THPDFRevocationMode Type

Chooses whether certificate path validation skips revocation evidence, applies it best-effort or strictly requires it

Declaration

THPDFRevocationMode= (
  rvmNone,
  rvmBestEffort,
  rvmRequire
  );

Unit

HPDFSignVerify

Values

ValuePurpose
rvmNoneSkips revocation evaluation altogether; the report records rvsNotChecked and the path can still come out trusted
rvmBestEffortDefault; uses the supplied OCSP and CRL evidence where it decides a state, but missing evidence leaves rvsUnknown without failing the path
rvmRequireUsable revocation evidence must decide the state, otherwise the path fails with cvsRevocationUnknown, cvsMalformedEvidence or cvsUnsupportedAlgorithm according to why no verdict was reached

Usage notes

Related APIs