THPDFRevocationMode Type
Chooses whether certificate path validation skips, best-effort applies, or strictly requires revocation evidence
Declaration
THPDFRevocationMode= (
rvmNone,
rvmBestEffort,
rvmRequire
);
Unit
HPDFSignVerify
Values
| Value | Purpose |
|---|---|
rvmNone | Skips revocation evaluation entirely; the report records rvsNotChecked and the path can still come out trusted |
rvmBestEffort | Default; uses the supplied OCSP and CRL evidence when it decides a state, but missing evidence leaves rvsUnknown without failing the path |
rvmRequire | Usable revocation evidence must decide the state, otherwise the path fails with cvsRevocationUnknown, cvsMalformedEvidence, or cvsUnsupportedAlgorithm depending on why no verdict was reached |
Usage notes
- Set the mode through
THPDFCertificateValidationOptions.RevocationMode; the option record default isrvmBestEffort - Revocation evaluation is offline: it consumes caller-supplied, CMS-embedded, DSS/VRI, or cached evidence rather than network fetches
- Under
rvmRequirethe resulting failure status tells apart malformed evidence, unsupported algorithms, and a plain lack of applicable evidence