Class: VerificationOptions

PDFNet. VerificationOptions


new VerificationOptions()

Options pertaining to digital signature verification.

Extends

Members


<static> SecurityLevel

Properties:
Name Type Description
e_compatibility_and_archiving number
e_maximum number

<static> TimeMode

Properties:
Name Type Description
e_signing number
e_timestamp number
e_current number

Methods


<static> addTrustedCertificateFromURL(url [, options])

Adds a certificate from a url to the store of trusted certificates inside this options object.
Parameters:
Name Type Argument Description
url string The url from which to download the file
options Object <optional>
Additional options
Properties
Name Type Description
withCredentials boolean Whether to set the withCredentials property on the XMLHttpRequest
customHeaders Object An object containing custom HTTP headers to be used when downloading the document
Returns:
Type
Promise.<void>

<static> create(in_level)

Constructs a set of options for digital signature verification.
Parameters:
Name Type Description
in_level number
PDFNet.VerificationOptions.SecurityLevel = {
	e_compatibility_and_archiving : 0
	e_maximum : 1
}
-- the general security level to use. Sets other security settings internally.
Returns:
A promise that resolves to an object of type: "PDFNet.VerificationOptions"
Type
Promise.<PDFNet.VerificationOptions>

addTrustedCertificate(in_certificate_buf)

Adds a certificate to the store of trusted certificates inside this options object.
Parameters:
Name Type Description
in_certificate_buf ArrayBuffer | Int8Array | Uint8Array | Uint8ClampedArray - a buffer consisting of the data of an X.509 public-key certificate encoded in binary DER (Distinguished Encoding Rules) format, or in PEM (appropriate Privacy-Enhanced Mail header+Base64 encoded DER+appropriate footer) format
Returns:
Type
Promise.<void>

addTrustedCertificates(in_P7C_binary_DER_certificates_file_data, in_size)

Bulk trust list loading API. Attempts to decode the input data as binary DER and trust multiple trusted root certificates from it. Compatible with Acrobat's .P7C format, which is a variation on PKCS #7/CMS that only contains certificates (i.e. no CRLs, no signature, etc.). If a certificate cannot be decoded, this is ignored and an attempt is made to decode the next certificate.
Parameters:
Name Type Description
in_P7C_binary_DER_certificates_file_data number - the P7C-format bulk certificate data, encoded in binary DER (Distinguished Encoding Rules).
in_size number - the size of the data, in bytes.
Returns:
Type
Promise.<void>

addTrustedCertificateUString(in_filepath)

Adds a certificate to the store of trusted certificates inside this options object, by loading it from a file.
Parameters:
Name Type Description
in_filepath string - a path to a file containing the data of an X.509 public-key certificate encoded in binary DER (Distinguished Encoding Rules) format, or in PEM (appropriate Privacy-Enhanced Mail header+Base64 encoded DER+appropriate footer) format.
Returns:
Type
Promise.<void>

destroy()

Destructor
Inherited From:
Returns:
Type
Promise.<void>

enableDigestVerification(in_on_or_off)

Sets a flag that can turn on or off the verification of the digest (cryptographic hash) component of a digital signature.
Parameters:
Name Type Description
in_on_or_off boolean - A boolean.
Returns:
Type
Promise.<void>

enableModificationVerification(in_on_or_off)

Sets a flag that can turn on or off the verification of the permissibility of any modifications made to the document after the signing of the digital signature being verified, in terms of the document and field permissions specified by the digital signature being verified.
Parameters:
Name Type Description
in_on_or_off boolean - A boolean.
Returns:
Type
Promise.<void>

enableOnlineCRLRevocationChecking(in_on_or_off)

Enables/disables online CRL revocation checking. The default setting is for it to be turned off, but this may change in future versions.
Parameters:
Name Type Description
in_on_or_off boolean - what setting to use
Returns:
Type
Promise.<void>

enableOnlineOCSPRevocationChecking(in_on_or_off)

Enables/disables online OCSP revocation checking. The default setting is for it to be turned on.
Parameters:
Name Type Description
in_on_or_off boolean - what setting to use.
Returns:
Type
Promise.<void>

enableOnlineRevocationChecking(in_on_or_off)

enables/disables all online revocation checking modes. The default settings are that online OCSP is turned on and online CRL is turned off, but the default CRL setting may change in future versions.
Parameters:
Name Type Description
in_on_or_off boolean - what setting to use
Returns:
Type
Promise.<void>

enableTrustVerification(in_on_or_off)

Sets a flag that can turn on or off the verification of the trust status of a digital signature.
Parameters:
Name Type Description
in_on_or_off boolean - A boolean.
Returns:
Type
Promise.<void>

setRevocationProxyPrefix(in_str)

Sets a URI prefix to use for online revocation requests during digital signature verification. Useful for Emscripten platform -- used to avoid CORS-related errors. The default value is https://proxy.pdftron.com
Parameters:
Name Type Description
in_str string the proxy prefix URL string to use for revocation requests
Returns:
Type
Promise.<void>

takeOwnership()

Take the ownership of this object, so that PDFNet.runWithCleanup won't destroy this object.
Inherited From:
Returns:
Type
void