gss_seal(3sec)

Synopsis

#include <dce/gssapi.h>

OM_uint32 gss_seal (
OM_uint32 *minor_status,
gss_ctx_id_t context_handle,
int conf_req_flag,
int qop_req,
gss_buffer_t input_message_buffer,
int *conf_state,
gss_buffer_t output_message_buffer)

Parameters

Input

context_handle
Specifies the context on which the message is sent.

conf_req_flag
Specifies the requested level of confidentiality and integrity services, as follows:

TRUE	Both confidentiality and integrity services are requested.
FALSE	Only integrity services are requested.

qop_req
Specifies the cryptographic algorithm, or quality of protection. Specify GSS_C_QOP_DEFAULT. The DCE GSSAPI supports only one quality of protection.

input_message_buffer
Specifies the message to seal.

Output

conf_state
Returns the requested level of confidentiality and integrity services, as follows:

TRUE	Confidentiality, data origin, authentication, and integrity services have been applied.
FALSE	Only integrity and data origin services have been applied.

output_message_buffer
Returns the buffer to receive the sealed message.

minor_status
Returns a status code from the security mechanism.

Description
The gss_seal( ) routine cryptographically signs and optionally encrypts a message. The output_message parameter contains both the signature and the message.

Although the qop_req parameter enables a choice between several qualities of protection, DCE GSSAPI supports only one quality of protection. If you specify an unsupported protection, the gss_seal( ) routine returns a status of GSS_S_FAILURE.

Errors

The following describes a partial list of errors that might be returned. Refer to the OSF DCE Problem Determination Guide for complete descriptions of all error messages.

GSS_S_COMPLETE	The routine was completed successfully.
GSS_S_CONTEXT_EXPIRED	The context has already expired.
GSS_S_CREDENTIALS_EXPIRED	The context is recognized but the associated credentials have expired.
GSS_S_FAILURE	The routine failed. Check the minor_status parameter for details.
GSS_S_NO_CONTEXT	The context identified in the context_handle parameter was not valid.