gss_unseal(3sec)
Converts a sealed message into a usable form and verifies the embedded signature
Synopsis
#include <dce/gssapi.h>
OM_uint32 gss_unseal (
OM_uint32 *minor_status,
gss_ctx_id_t context_handle,
gss_buffer_t input_message_buffer,
gss_buffer_t output_message_buffer,
int *conf_state,
int *qop_state)
Parameters
Input
context_handle
Specifies the context on which the message arrived.
input_message_buffer
Specifies the sealed message.
output_message_buffer
Specifies the buffer to receive the unsealed message.
Output
conf_state
Returns the requested level of confidentiality and integrity services, as follows:
| TRUE | Both confidentiality and integrity services are requested. |
| FALSE | Only integrity services are requested. |
Returns the cryptographic algorithm, or quality of protection.
minor_status
Returns a status code from the security mechanism.
Description
The gss_unseal( ) routine converts a sealed message to a usable form and verifies the embedded signature. The conf_state parameter indicates
whether the message was encrypted. The qop_state parameter indicates the quality of protection.
Errors
The following describes a partial list of errors that might be returned. Refer to the OSF DCE Problem Determination Guide for complete descriptions of all error messages.
| GSS_S_COMPLETE | The routine was completed successfully. |
| GSS_S_BAD_SIG | The signature was incorrect. |
| GSS_S_CONTEXT_EXPIRED | The context has already expired. |
| GSS_S_CREDENTIALS_EXPIRED | The context is recognized but the associated credentials have expired. |
| GSS_S_DEFECTIVE_TOKEN | The token failed consistency checks. |
| GSS_S_DUPLICATE_TOKEN | The token was valid and contained the correct signature but it had already been processed. |
| GSS_S_FAILURE | The routine failed. The context specified in the context_handle parameter was not valid. |
| GSS_S_NO_CONTEXT | The context identified in the context_handle parameter was not valid. |
| GSS_S_OLD_TOKEN | The token was valid and contained the correct signature but it is too old. |
| GSS_S_UNSEQ_TOKEN | The token was valid and contained the correct signature but it has been verified out of sequence. An earlier token signed or sealed by the remote application has not been processed locally. |
Functions: