THPDFRevocationMode Type
Chooses whether certificate path validation skips revocation evidence, applies it best-effort or strictly requires it
Declaration
THPDFRevocationMode= (
rvmNone,
rvmBestEffort,
rvmRequire
);
Unit
HPDFSignVerify
Values
| Value | Purpose |
|---|---|
rvmNone | Skips revocation evaluation altogether; the report records rvsNotChecked and the path can still come out trusted |
rvmBestEffort | Default; uses the supplied OCSP and CRL evidence where it decides a state, but missing evidence leaves rvsUnknown without failing the path |
rvmRequire | Usable revocation evidence must decide the state, otherwise the path fails with cvsRevocationUnknown, cvsMalformedEvidence or cvsUnsupportedAlgorithm according to why no verdict was reached |
Usage notes
- Set the mode through
THPDFCertificateValidationOptions.RevocationMode;rvmBestEffortis the option record default - Revocation evaluation is offline: it consumes caller-supplied, CMS-embedded, DSS/VRI or cached evidence rather than network fetches
- Under
rvmRequirethe resulting failure status distinguishes malformed evidence, unsupported algorithms and a plain lack of applicable evidence