THPDFHeadlessLTVOptions
Initialize with Default before authenticating evidence
| Member | Default and contract |
|---|---|
| TrustedCAFile | Empty; explicit PEM trust roots for both signer and TSA chains are required |
| RequireTimestamp | True; requires an authenticated RFC3161 signature timestamp for every CMS signer |
| MaxEvidenceBytes | 64 MiB; aggregate CMS and input evidence budget, also bounding trust-root and individual DER inputs; positive and no larger than High(Integer) |
| MaxEvidenceObjects | 4096; positive evidence, certificate, chain, and response-status count budget |
| ClockSkewSeconds | 300; accepted OCSP clock tolerance, from 0 through 3600 |
| MaxOCSPAgeSeconds | 86400; positive maximum age for producedAt and thisUpdate |
| CancellationToken | Nil; borrowed token polled during certificate and evidence processing |
nextUpdate is mandatory for OCSP evidence; CRL issuer validation uses the current verification clock and the actual supplied CRL