Functions | |
OM_uint32 GSSAPI_LIB_FUNCTION | gss_wrap_iov (OM_uint32 *minor_status, gss_ctx_id_t context_handle, int conf_req_flag, gss_qop_t qop_req, int *conf_state, gss_iov_buffer_desc *iov, int iov_count) |
OM_uint32 GSSAPI_LIB_FUNCTION | gss_unwrap_iov (OM_uint32 *minor_status, gss_ctx_id_t context_handle, int *conf_state, gss_qop_t *qop_state, gss_iov_buffer_desc *iov, int iov_count) |
OM_uint32 GSSAPI_LIB_FUNCTION | gss_wrap_iov_length (OM_uint32 *minor_status, gss_ctx_id_t context_handle, int conf_req_flag, gss_qop_t qop_req, int *conf_state, gss_iov_buffer_desc *iov, int iov_count) |
OM_uint32 GSSAPI_LIB_FUNCTION | gss_release_iov_buffer (OM_uint32 *minor_status, gss_iov_buffer_desc *iov, int iov_count) |
OM_uint32 GSSAPI_LIB_FUNCTION | gss_canonicalize_name (OM_uint32 *minor_status, const gss_name_t input_name, const gss_OID mech_type, gss_name_t *output_name) |
OM_uint32 GSSAPI_LIB_FUNCTION gss_canonicalize_name | ( | OM_uint32 * | minor_status, | |
const gss_name_t | input_name, | |||
const gss_OID | mech_type, | |||
gss_name_t * | output_name | |||
) |
gss_canonicalize_name takes a Internal Name (IN) and converts in into a mechanism specific Mechanism Name (MN).
The input name may multiple name, or generic name types.
If the input_name if of the GSS_C_NT_USER_NAME, and the Kerberos mechanism is specified, the resulting MN type is a GSS_KRB5_NT_PRINCIPAL_NAME.
For more information about internalVSmechname.
minor_status | minor status code. | |
input_name | name to covert, unchanged by gss_canonicalize_name(). | |
mech_type | the type to convert Name too. | |
output_name | the resulting type, release with gss_release_name(), independent of input_name. |
OM_uint32 GSSAPI_LIB_FUNCTION gss_release_iov_buffer | ( | OM_uint32 * | minor_status, | |
gss_iov_buffer_desc * | iov, | |||
int | iov_count | |||
) |
Free all buffer allocated by gss_wrap_iov() or gss_unwrap_iov() by looking at the GSS_IOV_BUFFER_TYPE_FLAG_ALLOCATED flag.
OM_uint32 GSSAPI_LIB_FUNCTION gss_unwrap_iov | ( | OM_uint32 * | minor_status, | |
gss_ctx_id_t | context_handle, | |||
int * | conf_state, | |||
gss_qop_t * | qop_state, | |||
gss_iov_buffer_desc * | iov, | |||
int | iov_count | |||
) |
Decrypt or verifies the signature on the data.
OM_uint32 GSSAPI_LIB_FUNCTION gss_wrap_iov | ( | OM_uint32 * | minor_status, | |
gss_ctx_id_t | context_handle, | |||
int | conf_req_flag, | |||
gss_qop_t | qop_req, | |||
int * | conf_state, | |||
gss_iov_buffer_desc * | iov, | |||
int | iov_count | |||
) |
Encrypts or sign the data.
This is a more complicated version of gss_wrap(), it allows the caller to use AEAD data (signed header/trailer) and allow greater controll over where the encrypted data is placed.
The maximum packet size is gss_context_stream_sizes.max_msg_size.
The caller needs provide the folloing buffers when using in conf_req_flag=1 mode:
HEADER, PADDING, TRAILER will be shrunken to the size required to transmit any of them too large.
To generate gss_wrap() compatible packets, use: HEADER | DATA | PADDING | TRAILER
When used in conf_req_flag=0,
The input sizes of HEADER, PADDING and TRAILER can be fetched using gss_wrap_iov_length() or gss_context_query_attributes().
OM_uint32 GSSAPI_LIB_FUNCTION gss_wrap_iov_length | ( | OM_uint32 * | minor_status, | |
gss_ctx_id_t | context_handle, | |||
int | conf_req_flag, | |||
gss_qop_t | qop_req, | |||
int * | conf_state, | |||
gss_iov_buffer_desc * | iov, | |||
int | iov_count | |||
) |
Update the length fields in iov buffer for the types:
Consider using gss_context_query_attributes() to fetch the data instead.