Namespace MiPdf.Signatures
Classes
- CertificateRevocation
Revocation status of one certificate of the signer's chain, from the revocation data embedded in the document.
- CertificateSigner
An IExternalSigner backed by a local certificate with private key.
- CmsUtil
Low-level helpers for CMS signature containers produced elsewhere (signing services, smart cards, remote signing APIs): adding a signature time-stamp without re-encoding the signed parts, and assembling a CMS from a raw signature value (deferred hash signing, e.g. when the signature value arrives in a later HTTP round trip).
- FailoverTimestampClient
Tries several time-stamp authorities in order and returns the first token obtained.
- HttpRevocationSource
Fetches issuer certificates (AIA caIssuers), OCSP responses (RFC 6960, HTTP POST) and CRLs (CRL distribution points) over HTTP. Responses are cached per instance; reuse the instance to benefit from the cache.
- HttpTimestampClient
RFC 3161 time-stamp client over HTTP(S).
- InkRenderer
Draws handwritten signatures (ink strokes, e.g. from a signature pad) as vector graphics with pressure-dependent line width. Use it in Draw or on any canvas.
- LtvOptions
Options for PdfLtv.
- PdfFieldLock
Field lock (FieldMDP, ISO 32000 12.8.2.4): the form fields that become read-only once a signature field is signed. The signature covers the lock, so a later change of a locked field makes the signature invalid in validators such as Adobe Acrobat instead of being reported as permitted form filling.
- PdfLtv
Long-term validation (PAdES B-LT and B-LTA): adds certificates, OCSP responses and CRLs for existing signatures to the Document Security Store (/DSS) in an incremental update. Works for signatures created by any software.
- PdfSignatureAppearance
Appearance of a visible signature.
- PdfSignatureOptions
Options for PdfSigner.
- PdfSignatureValidator
Verifies the digital signatures of a document.
- PdfSigner
Signs PDF documents. Signatures are always added as incremental update, so existing signatures stay valid.
- PreparedSignature
A document prepared for an external signature: the signature dictionary is in place, the byte range is fixed and only the signature container (/Contents) is missing.
- RevocationInfo
Certificate extensions and request encoding for revocation checking.
- SignatureValidationOptions
Options for PdfSignatureValidator.
- SignatureValidationResult
Result of verifying one signature.
Structs
Interfaces
- IExternalSigner
A signer whose private key is not available as X509Certificate2 private key, e.g. an HSM, a smart card middleware, a cloud signing service or a remote key vault. Only the hash is sent to the signer.
- IRevocationSource
Provides validation data for long-term signatures (PAdES B-LT): issuer certificates, OCSP responses and CRLs. Implementations may throw on network errors; PdfLtv records them as warnings.
- ITimestampClient
Obtains RFC 3161 time-stamp tokens.
Enums
- CertificationLevel
Certification level (DocMDP permissions) for certifying signatures.
- FieldLockAction
Which form fields a PdfFieldLock covers.
- PadesLevel
PAdES baseline level of a signature.
- PdfSignatureFormat
Format of the CMS signature container (/SubFilter).
- RevocationStatus
Revocation status of a certificate at the time of signing.
- SignatureImagePosition
Where the image of a visible signature is placed.