Table of Contents

Class PdfSignatureValidator

Namespace
LMKit.Document.Pdf
Assembly
LM-Kit.NET.dll

Validates the digital signatures of a PDF document: document integrity (do the signed bytes still match the signature), signer identity (does the signer chain to a configured trust anchor), and revocation from material embedded in the signature container. Validation is offline; nothing is fetched from the network.

public static class PdfSignatureValidator
Inheritance
PdfSignatureValidator
Inherited Members

Examples

using LMKit.Document.Pdf;

var report = PdfSignatureValidator.Validate("contract.pdf");

foreach (var result in report.Signatures)
{
    Console.WriteLine($"{result.Status}: {result.StatusMessage}");
}

Remarks

Supported signature containers are the detached CMS subfilters used by PAdES and classic Adobe signatures (ETSI.CAdES.detached, adbe.pkcs7.detached). Legacy PKCS#1 subfilters and document timestamps report UnsupportedSubFilter rather than a verdict.

Certificate validity along the chain is checked at the signature's declared signing time when one is available. That time is signer-declared: cryptographically proven time requires a timestamp token, which is surfaced with the long-term-validation milestone.

Methods

Validate(Attachment, PdfSignatureValidationOptions, CancellationToken)

Validates every digital signature in a PDF attachment.

Validate(byte[], PdfSignatureValidationOptions, CancellationToken)

Validates every digital signature in an in-memory PDF.

Validate(string, PdfSignatureValidationOptions, CancellationToken)

Validates every digital signature in a PDF file.

ValidateAsync(Attachment, PdfSignatureValidationOptions, CancellationToken)

Validates every digital signature in a PDF attachment.

ValidateAsync(byte[], PdfSignatureValidationOptions, CancellationToken)

Validates every digital signature in an in-memory PDF.

ValidateAsync(string, PdfSignatureValidationOptions, CancellationToken)

Validates every digital signature in a PDF file.

Share