THPDFCertificateValidationStatus Type
Reports the outcome of building and validating a signer certificate path
Declaration
THPDFCertificateValidationStatus= (
cvsNotValidated,
cvsTrusted,
cvsSignatureInvalid,
cvsNoTrustAnchor,
cvsPathBuildingFailed,
cvsPathValidationFailed,
cvsRevoked,
cvsRevocationUnknown,
cvsMalformedEvidence,
cvsUnsupportedAlgorithm,
cvsAlgorithmRejected
);Unit
HPDFSignVerify
Values
| Value | Purpose |
|---|---|
cvsNotValidated | Certificate path validation was not requested or did not run; the default report state |
cvsTrusted | The path closed on a configured trust anchor and every check passed |
cvsSignatureInvalid | A certificate or evidence signature failed cryptographically |
cvsNoTrustAnchor | No configured trust anchor matched the top of the built path |
cvsPathBuildingFailed | The chain could not be closed with the supplied certificate pool, even after AIA fetching when enabled |
cvsPathValidationFailed | The path was built but failed checks such as basic constraints, key usage, or validity periods |
cvsRevoked | Revocation evidence marks a certificate in the path as revoked |
cvsRevocationUnknown | The revocation state could not be determined from the available evidence |
cvsMalformedEvidence | Supplied OCSP or CRL evidence could not be parsed, so it proves nothing either way |
cvsUnsupportedAlgorithm | An algorithm in the path is not implemented by the library |
cvsAlgorithmRejected | An algorithm in the path is implemented but rejected by the configured algorithm policy |
Usage notes
cvsTrustedandcvsNotValidatedare the only values that map to no validation failure code; every other value fails the report with a matchingTHPDFValidationFailureCodecvsRevocationUnknowncovers both missing evidence and evidence that failed to parse, so inspectTHPDFCertificateValidationInfoto tell the two apart- Validation is offline: the path is built from the CMS certificate pool plus caller-supplied anchors, intermediates, and revocation evidence