THPDFHeadlessDocument.VerifySignature

function VerifySignature(SignatureIndex: Integer; const Options: THPDFHeadlessCMSOptions): THPDFHeadlessCMSResult;

Verify an existing zero-based AcroForm signature against its exact hexadecimal or literal Contents gap and historical revision; accepts adbe.pkcs7.detached and ETSI.CAdES.detached with ordinary default options and reports unsigned trailing bytes separately from the integrity result

Use explicit CA settings to evaluate trust; integrity on its own is not certificate trust

The document automatically requires ESS signing-certificate binding for ETSI.CAdES.detached even when RequireCAdES is false; setting RequireCAdES additionally requires that binding for ordinary detached CMS signatures

Literal Contents supports PDF octal escapes, standard escaped characters and line continuations; its decoded bytes must match the exact single string excluded by ByteRange, including both delimiters

CMS byte limits apply to decoded binary bytes, document object limits apply to the encoded gap, and cancellation remains observable before parsing and the cryptographic verification

This integrity check works without a CA file and does not mark the signing certificate as trusted; permitted signed-form updates and DSS evidence insertion use the same authenticated literal or hexadecimal Contents

Headless document · CMS provider

DocTimeStamp/ETSI.RFC3161 is also automatically recognised; its exact covered PDF imprint, encapsulated CMS, ESS binding, critical TSA EKU, version and signer name are authenticated with default options

Timestamp.TrustedCAFile and configured CRL options evaluate explicit TSA trust separately; TimestampValid reports the actual timestamp imprint integrity, whilst TimestampTrustEvaluated and CertificateTrusted identify an explicit successful TSA trust pass

Document timestamps prohibit Cert, Reference, Changes, R, Prop_AuthTime and Prop_AuthType entries and use the same authenticated literal or hexadecimal Contents decoder