Pular para o conteúdo principal

CadesPolicySpec.AttributeGenerationSpec

Namespace: Lacuna.Pki.Cades
Assembly: Lacuna.Pki
Class

public class CadesPolicySpec.AttributeGenerationSpec

Hierarquia: object → CadesPolicySpec.AttributeGenerationSpec

Construtores​

AttributeGenerationSpec()​

public AttributeGenerationSpec()

Propriedades​

ArchiveTimestamp​

Denotes whether an archive timestamp MUST be added (failure throws exception), or SHOULD be added (failure generates a warning) or SHOULD NOT be added.

public GenerationRequirementLevels ArchiveTimestamp { get; set; }

Retorno

GenerationRequirementLevels

CadesCTimeStamp​

Denotes whether a cades-c-timestamp attribute MUST be added (failure throws exception), or SHOULD be added (failure generates a warning) or SHOULD NOT added. NOTE: if CadesCTimeStamp is set to Must or Should, then the properties IncludeCompleteCertificateReferences and IncludeCompleteRevocationReferences must be set to true.

public GenerationRequirementLevels CadesCTimeStamp { get; set; }

Retorno

GenerationRequirementLevels

CertCrlsReferencesTimestamp​

Denotes whether a certificates and CRLs references timestamp MUST be added (failure throws exception), or SHOULD be added (failure generates a warning) or SHOULD NOT be added.

public GenerationRequirementLevels CertCrlsReferencesTimestamp { get; set; }

Retorno

GenerationRequirementLevels

IncludeCertificatesInSignedData​

The certificates to be included in the SignedData Certificates Set

public InclusionLevel IncludeCertificatesInSignedData { get; set; }

Retorno

InclusionLevel

IncludeCertificateValues​

Whether or not to include a certificate-values attribute.

public bool IncludeCertificateValues { get; set; }

Retorno

bool

IncludeCompleteCertificateReferences​

Whether or not to include the complete-certificate-references attribute.

public bool IncludeCompleteCertificateReferences { get; set; }

Retorno

bool

IncludeCompleteRevocationReferences​

Whether or not to include the complete-revocation-references attribute.

public bool IncludeCompleteRevocationReferences { get; set; }

Retorno

bool

IncludeCrlsInSignedData​

Whether or not to include the used CRLs in the SignedData Revocation Info Choices

public bool IncludeCrlsInSignedData { get; set; }

Retorno

bool

IncludeFullPathReferenceInSigningCertificateAttribute​

Whether or not to include the certification full path on the SigningCertificate attribute

public bool IncludeFullPathReferenceInSigningCertificateAttribute { get; set; }

Retorno

bool

IncludeRevocationValues​

Whether or not to include a revocation-values attribute.

public bool IncludeRevocationValues { get; set; }

Retorno

bool

IncludeSignaturePolicyIdentifier​

Wheter or not to include the signature-policy-identifier signed attribute (CAdES-BES vs CADES-EPES)

public bool IncludeSignaturePolicyIdentifier { get; set; }

Retorno

bool

IncludeSigningCertificateAttribute​

Whether or not to include the signing-certificate attribute (or signing-certificate-v2, depending on the digest algorithm being used).

public bool IncludeSigningCertificateAttribute { get; set; }

Retorno

bool

Comentários

Please note that the signing certificate attribute is mandated by CAdES. A signature without a signing certificate attribute cannot truly be considered a CAdES signature and is subject to known attacks (signer substitution attack). The default value for this property is true on all policies returned by the SDK. We highly recommend that you do not set this property to false.

IncludeSigningTime​

Whether or not to include the signing-time signed attribute containing the time taken from the local machine.

public bool IncludeSigningTime { get; set; }

Retorno

bool

SignaturePolicyQualifiers​

In case IncludeSignaturePolicyIdentifier is set to true, denotes which signature policy qualifiers should be included in the signature-policy-identifier attribute. Currently, only the Uri qualifier is supported.

public CadesPolicySpec.SignaturePolicyQualifiers SignaturePolicyQualifiers { get; set; }

Retorno

CadesPolicySpec.SignaturePolicyQualifiers

SignatureTimestamp​

Denotes whether a signature-timestamp attribute MUST be added (failure throws exception), or SHOULD be added (failure generates a warning) or SHOULD NOT be added.

public GenerationRequirementLevels SignatureTimestamp { get; set; }

Retorno

GenerationRequirementLevels

Membros herdados​

ToString(), Equals(object), Equals(object, object), ReferenceEquals(object, object), GetHashCode(), GetType(), MemberwiseClone()