The data items that PDFSignatureVerificationResult variables contain.
certPaths
A signerCertificatePath value
that represents a certificate path, information about the path's
validation status, and the possible failure reason.
The signerCertificatePath variable
contains these values:
- CertificateDER
- A list of byte value
of certificates. Each certificate is represented by its DER encoding.
- FailureReason
- A PathValidationFailureReason value specifies
the reason a path is not valid. These string values are valid:
CERTIFICATE_EXPIRED: The path is not valid because
the certificate expired.
IDENTRUS_OCSP_COMPLIANCE_FAILED: The path is not valid
because verification of IdenTrust OCSP compliance failed.
IDENTRUS_SIGNING_COMPLIANCE_FAILED: The path is not
valid because verification of Identrus compliance failed.
INCORRECT_SIGNATURE: The path is not valid because
the certificate signature is incorrect.
INVALID_BASIC_CONSTRAINTS: The path is not valid because
an invalid basic constraint was used.
INVALID_KEY_USAGE: The path is not valid because an
invalid key was used.
INVALID_NAME_CONSTRAINTS: The path is not valid because
an invalid basic constraint was used.
INVALID_POLICY_CONSTRAINTS: The path is not valid
because invalid policy constraints exist.
INVALID_POLICY_MAPPINGS: The path is not valid because
invalid policy mappings exist.
MISSING_BASIC_CONSTRAINTS: The path is not valid because
basic constraints are missing.
NO_FAILURE: The path is valid.
PATH_LEN_CONSTRAINT_NOT_SATISFIED: The path is not
valid because the length constraint is not valid.
PATH_NOT_TRUSTED: The path is not valid because the
path is not trusted.
UNKNOWN_REASON: The path is not valid for an unknown
reason.
UNSUPPORTED_CRITICAL_EXTENSION: The path is not valid
because unsupported critical extensions exist.
contactInfo
A string value
that contains contact information of the signer.
dateSigned
A date value
that represents the date on which the PDF document was signed.
legalAttestations
A string value
that represents the legal attestations that are associated with the
signature in the PDF document.
When a document is certified,
it is automatically scanned for specific types of content. There
are types of content that could potentially make the visible contents
of a document ambiguous or misleading. For example, an annotation could
obscure some text on a page that is important for understanding
what is being certified. The scanning process generates warnings
that indicate the presence of these types of content. This value
provides an additional explanation of the content that generates
warnings.
location
A string value
that represents the location of the signer.
numRevisions
A long value
that represents the number of revisions of the signature.
permissions
A DFSignatureVerificationResult value
that represents the actions that can be performed in the PDF document
without invalidating the signature.
policyQualifierList
A list value
that contains the policy qualifiers.
reason
A string value
that represents why the PDF document was signed.
revision
An int value
that represents the revision of the signature.
signatureStatus
A PDFSignatureStatus value
that represents the status of the signature. The following are valid
string values:
- Invalid:
- The signature is invalid. The revision of the document covered
by the signature has been altered.
- Unknown:
- The status of the signature is unknown. The signature validation
on the signed contents was not performed.
- ValidAndModified:
- The signature is valid but the document has been modified. The
revision of the document covered by the signature was not modified,
but there were subsequent changes to the document.
- ValidUnmodified:
- The signature is valid and the document is unmodified. The revision
of the document covered by the signature was not modified. There
were no subsequent changes to the document.
signerName
A string value
that contains the signer name.
signerStatus
An IdentityStatus value
that represents whether the signer is trusted. These string values
are valid:
- NOTTRUSTED:
- This signer is not trusted or is invalid because the certificate
is invalid or the certificate could not be chained back to a trusted
root.
- TRUSTED:
- The signer is trusted because the certificate is both valid
and can be chained back to a trusted root.
- UNKNOWN:
- This signer is unknown because verification of the signer
could not be performed.
signingDateTimestamped
A boolean value
that indicates whether the signature is date-stamped. A value of true indicates
that the signature is date-stamped and false indicates
that the signature is not date-stamped.
timestamp
A byte array value
that contains the timestamp information.
TSAInfo
A string value
that contains the timestamp information associated with the signature.
TSAStatus
An IdentityStatus value
that represents whether the timestamp authority validation status
is trusted. A timestamp specifies that specific data was established
before a certain trusted time. A timestamp also contributes toward
the process of building a trust relationship between the signer
and verifier. These string values are valid:
- NOTTRUSTED:
- This signer is not trusted or is invalid because the certificate
is invalid or the certificate could not be chained back to a trusted
root.
- TRUSTED:
- The signer is trusted because the certificate is both valid
and can be chained back to a trusted root.
- UNKNOWN:
- This signer is unknown because verification of the signer
could not be performed.
