THPDFSignaturePolicyInfo Record

Describes the signature-policy attribute of a CMS signature, along with how its identifier and hash validated

Declaration

THPDFSignaturePolicyInfo= record
  Present: boolean;
  IdentifierOID: AnsiString;
  HashAlgorithm: AnsiString;
  HashAlgorithmOID: AnsiString;
  HashValue: TBytes;
  HashIsUnknown: boolean;
  Qualifiers: THPDFSignaturePolicyQualifierArray;
  ValidationStatus: THPDFSignaturePolicyValidationStatus;
end;

Unit

HPDFSignVerify

Fields

Field	Purpose
`Present`	True where the signature carries a signature-policy attribute
`IdentifierOID`	Policy identifier OID that the attribute declares
`HashAlgorithm`	Display name for the policy hash algorithm
`HashAlgorithmOID`	OID for the policy hash algorithm
`HashValue`	Policy hash value that the attribute carries
`HashIsUnknown`	True where the hash algorithm goes unrecognised, so the hash cannot be recomputed for comparison
`Qualifiers`	Policy qualifiers, such as CPS URIs and user notices
`ValidationStatus`	`THPDFSignaturePolicyValidationStatus` verdict for the attribute, running from not-present through to hash mismatch

Usage notes

Where Present is false the signature carries no policy attribute and the validation status reads spvsNotPresent
Policy pinning on THPDFCMSVerifyOptions checks IdentifierOID and HashValue against the expected values and can verify the policy document hash itself
The record hangs off THPDFSignatureInfo.SignaturePolicy on every verified signature

THPDFSignaturePolicyInfo Record

Declaration

Unit

Fields

Usage notes

Related APIs