Table of Contents

Namespace MiPdf.Signatures

Classes

CertificateRevocation

Revocation status of one certificate of the signer's chain, from the revocation data embedded in the document.

CertificateSigner

An IExternalSigner backed by a local certificate with private key.

CmsUtil

Low-level helpers for CMS signature containers produced elsewhere (signing services, smart cards, remote signing APIs): adding a signature time-stamp without re-encoding the signed parts, and assembling a CMS from a raw signature value (deferred hash signing, e.g. when the signature value arrives in a later HTTP round trip).

FailoverTimestampClient

Tries several time-stamp authorities in order and returns the first token obtained.

HttpRevocationSource

Fetches issuer certificates (AIA caIssuers), OCSP responses (RFC 6960, HTTP POST) and CRLs (CRL distribution points) over HTTP. Responses are cached per instance; reuse the instance to benefit from the cache.

HttpTimestampClient

RFC 3161 time-stamp client over HTTP(S).

InkRenderer

Draws handwritten signatures (ink strokes, e.g. from a signature pad) as vector graphics with pressure-dependent line width. Use it in Draw or on any canvas.

LtvOptions

Options for PdfLtv.

LtvResult

Result of PdfLtv operations.

PdfFieldLock

Field lock (FieldMDP, ISO 32000 12.8.2.4): the form fields that become read-only once a signature field is signed. The signature covers the lock, so a later change of a locked field makes the signature invalid in validators such as Adobe Acrobat instead of being reported as permitted form filling.

PdfLtv

Long-term validation (PAdES B-LT and B-LTA): adds certificates, OCSP responses and CRLs for existing signatures to the Document Security Store (/DSS) in an incremental update. Works for signatures created by any software.

PdfSignatureAppearance

Appearance of a visible signature.

PdfSignatureOptions

Options for PdfSigner.

PdfSignatureValidator

Verifies the digital signatures of a document.

PdfSigner

Signs PDF documents. Signatures are always added as incremental update, so existing signatures stay valid.

PdfSigningResult

Result of SignDetailed(byte[], IExternalSigner, PdfSignatureOptions?).

PreparedSignature

A document prepared for an external signature: the signature dictionary is in place, the byte range is fixed and only the signature container (/Contents) is missing.

RevocationInfo

Certificate extensions and request encoding for revocation checking.

SignatureValidationOptions

Options for PdfSignatureValidator.

SignatureValidationResult

Result of verifying one signature.

Structs

InkPoint

A point of a handwritten stroke. Pressure ranges from 0 to 1.

Interfaces

IExternalSigner

A signer whose private key is not available as X509Certificate2 private key, e.g. an HSM, a smart card middleware, a cloud signing service or a remote key vault. Only the hash is sent to the signer.

IRevocationSource

Provides validation data for long-term signatures (PAdES B-LT): issuer certificates, OCSP responses and CRLs. Implementations may throw on network errors; PdfLtv records them as warnings.

ITimestampClient

Obtains RFC 3161 time-stamp tokens.

Enums

CertificationLevel

Certification level (DocMDP permissions) for certifying signatures.

FieldLockAction

Which form fields a PdfFieldLock covers.

PadesLevel

PAdES baseline level of a signature.

PdfSignatureFormat

Format of the CMS signature container (/SubFilter).

RevocationStatus

Revocation status of a certificate at the time of signing.

SignatureImagePosition

Where the image of a visible signature is placed.