TPdfEuropeanTrustedList.ParseAuthenticated(XmlData, Authenticator, Options)
TPdfEuropeanTrustedList.LoadCache(Source, Authenticator, Options)
TPdfEuropeanTrustedList.Update(Current, Uri, Source, Authenticator, Options)
TPdfEuropeanTrustedList.SaveCache(Destination)
TPdfEuropeanTrustedList.LoadTrustAnchors
TPdfEuropeanTrustedList.EvaluateQualified(LeafCertificate, CertificateChain, ValidationTime, Evaluation)
ParseAuthenticated requires an IPdfTrustedListAuthenticator to authenticate the exact source bytes before any service becomes usable, leaving XMLDSIG policy and trust-anchor ownership with the application
The bounded namespace-tolerant parser reads ETSI scheme metadata, providers, current service information, service history, X509 certificates, status times, and qualifier URIs while rejecting DTD and entity declarations
SaveCache stores the authenticated source XML with a SHA-256 corruption check, and LoadCache invokes the authenticator again before reconstructing the snapshot
Update fetches through IPdfTrustedListSource, then rejects territory changes, non-advancing sequence numbers, and issue-time rollback
The class implements IPdfTrustStore and IPdfQualifiedTrustEvaluator, so one authenticated snapshot can supply current DER anchors and the optional TPadesTrustValidationOptions.QualifiedTrustEvaluator policy
| Interface | Member | Purpose |
|---|---|---|
IPdfTrustedListAuthenticator | Authenticate | Authenticates the exact XML bytes and returns diagnostic AuthenticationDetails |
IPdfTrustedListSource | Fetch | Retrieves XML from Uri without exceeding MaxBytes |
IPdfQualifiedTrustEvaluator | EvaluateQualified | Evaluates a leaf and CertificateChain at ValidationTime |
| Type | Fields and purpose |
|---|---|
EPdfTrustedList | Reports authentication, parsing, cache, update, and resource-budget failures |
TPdfTrustedListOptions | MaxXmlBytes, MaxServices, MaxCertificates, MaxCertificateBytes, MaxDepth, MaxTokens, and RequireNextUpdate bound parsing; Default returns the production limits |
TPdfTrustedListStringArray | Dynamic string array used by QualifierUris |
TPdfTrustedListService | Historical, Territory, ProviderName, ServiceName, ServiceTypeIdentifier, ServiceStatus, StatusStartingTime, QualifierUris, and Certificates preserve one current or historical service state |
TPdfTrustedListServices | Dynamic array of service-state records |
TPdfTrustedListEvaluation | Evaluated, Matched, Qualified, Current, Territory, ProviderName, ServiceName, ServiceTypeIdentifier, ServiceStatus, and StatusStartingTime describe the selected policy result |
| Property | Description |
|---|---|
AuthenticationDetails | Authenticator-supplied evidence summary |
IssueDateTime | UTC-normalised trusted-list issue time |
NextUpdate | UTC-normalised next-update deadline |
SequenceNumber | Monotonic trusted-list sequence |
Services | Parsed current and historical service states |
SourceDigest | SHA-256 digest of the authenticated source XML |
Territory | Scheme territory code |
VersionIdentifier | TSL format version identifier |
EvaluateQualified compares exact DER certificate bytes and reports qualification separately from operating-system certificate-chain trust