ESYAE-imza Kütüphaneleri

Bu sayfa salt okunur. Kaynağı görebilirsiniz ama değiştiremezsiniz. Bunun yanlış olduğunu düşünüyorsanız yöneticiye danışın.

<h2>Parameters</h2> <div class="level2"> <p> API needs some parameters for signature creation and verification operations which differ according to the signature type. The following table lists basic parameters and their usage. For the complete list, see <code>EParameters</code>. </p> <span class='np_break'> </span> <div class="table"><table class="inline"> <tr class="row0"> <td class="col0"> <b>P_EXTERNAL_CONTENT</b> </td><td class="col1 leftalign"> The content that is signed. It must be an object of <code>ISignable</code> </td> </tr> <tr class="row1"> <td class="col0"> <b>P_CONTENT_TYPE</b> </td><td class="col1"> The content type. By default, it is "1, 2, 840, 113549, 1, 7, 1" which means "data".</td> </tr> <tr class="row2"> <td class="col0"> <b>P_CERT_VALIDATION_POLICY</b> </td><td class="col1"> Certificate Validation Policy to be used in validation of signing certificate. If the parameter <code>P_CERT_VALIDATION_POLICIES</code> is used or the parameter <code>P_VALIDATE_CERTIFICATE_BEFORE_SIGNING</code> has the value <code>false</code> then this parameter is not necessary. </td> </tr> <tr class="row3"> <td class="col0"> <b>P_CERT_VALIDATION_POLICIES</b> </td><td class="col1"> Certificate Validation Policies for different types of certificates. By using this parameter, several types of certificates (i.e. qualified certificates, timestamp certificate etc.) can be validated together. </td> </tr> <tr class="row4"> <td class="col0"> <b>P_SIGNING_TIME</b> </td><td class="col1"> Signing time. It is used only if the signature does not have timestamp. For example, a BES signature was received at a certain time. This time can be stored at somewhere and used in this parameter upon future validations. This parameter has no legal meaning. </td> </tr> <tr class="row5"> <td class="col0"> <b>P_TRUST_SIGNINGTIMEATTR</b> </td><td class="col1"> It is used for verification which indicates if the stated time information in the signing time attribute is trusted. It is <code>boolean</code> and has the default value <code>true</code>. If the signing time information stated by the user is not trusted then this parameter must be <code>false</code>. </td> </tr> <tr class="row6"> <td class="col0"> <b>P_TSS_INFO</b> </td><td class="col1 leftalign"> Timestamp server settings used for EST and more advanced signatures. </td> </tr> <tr class="row7"> <td class="col0"> <b>P_POLICY_ID</b> </td><td class="col1"> Two independent party may agree on how to verify a signature by complying a common policy. In this case, they should specify the policy in the signed document via <code>SignaturePolicyIdentifierAttr</code>. <code>P_POLICY_ID</code> stores the id of this policy. </td> </tr> <tr class="row8"> <td class="col0"> <b>P_POLICY_VALUE</b> </td><td class="col1"> Like <code>P_POLICY_ID </code>, it is used when a signature policy is used. Stores the value of the policy. </td> </tr> <tr class="row9"> <td class="col0"> <b>P_POLICY_DIGEST_ALGORITHM</b> </td><td class="col1"> It is used when a policy is used. It specifies the digest algorithm used for taking digest of the value of <code>SignaturePolicyIdentifierAttr</code> before it is signed, which is by default SHA-256. </td> </tr> <tr class="row10"> <td class="col0"> <b>P_INITIAL_CERTIFICATES</b> </td><td class="col1"> Stores the certificates used in signature verification. </td> </tr> <tr class="row11"> <td class="col0"> <b>P_INITIAL_CRLS</b> </td><td class="col1"> Stores the CRLs used in signature verification. </td> </tr> <tr class="row12"> <td class="col0"> <b>P_INITIAL_OCSP_RESPONSES</b> </td><td class="col1"> Stores the OCSP Responses used in signature verification. </td> </tr> <tr class="row13"> <td class="col0"> <b>P_VALIDATE_CERTIFICATE_BEFORE_SIGNING</b> </td><td class="col1"> By default, the signing certificate is validated during signature verification.When creating BES or EST signatures certificate validation can be omitted by setting this parameter to <code>false</code>,which is not suggested. </td> </tr> <tr class="row14"> <td class="col0"> <b>P_REFERENCE_DIGEST_ALG</b> </td><td class="col1"> Specifies the digest algorithm used for taking digests of SigningCertificateV1/V2, CompleteCertificateReferences, CompleteRevocationReferences attributes. </td> </tr> <tr class="row15"> <td class="col0"><b> P_GRACE_PERIOD</b> </td><td class="col1"> Grace period for the certificate validation, which is by default 86400 seconds(1 day). </td> </tr> <tr class="row16"> <td class="col0"><b> P_REVOCINFO_PERIOD</b> </td><td class="col1"> Specifies the interval in which the certificate validation data is collected. For example, when this parameter is 2 days, then only the validation data which is valid between the signature time and the time 2 days after the signature time is used in certificate validation. This parameter must be set at least the grace period. If no value is specified then it is considered as long as possible which does not couse any problem in determining revoked certificates. Setting this parameter to a short value increases the chance of detecting any certificates on hold. </td> </tr> <tr class="row17"> <td class="col0"> <b>P_FORCE_STRICT_REFERENCE_USE</b> </td><td class="col1"> Indicates that the use of the validation data included in the signed document is mandatory and no other validation data not included in the signed document can be used. Besides setting this parameter to <code>true</code> also forces the signature to have validation data is in the same order as the certificate references. </td> </tr> <tr class="row18"> <td class="col0"> <b>P_VALIDATE_TIMESTAMP_WHILE_SIGNING</b> </td><td class="col1"> Indicates that the timestamp in the signed document (if exists) must also be verified. </td> </tr> </table> <span class='np_break'> </span> </div> </div>