# File containing internal localization messages used by 
# log comments, approval notifications and some exceptions in CESeCore.
#
# The keys should be sections into which module the message
# originates from, example raadmin.msg1 or keyrecovery.testmessage
#
# ENGLISH VERSION
#
# Modified date:    $Id: intresources.en.properties 1386 2012-08-20 12:41:21Z tomas $

# This are resources only used with the test script
raadmin.testmsg       = Test ENG                        
raadmin.testparams    = Test {0} {1} {2} {3} {4} message {0} 

# Database protection resources
databaseprotection.errorverify = "Row protection is wrong, should be '{0}' (calculated) but was '{1}' (in db). Class {2}, rowId {3}."; 
databaseprotection.notokenwithid = No database protection token with id {0}.

# Backup resources
backup.notauthorized = Administrator '{0}' is not authorized to perform backup.
restore.notauthorized = Administrator '{0}' is not authorized to perform restore.

# CA administration resources
caadmin.addedca = CA with id {0} and name {1} added, status\: {2}. 
caadmin.editedca = CA with id {0} and name {1} edited. 
caadmin.removedca = CA with id {0} and name {1} removed.
caadmin.renamedca = CA with name {0}, and id {1}, renamed to {2}.
caadmin.caexistsname = CA with name {0} already exists.
caadmin.caexistsid = CA with id {0} already exists.
caadmin.canotexistsid = CA with id {0} does not exist.
caadmin.canotexistsname = CA with name {0} does not exist.
caadmin.notauthorizedtoca = Administrator '{0}' not authorized to CA {1}.
caadmin.notauthorizedtoaddca = Administrator '{0}' not authorized to add CA {1}.
caadmin.notauthorizedtoeditca = Administrator '{0}' not authorized to edit CA {1}.
caadmin.notauthorizedtoremoveca = Administrator '{0}' is not authorized to remove CA with id {1}.
caadmin.notauthorizedtorenameca = Administrator '{0}' is not authorized to rename CA with id {1}.
caadmin.caexpired = CA {0} has expired.
caadmin.canotyetvalid = CA {0} is not yet valid.

# Authentication resources
authentication.failed = Authentication failed. Further information: {0}

# Authorization resources
authorization.roleadded = Role {0} added.
authorization.erroraddroleexists = Error adding role {0}, role already exists.
authorization.errorrolenotexists = A role by the name of {0} does not exist.
authorization.errorroleexists = A role by the name of {0} already exists.
authorization.roleremoved = Role {0} removed.
authorization.rolerenamed = Role renamed from {0} to {1}.
authorization.accessrulesadded = Added the following access rules to role {0}: {1}
authorization.accessruleschanged = Changed the following rules in role {0}: {1}
authorization.accessrulesremoved = Removed the following access rules from role {0}: {1}
authorization.adminadded = Added administrator aspect(s) {0} to role {1}.
authorization.adminchanged = Modified administrator aspect(s) {0} in role {1}.
authorization.adminremoved = Removed administrator aspect(s) {0} from role {1}.
authorization.errorcreateauthtree = Error creating AuthorizationTreeUpdateDataBean.
authorization.notauthorizedtoeditroles = Administrator {0} not authorized to edit role {1}.
authorization.notuathorizedtoresource = Administrator is not authorized to resource {0}. Msg: {1}.

# Certificate creation resources
createcert.popverificationfailed = POPO verification failed.
createcert.nokeyinrequest = No public key in request.
createcert.canotfoundissuerusername = Can not find CA Id from issuerDN '{0}' or username '{1}'.
createcert.canotactive = Signing CA '{0}' is not active.
createcert.usertypeinvalid = User type is USER_INVALID, cannot create certificate for user '{0}'.
createcert.key_exists_for_another_user = User {0} is not allowed to use same key as the user(s) {1} is/are using.
createcert.subjectdn_exists_for_another_user = User {0} is not allowed to use same subject DN as the user(s) {1} is/are using. See setting for 'Enforce unique DN' in Edit Certificate Authorities.
createcert.not_unique_certserialnumberindex = Custom certificate serial number not allowed since there is no unique index on (issuerDN,serialNumber) on the 'CertificateData' table.
createcert.certprof_not_allowing_cert_sn_override = Used certificate profile ('{0}') is not allowing certificate serial number override.
createcert.cert_serial_number_allready_in_database = There is already a certificate stored in 'CertificateData' with the serial number '{0}'.
createcert.certprof_not_allowing_cert_sn_override_using_normal = Custom serial number ('{0}') not allowed by certificate profile, using normal serial number.
createcert.errorcertprofilenotfound = Certificate Profile ({0}) can not be found.
createcert.errorcertprofiletype = Wrong type of Certificate Profile ({0}) for end entity. Only End Entity Certificate Profiles can be issued by signsession bean.
createcert.errorcertprofilenotauthorized = End Entity data contains a CA, {0}, which the Certificate Profile, {1}, isn't authorized to use.
createcert.unsupportedkeytype = Unsupported public key ({0}), only RSA and ECDSA keys are supported.
createcert.illegalkeylength = Illegal key length: {0}.
createcert.notauthorized = Admin '{0}' is not authorized to create certificate from CA {1}.
createcert.errorbeyondmaxvalidity = notAfter from request ({0}) for user '{1}' is longer than maximum specified in certificate profile ({2}), not allowed, using notAfter from certificate profile.
createcert.limitingvalidity = Limiting validity of certificate because requested validity ({0}) is beyond CA validity ({1}).
createcert.errorinvalidcausality = Start date ({0}) is after end date ({1}). Trying to recover by swapping the dates.
createcert.errorinvalidstarttime = Ignoring invalid start time format ({0}).
createcert.errorbeforecurrentdate = notBefore from request ({0}) for user '{1}' pre-dates current time, not allowed, using current time instead.
createcert.errorbeyondtoolateexpiredate = Requested expire date is not before the configured 'ca.toolateexpiredate'. Certificate expire date '{0}'. ca.toolateexpiredate '{1}'.
createcert.invalidsignaturealg = Signature algorithm {0} is not one of the allowed signature algorithms. Available algorithms: {1}. 
createcert.illegalname = Requested subject DN is illegal. Illegal name is only visible in trace log.
createcert.errorpathverifykeyid = AuthorityKeyId of issued certificate ({0}) does not match SubjectKeyId of CA-certificate ({1}).
createcert.errorpathverifydn = Issuer DN of issued certificate ({0}) does not match Subject DN of CA-certificate ({1}).

# CRL creation resources
createcrl.createdcrl = Created CRL with number {0} for CA '{1}' with DN '{2}'. 
createcrl.errorcreate = Error creating CRL for CA {0}, message: {1}. 
createcrl.caoffline = CA {0}, {1} is off-line. CRL can not be created.
createcrl.errornotactive = CA {0}, {1} is not active. CRL can not be created. Status is {2}.
createcrl.catokenoffline = CA token for CA {0}, {1} is off-line. CRL can not be created.
createcrl.crlinfonull = Crlinfo is null for CA {0}, so we use 0 as nextUpdate.
createcrl.generalerror = Error generating CRL for CA {0}.
createcrl.erroravailcas = Error getting available CAs.
createcrl.notauthorized = Admin '{0}' is not authorized to create CRL for CA {1}.
createcrl.nocrlcreate = No CRL is created for a {0} CA. 

# Store resources
store.storecert = Certificate stored for username '{0}', fp={1}, subjectDN '{2}', issuerDN '{3}', serialNo={4}.
store.revokedcert = Revoked certificate for username '{0}', fp={1}, revocationReason={2}, subjectDN '{3}', issuerDN '{4}', serialNo={5}.
store.unrevokedcert = Activated certificate on hold for username '{0}', fp={1}, revocationReason={2}, subjectDN '{3}', issuerDN '{4}', serialNo={5}.
store.ignorerevoke = Ignored setRevokeStatus() request serialNo {0}. Current certificate status {1}. Revocation reason {2}. 
store.revokedallbyca = Revoked All CAs certificates from issuer '{0}' successfully. Permanently revoked {1} certificates with reason {2}.
store.errorrevokeallbyca = Error when trying to revoke a CA's all certificates by issuer '{0}'.
store.errorfindcertfp  = Could not find certificate with fingerprint {0} and serno {1}.
store.errorfindcertserno = Could not find certificate with serno {0}.
store.errorsetstatusargument = Set status can not be called with status REVOKED or ACTIVE, use setRevokeStatus instead. Requested fingerprint={0}, status={1}.
store.setstatus = Set status on certificate for username '{0}', fp={1}, status={2}, subjectDN '{3}', issuerDN '{4}', serialNo={5}.
store.setstatusfailed = Trying to set status {0} for certificate with fingerprint {1}, that does not exist.
store.storecrl = Stored CRL with CRLNumber={0}, fingerprint={1}, issuerDN '{2}'.  
store.errorstorecrl = Error storing CRL with CRLNumber={0}, issuerDN '{1}'.  
store.errorstorecrlwrongnumber = Trying to store CRL with number {0}, but a CRL with number {1} already exists for issuerDN '{2}'.
store.getcrl = Retrieved CRL from issuer '{0}', with CRL number {1}.
store.errorgetcrl = Error retrieving CRL for issuer '{0}' with CRL number {1}.
store.errorgetcrlinfo = Error retrieving CRL info for issuer '{0}'.
store.removedcrl = Removed CRL with fingerprint={0} and CRLNumber {1} for issuerDN '{2}'.
store.errorstorecert = Error storing certificate.
store.errorcertinfo = Error finding certificate with fingerprint {0}.
store.errorfindcertuser = Could not find certificate with username {0}.
store.errorseveralissuerserno = Possible error in database, more than one certificate has the same issuer '{0}', and serialnumber {1}, is it CVC certificates?
store.errorcertprofilefixed = Error processing certificaterprofile {0}, name of fixed profile.
store.errorcertprofileexists = Certificate profile {0} already exists.
store.errorcertprofilenotexist = Certificate profile {0} does not exist.
store.addedcertprofile = New certificate profile {0} added successfully.
store.editcertprofilenotauthorized = Admin '{0}' is not authorized to edit certificate profile {1}.
store.errorcreatecertprofile = Error when creating new certificateprofile {0}.
store.erroraddprofilewithtempl = Error adding certificaterprofile {0} using profile {1} as template.
store.addedprofilewithtempl = New certificateprofile {0} added using profile {1} as template.
store.removedprofile = Removed certificateprofile {0}.
store.errorremoveprofile = Error removing certificateprofile {0}.
store.renamedprofile = Renamed certificateprofile {0} to {1}.
store.errorrenameprofile = Error removing certificateprofile {0} to {1}.
store.editedprofile = Edited certificateprofile {0}.
store.erroreditprofile = Error editing certificateprofile {0}.

endentity.extendedinfoupgrade = Upgrading extended information with version {0}.

# Miscellaneous resources
sernogenerator.discarding = Discarding serial number out of range.

# Crypto and CA tokens in CESeCore
token.createdtoken = Created Crypto Token with classname {0} and id {1}.
token.extractablekey = HW key must not be extractable. You can set ca.doPermitExtractablePrivateKeys=true in ejbca.properties to allow extractable keys. ca.doPermitExtractablePrivateKeys={0}.
token.noprivate = Can not read private key with alias '{0}' from keystore, got null. If the key was generated after the latest application server start then restart the application server.
token.nopublic = Can not read public key certificate with alias '{0}' from keystore, got null. If the key of the certificate was generated after the latest application server start then restart the application server.
token.nopinencrypt = Failed to encrypt auto activation pin, using non-encrypted instead:
token.jceinitfail = Failed to initialize JCE provider. Encryption operations may not work but we are continuing...
token.errornosuchkey = No key with alias '{0}'.
token.inforegisterclasspath = Can not register {0}. This is normally not an error.
token.classnotfound = Class not found: {0}.
token.errorinstansiate = Can not instantiate {0}. {1}.
token.deactivate = De-activated Crypto Token with id {0}.
token.activated = Activated Crypto Token with id {0}.
token.erroractivate = Error activating Crypto Token: with id {0}. {1}
token.wrongauthcode = Invalid authentication code. Token id={0}.
token.errorcreatetoken = Error when creating Crypto Token. Token id={0}.
token.deleteentry = Deleted entry with alias '{0}' from token with id {1}.
token.errorcertreqverify = Certificate request is not verifying.
token.errorkeynottoken = Key with public key hash {0} not on token.
token.errornokeyalias = Key alias '{0}' not found in keystore.
token.errornocertalias = Certificate alias '{0}' not found in keystore.
token.authcodemissing = An authentication code must be provided. Generating or activating new keys requires either password as argument or autoActivation enabled. Token id={0}.
token.activationtestfail = Error testing activation for Crypto Token with id {0}.
token.upgrade = Upgrading Crypto Token with version {0}.
token.generatedkeypair = Generated new key pair with spec {0} and alias '{1}' for Crypto Token with id {2}.
token.generatedsymkey = Generated new symmetric key with algorithm {0}, size {1} and alias '{2}' for Crypto Token with id {3}.
token.errornotextractable = Crypto Token does not allow to extract private keys. Requested private key alias {0} and encryption key alias {1}.

# CA token resources
catoken.generatedkeys = Generated new keys for CA with id {0}, renew={1}, activate={2}.
catoken.activatednextkey = Activated next signing key for Crypto Token with id {0}.
catoken.activated = Activated Crypto Token with id {0}.
catoken.deactivated = De-activated Crypto Token with id {0}.
catoken.setproperty = Set CA token property for CA with id {0}, key={1}, value={2}.
catoken.invalidkeylength = {0} keys of smaller size than {1} is not allowed for a CA. Requested length was {2}.

# OCSP resources
ocsp.receivedunidreq = Got request (ip;fqdn): {0}; {1} for Fnr mapping to Unid={2}.
ocsp.errordatabaseunid = Got a database error when looking up databasource for Unid-Fnr mapping.
ocsp.errorunidnosnindn = Did not find a serialNumber in DN: {0}.
ocsp.errorunidnosnmapping = No Fnr mapping exists for UNID {0}.
ocsp.returnedunidresponse = Returned response to (ip;fqdn): {0}; {1} with Fnr={2} for Unid={3}.
ocsp.errornoclientauth = Got request without client authentication from (ip;fqdn): {0};{1}.
ocsp.errorverifycert = Error when trying to verify client certificate.
ocsp.erroruntrustedclientauth = Got request with untrusted client cert from (ip;fqdn): {0};{1}.
ocsp.errornoinitparam = {0} init-parameter must be set.
ocsp.errornotrustfiles = No files in trustDir directory: {0}.
ocsp.errorreadingtrustfiles = Error reading files from trustDir: {0}.
ocsp.errorreadingfile = Error reading {0} from {1}: {2}.
ocsp.certcollectionempty = The passed certificate collection is empty.
ocsp.errorcomparehash = OCSPException comparing certificate hashes, skipping cacert for '{0}'.
ocsp.nomatchingcacert = Did not find matching CA-cert for DN: {0}.
ocsp.reloadkeys = Reloading keys due to request from {0}.
ocsp.errorunsignedreq = OCSP request from ip {0} is unsigned. Service enforces signing.
ocsp.errorinvalidsignature = Signature of incoming OCSPRequest is invalid. Signed by '{0}'.
ocsp.infosigner = OCSPRequest was signed by '{0}'.
ocsp.infosigner.invalidcertsignature = Signer certificate verification for (subjectDN '{0}', issuer DN '{1}') failed. Message\: {2}.
ocsp.infosigner.certnotyetvalid = Signature certificate is not yet valid for (subjectDN '{0}', issuer DN '{1}') failed. Message\: {2}.
ocsp.infosigner.certexpired = Signature certificate is expired for (subjectDN '{0}', issuer DN '{1}') failed. Message\: {2}.
ocsp.infosigner.nocacert = No matching issuer certificate found for signer certificate with subjectDN '{0}' and issuerDN '{1}'.
ocsp.infosigner.revoked = Signer certificate for '{0}' is revoked. IssuerDN '{1}', serialNo {2}.
ocsp.infosigner.notallowed = Signer certificate for '{0}' is not authorized due to signer or issuer restrictions. IssuerDN '{1}', serialNo {2}.
ocsp.errornoreqentities = The OCSP request does not contain any simpleRequest entities.
ocsp.errortoomanyreqentities = The OCSP request contains too many simpleRequest entities. Max {0} allowed.
ocsp.errorgencerthash = Unable to generate CA certificate hash.
ocsp.errorfindcacert = Unable to find CA certificate by issuer name hash: {0}, or even the default responder: {1}.
ocsp.errorfindcacertusedefault = Unable to find CA certificate by issuer name hash: {0}, using the default responder to send 'UnknownStatus'.
ocsp.errorprocessextension = An error occurred when processing OCSP extensions class: {0}, error code={1}.
ocsp.errornocacreateresp = Unable to find CA certificate and key to generate OCSP response.
ocsp.errorprocessreq = Error processing OCSP request. Message: {0}.
ocsp.classnotfound = Class {0} could not be loaded.
ocsp.nocardpwd = No card password specified. 
ocsp.nohwsigningclass = No HW OCSP signing class defined.
ocsp.errornosignkeys = No valid signing keys are available at this time.
ocsp.errornovalidkeys = No valid keys specified.
ocsp.errorinitialize = Unable to initialize OCSPServlet.
ocsp.signcertnotindb = Signing certificate with serial number {0} from issuer {1} can not be found in database (signing- and CA-certs must be published to OCSP responder).
ocsp.signcertrevoked = Signing certificate with serial number {0} from issuer {1} is revoked.
ocsp.signcerthasnochain = Signing certificate with serial number {0} from issuer {1} has no chain to a root CA.
ocsp.errorgetalias = Unable to get alias {0} in file {1}.
ocsp.newsigningkey = New OCSP signing key for CA '{0}'. Key cert '{1}'.
ocsp.errorocspkeynotusable = OCSP signing key not useable for CA '{0}'. Key certificate with serial number: {1}.
ocsp.errorloadsigningcerts = Not possible to load signing certificates.
ocsp.infoaddedstatusinfo = Adding status information ({0}) for certificate with serial '{1}' from issuer '{2}'.
ocsp.inforeceivedrequest = Received OCSP request for certificate with serNo: {0}, and issuerNameHash: {1}. Client ip {2}.
ocsp.toolarge = Request dropped. OCSP only supports requests of {0} bytes in total or less. Current request was {1} bytes. 
ocsp.badurlenc = Bad URL encoding in request.
ocsp.missingreq = Request is missing last part of URL defined in RFC 2560 A.1.1.
ocsp.unknownmethod = Unknown request method '{0}'. Only GET and POST supported.
ocsp.emptyreq = No request bytes from IP {0}.
ocsp.shrinkmaxage = RFC 5019 6.2: max-age should be 'later than thisUpdate but earlier than nextUpdate'. Shrinking maxAge to largest possible value '{0}'.
ocsp.additionaldata = The encoded OCSP requests was '{0}' bytes, but the HTTP Content-length was '{1}' bytes. The OCSP client might be broken or trying to send you too much data on purpose.
ocsp.errorcerthasexpired = The OCSP signing certificate with serial number '{0}' issued by the CA '{1}' has expired.
ocsp.errornotyetvalid = The OCSP signing certificate with serial number '{0}' issued by the CA '{1}' is not yet valid.
ocsp.warncertwillexpire = The OCSP signing certificate with serial number '{0}' issued by the CA '{1}' will expire at '{2}'.

# Request resources
request.toolarge = Request dropped. Only supports requests of {0} bytes in total or less. Current request was {1} bytes. 
request.notasequence = Not a sequence on top level. Tag was {0}.
request.notcorrectasn1length = Not correct length of message according to ASN.1 length tag. Length tag was {0}, but we read only {1} bytes.

# X.509v3 certificate extension
certext.errorparsingproperty= Error parsing the '/certextensions.properties' file
certext.certextmissconfigured = Certificate Extension {0} seems to be misconfigured in the certextensions.properties
certext.noextensionforid = No extension configured for id: {0}. Returning null.
certext.basic.incorrectvalue= Incorrect property 'value' for basic certificate extension with id : {0} and OID : {1}
certext.basic.incorrectenc= Incorrect encoding ({0}) for basic certificate extension with id : {1}
certext.basic.illegalvalue = Illegal value {0} of certificate extension with id : {1} and OID : {2}

# General error messages, used in several places
error.catokenoffline = CA token is offline for CA '{0}'.
error.caoffline = CA '{0}' is not active. CA status={1}.

cvc.error.notcvcrequest = Request is not a CVCertificate request.
cvc.info.nocvcpkcs7 = PKCS7 does not exist for CV Certificates. 
cvc.info.createlinkcert = Creating a link certificate for '{0}' issued by '{1}'.
cvc.error.missingdnfield = Invalid DN '{0}'. {1} field must be filled in.

# EOF
