Validation functionality

Note

Before reading this, you may want to take a look at Factors in play when validating a signature for some background on the validation process.

• General API design
  • Accessing signatures in a document
  • Validating a PDF signature
    • Deprecation of OS trust list
• The AdES validation engine
  • Long-term verifiability checking
  • Why a separate engine?
  • Anatomy of a validation spec
  • Running an LTA validation
  • Reading the result
  • Validating against a fixed point in time
  • Validating the signer and its timestamps differently
  • Controlling revocation gathering
  • Supplying additional validation material
  • Will this signature survive long-term archival?
  • Next steps
• EU trusted lists and qualified signatures
  • How trust lists fit in
  • Building a registry from a trusted list
  • Validating against the registry
  • Inspecting the qualification verdict
  • Imposing qualification requirements
  • Bootstrapping from the live LOTL
• Incremental update analysis
• Probing different aspects of the validity of a signature