THPDFCertificateTrustPurpose Type
Selects the extended key usage purpose a signer certificate must satisfy during certificate path validation
Declaration
THPDFCertificateTrustPurpose= (
ctpAny,
ctpDocumentSigning,
ctpCodeSigning,
ctpEmailProtection,
ctpTimeStamping,
ctpOCSPSigning,
ctpCustom
);Unit
HPDFSignVerify
Values
| Value | Purpose |
|---|---|
ctpAny | Default; resolves to an empty purpose OID, so the signer EKU is not constrained to a specific usage |
ctpDocumentSigning | Requires the document-signing EKU (OID 1.3.6.1.5.5.7.3.36) on the signer certificate |
ctpCodeSigning | Requires the code-signing EKU (OID 1.3.6.1.5.5.7.3.3) on the signer certificate |
ctpEmailProtection | Requires the email-protection EKU (OID 1.3.6.1.5.5.7.3.4) on the signer certificate |
ctpTimeStamping | Requires the time-stamping EKU (OID 1.3.6.1.5.5.7.3.8) on the signer certificate |
ctpOCSPSigning | Requires the OCSP-signing EKU (OID 1.3.6.1.5.5.7.3.9) on the signer certificate |
ctpCustom | Requires the dotted OID supplied in THPDFCertificateValidationOptions.CustomTrustPurposeOID; a malformed OID fails validation |
Usage notes
- Set the purpose through
THPDFCertificateValidationOptions.TrustPurpose; the option record default isctpAny - The resolved purpose OID is checked against the signer certificate extended key usage, and a mismatch fails the path with an EKU issue message
- The resolved value and its OID form are echoed back in
THPDFCertificateValidationInfo.TrustPurposeandTrustPurposeOIDfor verification reports