Add Long Term Validation (LTV) to the Document Security Store
(DSS).
The signature must have been signed and committed prior to
calling this method.
The certificate used to sign the signature must be time-valid at
the time of the call or an exception will be thrown.
The signing certificate and any other certificates in the
signing certificate's chain of trust are extracted from the
signature.
Additional reference certificates may be added to the
ReferenceCertificates member of this Signature.
Each of these certificates is added to the document as a stream,
along with any Online Certificate Status Protocol(OCSP) responses
and/or Certificate Revocation Lists (CRLs) obtained.
The DSS dictionary is created containing references to these
streams.
In addition a signature Validation Related Information (VRI)
entry is added which enables fast lookup of information from the
DSS.
If the TimestampServiceUrl is set an RFC 3161 timestamp will be
stored as a stream with its reference set in to the VRI TS
entry.
It it is null then the VRI TU value will be set to the current
time from the computer's clock.
For more information see ISO 32000-2:2017 Section 12.8.4
(https://www.iso.org/standard/63534.html).
|