Inspect and cryptographically verify PDF digital signatures.
CMS signatures are verified with Bouncy Castle. Trust status is deliberately
conservative: this namespace does not perform revocation checking or anchor
a chain in a caller-provided trusted root, so a cryptographically valid chain
is reported as :untrusted, not :trusted.
Inspect and cryptographically verify PDF digital signatures. CMS signatures are verified with Bouncy Castle. Trust status is deliberately conservative: this namespace does not perform revocation checking or anchor a chain in a caller-provided trusted root, so a cryptographically valid chain is reported as `:untrusted`, not `:trusted`.
(signatures doc)Return a vector of signature metadata maps from doc.
Present PDF fields are returned as :name, :reason, :location,
:contact-info, :signing-time, :sub-filter, :filter, and :byte-range.
:covers-whole-document? compares the ByteRange with the original source
length and requires exactly one gap. The function omits it if it cannot get
the length.
In addition to the metadata fields, each result includes :digest-valid?,
:signer-identity, :certificate-chain, :chain-valid?,
:trust-status, and :revocation-checked?. :covers-whole-document? is a
separate, prominent byte-range check: a true digest does not make a partial
incremental revision safe. Trust is :untrusted for valid CMS signatures
because no trusted root or revocation service is configured; :invalid
means CMS verification failed.
Return a vector of signature metadata maps from `doc`. Present PDF fields are returned as `:name`, `:reason`, `:location`, `:contact-info`, `:signing-time`, `:sub-filter`, `:filter`, and `:byte-range`. `:covers-whole-document?` compares the ByteRange with the original source length and requires exactly one gap. The function omits it if it cannot get the length. In addition to the metadata fields, each result includes `:digest-valid?`, `:signer-identity`, `:certificate-chain`, `:chain-valid?`, `:trust-status`, and `:revocation-checked?`. `:covers-whole-document?` is a separate, prominent byte-range check: a true digest does not make a partial incremental revision safe. Trust is `:untrusted` for valid CMS signatures because no trusted root or revocation service is configured; `:invalid` means CMS verification failed.
(signed? doc)Return true when doc contains at least one signature dictionary.
This reports presence only. It does not validate cryptographic signatures, certificates, revocation status, or trust.
Return true when `doc` contains at least one signature dictionary. This reports presence only. It does not validate cryptographic signatures, certificates, revocation status, or trust.
Alias for signatures, which returns cryptographically verified results.
Alias for `signatures`, which returns cryptographically verified results.
cljdoc builds & hosts documentation for Clojure/Script libraries
| Ctrl+k | Jump to recent docs |
| ← | Move to previous article |
| → | Move to next article |
| Ctrl+/ | Jump to the search field |