THPDFSignaturePolicyInfo Record

Describes the signature-policy attribute of a CMS signature and how its identifier and hash validated

Declaration

THPDFSignaturePolicyInfo= record
  Present: boolean;
  IdentifierOID: AnsiString;
  HashAlgorithm: AnsiString;
  HashAlgorithmOID: AnsiString;
  HashValue: TBytes;
  HashIsUnknown: boolean;
  Qualifiers: THPDFSignaturePolicyQualifierArray;
  ValidationStatus: THPDFSignaturePolicyValidationStatus;
end;

Unit

HPDFSignVerify

Fields

Field	Purpose
`Present`	True when the signature carries a signature-policy attribute
`IdentifierOID`	Policy identifier OID declared by the attribute
`HashAlgorithm`	Display name of the policy hash algorithm
`HashAlgorithmOID`	OID of the policy hash algorithm
`HashValue`	Policy hash value carried by the attribute
`HashIsUnknown`	True when the hash algorithm is not recognized, so the hash cannot be recomputed for comparison
`Qualifiers`	Policy qualifiers such as CPS URIs and user notices
`ValidationStatus`	`THPDFSignaturePolicyValidationStatus` verdict for the attribute, from not-present through hash mismatch

Usage notes

With Present false the signature carries no policy attribute and the validation status reads spvsNotPresent
Policy pinning on THPDFCMSVerifyOptions compares IdentifierOID and HashValue against expected values and can verify the policy document hash itself
The record attaches to THPDFSignatureInfo.SignaturePolicy on every verified signature

THPDFSignaturePolicyInfo Record

Declaration

Unit

Fields

Usage notes

Related APIs