SetSignProcessContentsEstimate

Bezpečnosť a podpisy

Opis

Configures the material sizes and safety margin used to estimate the signature /Contents capacityThe estimator combines the base CMS size with certificate-chain, revocation, and time-stamp requirements before the signature field is written

Syntax

Delphi

Function TPDFlib.SetSignProcessContentsEstimate(SignProcessID, CertificateChainBytes, CRLBytes, OCSPBytes, TimeStampTokenBytes, SafetyMarginPercent: Integer): Integer;

ActiveX

Function PDFlib::SetSignProcessContentsEstimate(SignProcessID As Long, CertificateChainBytes As Long, CRLBytes As Long, OCSPBytes As Long, TimeStampTokenBytes As Long, SafetyMarginPercent As Long) As Long

DLL

int DLSetSignProcessContentsEstimate(int InstanceID, int SignProcessID, int CertificateChainBytes, int CRLBytes, int OCSPBytes, int TimeStampTokenBytes, int SafetyMarginPercent);

Parametre

SignProcessID	Value returned by a `NewSignProcessFrom*` function
CertificateChainBytes	Pass `-1` to discover the remaining certificate chain from local Windows caches, `0` to omit additional chain capacity, or a positive value to supply an expected encoded size
CRLBytes	Total expected DER bytes for planned certificate revocation lists
OCSPBytes	Total expected DER bytes for planned OCSP responses
TimeStampTokenBytes	Expected DER size of a planned RFC 3161 time-stamp token
SafetyMarginPercent	Additional percentage from `0` through `100` applied before alignment

Návratové hodnoty

1	The estimate configuration was accepted
0	The process id, material size, aggregate size, or percentage was invalid

Poznámky

Nový sign proces sa predvolene spolieha na cached-chain objavovanie, bez plánovaného revokačného alebo time-stamp materiálu a s 15 percentnou bezpečnostnou rezervouLokálne PFX podpisovanie používa odmeranú veľkosť CMS, pritom podpisovanie system-store, CNG, Ed25519 a external-digest odvodí maximálnu veľkosť podpisu z verejného kľúča certifikátu bez invokácie súkromného kľúča alebo callbacku

Objavovanie reťazca certifikátov je len cache a nikdy nevykonáva sieťové získavanieVýsledok je zarovnaný na 256 bajtov a capovaný na 64 MiB a

SetSignProcessReserveContentsBytes remains an additive manual reserve

Pozri tiež

GetSignProcessEstimatedContentsBytes, SetSignProcessReserveContentsBytes, SetPAdESSignatureTimeStampToken