_ERROR |
9 |
|
|
// Internal errors |
|
SWE_URL_CREATE_ERROR |
10 |
SWE_SERVER_CTX_LOOKUP_ERROR |
11 |
SWE_CLONE_SESSION_ERROR |
12 |
SWE_CLONE_EXTRA_SESSION_ERROR |
13 |
SWE_TRANSFER_BIO_ERROR |
14 |
SWE_BIO_REMOVE_ERROR |
15 |
SWE_ACCEPT_ERROR |
16 |
SWE_CONNECT_ERROR |
17 |
SWE_DWNSTR_BIO_INSTALL_ERROR |
18 |
SWE_UPSTR_BIO_INSTALL_ERROR |
19 |
SWE_CLIENT_CTX_LOOKUP_ERROR |
20 |
SWE_UPSTR_SET_SESSION_FAILED |
21 |
|
|
// Internal assertion failures |
|
SWE_DWNSTR_SSL_NULL = 101 |
101 |
SWE_UPSTR_SSL_NULL |
102 |
SWE_EXTRA_UPSTR_SSL_NULL |
103 |
SWE_UPSTR_SOCKET_INVALID |
104 |
SWE_INVALID_STATE_TRANSITION |
105 |
SWE_UPSTR_CTX_NULL |
106 |
SWE_DWNSTR_BYTE_RECORD_BIO_NULL |
107 |
SWE_NO_SESSID_IN_CLIENT_HELLO |
108 |
SWE_UPSTR_SESSION_NULL |
109 |
SWE_INCORRECT_HIT_ON_DWNSTR |
110 |
SWE_SESSION_MISMATCH |
111 |
SWE_INCORRECT_SSL_METHOD |
112 |
SWE_MISSING_BYTE_RECORD_BIO |
113 |
SWE_AUTHVIEW_MSG_NULL |
114 |
SWE_SSL3_FSM_PROGRESSED_TOO_FAR |
115 |
SWE_SSL2_FSM_PROGRESSED_TOO_FAR |
116 |
SWE_INVALID_EXTRA_CONN_PURPOSE |
117 |
SWE_UNNECESSARY_FALLBACK_CONNECTION |
118 |
SWE_SSL_INTERCEPT_TRANSACTION_NULL |
119 |
SWE_ACTIVE_SESSION_STATS_NULL |
120 |
SWE_PROXY_TRANSACTION_NULL |
121 |
|
|
// Policy errors |
|
SWE_POLICY_DENY = 201 |
201 |
SWE_POLICY_TIMED_DENY |
202 |
SWE_LICENSE_EXPIRED_DENY |
203 |
SWE_MUST_SERVE_FROM_CACHE_DENY |
204 |
|
|
// Certificate errors |
|
SWE_SERVER_CERTIFICATE_VALIDATE_ERROR |
205 |
|
|
SWE_TUNNEL_ON_ERROR |
206 |
SWE_DETECT_MSTURN |
207 |
|
|
SWE_LAST |
208 |