THPDFHeadlessCMSResult
| Member | Meaning |
|---|---|
SignatureValid | Every CMS signer, signed attribute set, and content digest passed cryptographic verification |
CertificateTrustEvaluated | An explicit trusted CA verification pass ran after integrity succeeded |
CertificateTrusted | OpenSSL accepted the certificate paths against the explicit CA store and, when requested, the CAdES ESS binding |
SignerCount | Number of CMS SignerInfo entries |
TimestampCount | Number of signers carrying one structurally valid signatureTimeStampToken attribute |
TimestampTrustEvaluated | Explicit TSA trust and signature-imprint validation ran for present timestamp tokens |
TimestampValid | Every signer carries an authenticated RFC3161 token, with TSA chain, critical timestamp EKU, ESS binding, and signature-value imprint verified; CRL validation applies when Timestamp.RequireRevocation is enabled |
SignedRevisionLength | End of the authenticated PDF revision or complete detached source |
UnsignedTrailingBytes | Bytes after the signed revision; a valid earlier signature can coexist with later unsigned data |
BytesRead | Total source bytes read through the BIO, including an optional trusted verification pass |
Detail | OpenSSL failure details, or an empty string on success |
Certificate trust must not be inferred from SignatureValid; later unsigned bytes must not be described as authenticated by an earlier signature
Timestamp presence does not establish timestamp trust; TimestampValid remains false when no explicit TSA trust roots are configured