Package com.pd4ml.pdf.sign.ltv

Long-term validation (PAdES-LT): fetches OCSP responses and CRLs and adds them to a signed PDF.

Class Summary

Class	Description
LtvOptions	Configuration for RevocationFetcher.fetch(java.security.cert.Certificate[], com.pd4ml.pdf.sign.ltv.LtvOptions): which revocation sources to try, in what order, and how patient to be with each.
LtvUpdater	Adds PAdES-LT ("Long Term Validation") information to an already-signed PDF: a /DSS (Document Security Store) dictionary at /Root/DSS holding the OCSP responses, CRLs and certificates needed to validate one or more signatures long after their signing certificates -- or even the TSA's -- may have expired or been revoked, plus a /VRI (Validation Related Information) entry keyed by the hex-uppercase SHA-1 of the target signature's exact /Contents bytes (ETSI TS 102 778-4 / ISO 32000-2 §12.8.4.3).
RevocationFetcher	Fetches OCSP responses and CRLs for a certificate chain, over plain HTTP, using only the certificates' own Authority Information Access / CRL Distribution Points extensions to find where to ask -- no extra configuration needed for the common case.
RevocationFetcher.Result	Everything fetched for one RevocationFetcher.fetch(java.security.cert.Certificate[], com.pd4ml.pdf.sign.ltv.LtvOptions) call, ready to embed via LtvUpdater.