THPDFHeadlessLTVOptions
Initialise with Default before authenticating evidence
| Member | Default and contract |
|---|---|
| TrustedCAFile | Empty; explicit PEM trust roots for both the signer and TSA chains are required |
| RequireTimestamp | True; insists on an authenticated RFC3161 signature timestamp for every CMS signer |
| MaxEvidenceBytes | 64 MiB; the aggregate CMS and input evidence budget, also bounding trust-root and individual DER inputs; positive and no larger than High(Integer) |
| MaxEvidenceObjects | 4096; positive budget on evidence, certificate, chain and response-status counts |
| ClockSkewSeconds | 300; the accepted OCSP clock tolerance, from 0 to 3600 |
| MaxOCSPAgeSeconds | 86400; positive cap on the age of producedAt and thisUpdate |
| CancellationToken | Nil; a borrowed token polled during certificate and evidence processing |
nextUpdate is mandatory for OCSP evidence; CRL issuer validation uses the current verification clock together with the actual supplied CRL