mirror of https://github.com/containers/podman.git
151 lines
3.6 KiB
Go
151 lines
3.6 KiB
Go
package errors
|
|
|
|
import (
|
|
"fmt"
|
|
|
|
"github.com/letsencrypt/boulder/identifier"
|
|
)
|
|
|
|
// ErrorType provides a coarse category for BoulderErrors.
|
|
// Objects of type ErrorType should never be directly returned by other
|
|
// functions; instead use the methods below to create an appropriate
|
|
// BoulderError wrapping one of these types.
|
|
type ErrorType int
|
|
|
|
const (
|
|
InternalServer ErrorType = iota
|
|
_
|
|
Malformed
|
|
Unauthorized
|
|
NotFound
|
|
RateLimit
|
|
RejectedIdentifier
|
|
InvalidEmail
|
|
ConnectionFailure
|
|
_ // Reserved, previously WrongAuthorizationState
|
|
CAA
|
|
MissingSCTs
|
|
Duplicate
|
|
OrderNotReady
|
|
DNS
|
|
BadPublicKey
|
|
BadCSR
|
|
AlreadyRevoked
|
|
BadRevocationReason
|
|
)
|
|
|
|
func (ErrorType) Error() string {
|
|
return "urn:ietf:params:acme:error"
|
|
}
|
|
|
|
// BoulderError represents internal Boulder errors
|
|
type BoulderError struct {
|
|
Type ErrorType
|
|
Detail string
|
|
SubErrors []SubBoulderError
|
|
}
|
|
|
|
// SubBoulderError represents sub-errors specific to an identifier that are
|
|
// related to a top-level internal Boulder error.
|
|
type SubBoulderError struct {
|
|
*BoulderError
|
|
Identifier identifier.ACMEIdentifier
|
|
}
|
|
|
|
func (be *BoulderError) Error() string {
|
|
return be.Detail
|
|
}
|
|
|
|
func (be *BoulderError) Unwrap() error {
|
|
return be.Type
|
|
}
|
|
|
|
// WithSubErrors returns a new BoulderError instance created by adding the
|
|
// provided subErrs to the existing BoulderError.
|
|
func (be *BoulderError) WithSubErrors(subErrs []SubBoulderError) *BoulderError {
|
|
return &BoulderError{
|
|
Type: be.Type,
|
|
Detail: be.Detail,
|
|
SubErrors: append(be.SubErrors, subErrs...),
|
|
}
|
|
}
|
|
|
|
// New is a convenience function for creating a new BoulderError
|
|
func New(errType ErrorType, msg string, args ...interface{}) error {
|
|
return &BoulderError{
|
|
Type: errType,
|
|
Detail: fmt.Sprintf(msg, args...),
|
|
}
|
|
}
|
|
|
|
func InternalServerError(msg string, args ...interface{}) error {
|
|
return New(InternalServer, msg, args...)
|
|
}
|
|
|
|
func MalformedError(msg string, args ...interface{}) error {
|
|
return New(Malformed, msg, args...)
|
|
}
|
|
|
|
func UnauthorizedError(msg string, args ...interface{}) error {
|
|
return New(Unauthorized, msg, args...)
|
|
}
|
|
|
|
func NotFoundError(msg string, args ...interface{}) error {
|
|
return New(NotFound, msg, args...)
|
|
}
|
|
|
|
func RateLimitError(msg string, args ...interface{}) error {
|
|
return &BoulderError{
|
|
Type: RateLimit,
|
|
Detail: fmt.Sprintf(msg+": see https://letsencrypt.org/docs/rate-limits/", args...),
|
|
}
|
|
}
|
|
|
|
func RejectedIdentifierError(msg string, args ...interface{}) error {
|
|
return New(RejectedIdentifier, msg, args...)
|
|
}
|
|
|
|
func InvalidEmailError(msg string, args ...interface{}) error {
|
|
return New(InvalidEmail, msg, args...)
|
|
}
|
|
|
|
func ConnectionFailureError(msg string, args ...interface{}) error {
|
|
return New(ConnectionFailure, msg, args...)
|
|
}
|
|
|
|
func CAAError(msg string, args ...interface{}) error {
|
|
return New(CAA, msg, args...)
|
|
}
|
|
|
|
func MissingSCTsError(msg string, args ...interface{}) error {
|
|
return New(MissingSCTs, msg, args...)
|
|
}
|
|
|
|
func DuplicateError(msg string, args ...interface{}) error {
|
|
return New(Duplicate, msg, args...)
|
|
}
|
|
|
|
func OrderNotReadyError(msg string, args ...interface{}) error {
|
|
return New(OrderNotReady, msg, args...)
|
|
}
|
|
|
|
func DNSError(msg string, args ...interface{}) error {
|
|
return New(DNS, msg, args...)
|
|
}
|
|
|
|
func BadPublicKeyError(msg string, args ...interface{}) error {
|
|
return New(BadPublicKey, msg, args...)
|
|
}
|
|
|
|
func BadCSRError(msg string, args ...interface{}) error {
|
|
return New(BadCSR, msg, args...)
|
|
}
|
|
|
|
func AlreadyRevokedError(msg string, args ...interface{}) error {
|
|
return New(AlreadyRevoked, msg, args...)
|
|
}
|
|
|
|
func BadRevocationReasonError(reason int64) error {
|
|
return New(BadRevocationReason, "disallowed revocation reason: %d", reason)
|
|
}
|