GSS_S_COMPLETE    Successful completion

      GSS_S_CONTEXT_EXPIRED The context has already expired

      GSS_S_CREDENTIALS_EXPIRED The context is recognized, but
                        associated credentials have expired

      GSS_S_NO_CONTEXT  The context_handle parameter did not identify a
                        valid context

      GSS_S_FAILURE     Failure.  See minor_status for more information.

3.11. gss_unseal

      OM_uint32  gss_unseal (
                     OM_uint32 *     minor_status,
                     gss_ctx_id_t    context_handle,
                     gss_buffer_t    input_message_buffer,
                     gss_buffer_t    output_message_buffer,
                     int *           conf_state,
                     int *           qop_state)

   Purpose:

   Converts a previously sealed message back to a usable form, verifying
   the embedded signature.  The conf_state parameter indicates whether
   the message was encrypted; the qop_state parameter indicates the
   strength of protection that was used to provide the confidentiality
   and integrity services.

   Parameters:

      minor_status      integer, modify
                        Mechanism specific status code.




 
RFC 1509            GSSAPI - Overview and C bindings      September 1993


      context_handle    gss_ctx_id_t, read
                        identifies the context on which the message
                        arrived

      input_message_buffer   buffer, opaque, read
                             sealed message

      output_message_buffer  buffer, opaque, modify
                             buffer to receive unsealed message

      conf_state        boolean, modify
                        True - Confidentiality and integrity protection
                               were used
                        False - Inteegrity service only was used

      qop_state         integer, modify
                        quality of protection gained from signature

   Function value:

      GSS status code:

      GSS_S_COMPLETE    Successful completion

      GSS_S_DEFECTIVE_TOKEN The token failed consistency checks

      GSS_S_BAD_SIG     The signature was incorrect

      GSS_S_DUPLICATE_TOKEN The token was valid, and contained a
                        correct signature for the message, but it had
                        already been processed

      GSS_S_OLD_TOKEN The token was valid, and contained a correct
                        signature for the message, but it is too old

      GSS_S_UNSEQ_TOKEN The token was valid, and contained a correct
                        signature for the message, but has been
                        verified out of sequence; an earlier token has
                        been signed or sealed by the remote
                        application, but not yet been processed
                        locally.

      GSS_S_CONTEXT_EXPIRED The context has already expired

      GSS_S_CREDENTIALS_EXPIRED The context is recognized, but
                        associated credentials have expired






 
RFC 1509            GSSAPI - Overview and C bindings      September 1993


      GSS_S_NO_CONTEXT  The context_handle parameter did not identify a
                        valid context