NAME
gss_verify_mic() — check a cryptographic message integrity code (MIC) against a message to verify its integrity
SYNOPSIS
#include <gssapi.h>
OM_uint32 gss_verify_mic(
OM_uint32 *minor_status,
const gss_ctx_id_t context_handle,
const gss_buffer_t message_buffer,
const gss_buffer_t token_buffer)
gss_qop_t *qop_state)
DESCRIPTION
The
gss_verify_mic()
routine verifies that a cryptographic MIC,
contained in the
token_buffer
parameter, fits the supplied message.
The application receiving the message can use the
qop_state
parameter to check the strength of protection.
Input Parameters
- context_handle
Specifies the context on which the message arrived.
- message_buffer
Specifies the message to be verified.
- token_buffer
Specifies the token to be associated with the message.
Output Parameters
- qop_state
Returns the quality of protection gained from message integrity code
(MIC).
Specify NULL if not required.
- minor_status
Returns a status code from the security mechanism.
STATUS CODES
The following status codes can be returned:
- GSS_S_COMPLETE
The routine was completed successfully.
- GSS_S_DEFECTIVE_TOKEN
The token failed consistency checks.
- GSS_S_BAD_SIG
The MIC was incorrect.
- GSS_S_DUPLICATE_TOKEN
The token was valid, and contained a correct
MIC for the message, but it had already
been processed.
- GSS_S_OLD_TOKEN
The token was valid, and contained a correct
MIC for the message, but it is too old.
- GSS_S_UNSEQ_TOKEN
The token was valid, and contained a correct MIC
for the message, but has been verified out of
sequence. A later token has already been received.
- GSS_S_GAP_TOKEN
The token was valid, and contained a correct MIC
for the message, but has been verified out of
sequence. An earlier expected token has not yet
been received.
- GSS_S_CONTEXT_EXPIRED
The context has already expired.
- GSS_S_FAILURE
The routine failed. Check the
minor_status
parameter for details.
- GSS_S_NO_CONTEXT
The context identified in the
context_handle
parameter was not valid.
AUTHOR
gss_verify_mic()
was developed by Sun Microsystems, Inc.
SEE ALSO
gss_get_mic(3),
gss_wrap(3).
The manpages for DCE-GSSAPI are included with the DCE-CoreTools product.
To see those manpages add
/opt/dce/share/man
to
MANPATH.
Printable version
