OfficeSigner Class
Properties Methods Events Configuration Settings Errors
The OfficeSigner class signs Office documents.
Syntax
SecureBlackboxOfficeSigner
SecureBlackboxOfficeSignerSwift
Remarks
OfficeSigner provides digital signing capabilities of Office documents, and provides support for extended facilities, such as timestamps and advanced (XAdES) signatures.
Property List
The following is the full list of the properties of the class with short descriptions. Click on the links for further details.
- blockedCertCount | The number of records in the BlockedCert arrays. |
- blockedCertBytes:(int)blockedCertIndex | Returns raw certificate data in DER format. |
- blockedCertHandle:(int)blockedCertIndex | Allows to get or set a 'handle', a unique identifier of the underlying property object. |
- chainValidationDetails | The details of a certificate chain validation outcome. |
- chainValidationResult | The general outcome of a certificate chain validation routine. Use ChainValidationDetails to get information about the reasons that contributed to the validation result. |
- claimedSigningTime | The signing time from the signer's computer. |
- documentFormat | Defines the format of the Office document. |
- enableXAdES | Specifies if an advanced signature (XAdES) will be produced. |
- externalCryptoCustomParams | Custom parameters to be passed to the signing service (uninterpreted). |
- externalCryptoData | Additional data to be included in the async state and mirrored back by the requestor. |
- externalCryptoExternalHashCalculation | Specifies whether the message hash is to be calculated at the external endpoint. |
- externalCryptoHashAlgorithm | Specifies the request's signature hash algorithm. |
- externalCryptoKeyID | The ID of the pre-shared key used for DC request authentication. |
- externalCryptoKeySecret | The pre-shared key used for DC request authentication. |
- externalCryptoMethod | Specifies the asynchronous signing method. |
- externalCryptoMode | Specifies the external cryptography mode. |
- externalCryptoPublicKeyAlgorithm | Provide public key algorithm here if the certificate is not available on the pre-signing stage. |
- hashAlgorithm | Specifies the hash algorithm to be used. |
- ignoreChainValidationErrors | Makes the class tolerant to chain validation errors. |
- inputBytes | Use this property to pass the input to class in the byte array form. |
- inputFile | The file to be signed. |
- knownCertCount | The number of records in the KnownCert arrays. |
- knownCertBytes:(int)knownCertIndex | Returns raw certificate data in DER format. |
- knownCertHandle:(int)knownCertIndex | Allows to get or set a 'handle', a unique identifier of the underlying property object. |
- knownCRLCount | The number of records in the KnownCRL arrays. |
- knownCRLBytes:(int)knownCRLIndex | Returns raw CRL data in DER format. |
- knownCRLHandle:(int)knownCRLIndex | Allows to get or set a 'handle', a unique identifier of the underlying property object. |
- knownOCSPCount | The number of records in the KnownOCSP arrays. |
- knownOCSPBytes:(int)knownOCSPIndex | Buffer containing raw OCSP response data. |
- knownOCSPHandle:(int)knownOCSPIndex | Allows to get or set a 'handle', a unique identifier of the underlying property object. |
- offlineMode | Switches the class to the offline mode. |
- outputBytes | Use this property to read the output the class object has produced. |
- outputFile | Defines where to save the signed document. |
- profile | Specifies a pre-defined profile to apply when creating the signature. |
- proxyAddress | The IP address of the proxy server. |
- proxyAuthentication | The authentication type used by the proxy server. |
- proxyPassword | The password to authenticate to the proxy server. |
- proxyPort | The port on the proxy server to connect to. |
- proxyProxyType | The type of the proxy server. |
- proxyRequestHeaders | Contains HTTP request headers for WebTunnel and HTTP proxy. |
- proxyResponseBody | Contains the HTTP or HTTPS (WebTunnel) proxy response body. |
- proxyResponseHeaders | Contains response headers received from an HTTP or HTTPS (WebTunnel) proxy server. |
- proxyUseIPv6 | Specifies whether IPv6 should be used when connecting through the proxy. |
- proxyUseProxy | Enables or disables proxy-driven connection. |
- proxyUsername | Specifies the username credential for proxy authentication. |
- revocationCheck | Specifies the kind(s) of revocation check to perform. |
- signatureIndex | The index of the signature to update. |
- signatureType | Specifies the type of the signature to be made. |
- signCoreProperties | Whether to sign the core properties of the document. |
- signDocument | Whether to sign the document itself. |
- signingCertBytes | Returns raw certificate data in DER format. |
- signingCertHandle | Allows to get or set a 'handle', a unique identifier of the underlying property object. |
- signingChainCount | The number of records in the SigningChain arrays. |
- signingChainBytes:(int)signingChainIndex | Returns raw certificate data in DER format. |
- signingChainHandle:(int)signingChainIndex | Allows to get or set a 'handle', a unique identifier of the underlying property object. |
- signSignatureOrigin | Whether to sign the signature origin. |
- socketDNSMode | Selects the DNS resolver to use: the class's (secure) built-in one, or the one provided by the system. |
- socketDNSPort | Specifies the port number to be used for sending queries to the DNS server. |
- socketDNSQueryTimeout | The timeout (in milliseconds) for each DNS query. |
- socketDNSServers | The addresses of DNS servers to use for address resolution, separated by commas or semicolons. |
- socketDNSTotalTimeout | The timeout (in milliseconds) for the whole resolution process. |
- socketIncomingSpeedLimit | The maximum number of bytes to read from the socket, per second. |
- socketLocalAddress | The local network interface to bind the socket to. |
- socketLocalPort | The local port number to bind the socket to. |
- socketOutgoingSpeedLimit | The maximum number of bytes to write to the socket, per second. |
- socketTimeout | The maximum period of waiting, in milliseconds, after which the socket operation is considered unsuccessful. |
- socketUseIPv6 | Enables or disables IP protocol version 6. |
- timestampServer | The address of the timestamping server. |
- TLSClientCertCount | The number of records in the TLSClientCert arrays. |
- TLSClientCertBytes:(int)tLSClientCertIndex | Returns raw certificate data in DER format. |
- TLSClientCertHandle:(int)tLSClientCertIndex | Allows to get or set a 'handle', a unique identifier of the underlying property object. |
- TLSServerCertCount | The number of records in the TLSServerCert arrays. |
- TLSServerCertBytes:(int)tLSServerCertIndex | Returns raw certificate data in DER format. |
- TLSServerCertHandle:(int)tLSServerCertIndex | Allows to get or set a 'handle', a unique identifier of the underlying property object. |
- TLSAutoValidateCertificates | Specifies whether server-side TLS certificates should be validated automatically using internal validation rules. |
- TLSBaseConfiguration | Selects the base configuration for the TLS settings. |
- TLSCiphersuites | A list of ciphersuites separated with commas or semicolons. |
- TLSECCurves | Defines the elliptic curves to enable. |
- TLSForceResumeIfDestinationChanges | Whether to force TLS session resumption when the destination address changes. |
- TLSPreSharedIdentity | Defines the identity used when the PSK (Pre-Shared Key) key-exchange mechanism is negotiated. |
- TLSPreSharedKey | Contains the pre-shared for the PSK (Pre-Shared Key) key-exchange mechanism, encoded with base16. |
- TLSPreSharedKeyCiphersuite | Defines the ciphersuite used for PSK (Pre-Shared Key) negotiation. |
- TLSRenegotiationAttackPreventionMode | Selects renegotiation attack prevention mechanism. |
- TLSRevocationCheck | Specifies the kind(s) of revocation check to perform. |
- TLSSSLOptions | Various SSL (TLS) protocol options, set of cssloExpectShutdownMessage 0x001 Wait for the close-notify message when shutting down the connection cssloOpenSSLDTLSWorkaround 0x002 (DEPRECATED) Use a DTLS version workaround when talking to very old OpenSSL versions cssloDisableKexLengthAlignment 0x004 Do not align the client-side PMS by the RSA modulus size. |
- TLSTLSMode | Specifies the TLS mode to use. |
- TLSUseExtendedMasterSecret | Enables Extended Master Secret Extension, as defined in RFC 7627. |
- TLSUseSessionResumption | Enables or disables TLS session resumption capability. |
- TLSVersions | Th SSL/TLS versions to enable by default. |
- trustedCertCount | The number of records in the TrustedCert arrays. |
- trustedCertBytes:(int)trustedCertIndex | Returns raw certificate data in DER format. |
- trustedCertHandle:(int)trustedCertIndex | Allows to get or set a 'handle', a unique identifier of the underlying property object. |
- validationLog | Contains the complete log of the certificate validation routine. |
- XAdESForm | Specifies which form of XAdES should be produced. |
- XAdESVersion | Specifies XAdES version. |
Method List
The following is the full list of the methods of the class with short descriptions. Click on the links for further details.
- config | Sets or retrieves a configuration setting. |
- extractAsyncData | Extracts user data from the DC signing service response. |
- sign | Calculates the signature value. |
- signAsyncBegin | Initiates the asynchronous signing operation. |
- signAsyncEnd | Completes the asynchronous signing operation. |
- signExternal | Signs the document using an external signing facility. |
- timestamp | Use this method to add timestamp. |
- upgrade | Upgrades existing XAdES signature to a new form. |
Event List
The following is the full list of the events fired by the class with short descriptions. Click on the links for further details.
- onError | Information about errors during signing. |
- onExternalSign | Handles remote or external signing initiated by the SignExternal method or other source. |
- onNotification | This event notifies the application about an underlying control flow event. |
- onStoreCertificate | This event is fired when a certificate should be stored along with a signature. |
- onStoreCRL | This event is fired when a CRL should be stored along with a signature. |
- onStoreOCSPResponse | This event is fired when a OCSP Response should be stored along with a signature. |
- onTLSCertValidate | This event is fired upon receipt of the TLS server's certificate, allowing the user to control its acceptance. |
Configuration Settings
The following is a list of configuration settings for the class with short descriptions. Click on the links for further details.
ClaimedRoleText | The text of the claimed role. |
ClaimedRoleXML | The XML content of the claimed roles. |
CommitmentTypeIndicationAllSignedDataObjects[Index] | Specifies the CommitmentTypeIndication's AllSignedDataObjects. |
CommitmentTypeIndicationCount | The number of the CommitmentTypeIndication elements. |
CommitmentTypeIndicationIdentifier[Index] | Specifies the CommitmentTypeIndication's CommitmentTypeId's Identifier. |
CommitmentTypeIndicationIdentifierDescription[Index] | Specifies the CommitmentTypeIndication's CommitmentTypeId's Description. |
CommitmentTypeIndicationIdentifierDocumentationReferences[Index] | Specifies the CommitmentTypeIndication's CommitmentTypeId's DocumentationReferences. |
CommitmentTypeIndicationIdentifierQualifier[Index] | Specifies the CommitmentTypeIndication's CommitmentTypeId's IdentifierQualifier. |
CommitmentTypeIndicationObjectReference[Index] | Specifies the CommitmentTypeIndication's ObjectReference. |
CommitmentTypeIndicationQualifiersXML[Index] | The XML content of the CommitmentTypeIndication's Qualifiers. |
ExpireTime | Signature expiration time in UTC. |
ForceCompleteChainValidation | Whether to check the CA certificates when the signing certificate is invalid. |
ForceCompleteChainValidationForTrusted | Whether to continue with the full validation up to the root CA certificate for mid-level trust anchors. |
GracePeriod | Specifies a grace period to apply during revocation information checks. |
IgnoreOCSPNoCheckExtension | Whether OCSP NoCheck extension should be ignored. |
IgnoreSystemTrust | Whether trusted Windows Certificate Stores should be treated as trusted. |
IgnoreTimestampFailure | Whether to ignore time-stamping failure during signing. |
ImplicitlyTrustSelfSignedCertificates | Whether to trust self-signed certificates. |
IncludeKnownRevocationInfoToSignature | Whether to include custom revocation info to the signature. |
ProductionPlace | Identifies the place of the signature production. |
PromoteLongOCSPResponses | Whether long OCSP responses are requested. |
RefsTimestampType | Specifies references timestamp type to include to the signature. |
SignatureInfoAddress1 | Specifies the location at which the signature was created. |
SignatureInfoAddress2 | Specifies the location at which the signature was created. |
SignatureInfoComments | Comments to the signature info text. |
SignatureInfoDelegateSuggestedSigner | Specifies the name of a person. |
SignatureInfoDelegateSuggestedSigner2 | Specifies the title of a person. |
SignatureInfoDelegateSuggestedSignerEmail | Specifies the e-mail address of a person. |
SignatureInfoImage | Specifies an image for the digital signature. |
SignatureInfoIncluded | Whether to include the signature info. |
SignatureInfoInvalidLnImage | Specifies the image of an invalid signature. |
SignatureInfoSignatureType | Specifies the type of the digital signature. |
SignatureInfoText | The text to be displayed as the signature info. |
SignatureInfoValidLnImage | Specifies the image of a valid signature. |
SignatureLineAdditionalSignatureInfo[Index] | Contains additional signature information. |
SignatureLineAllowComments[Index] | Indicates if comments are allowed. |
SignatureLineCount | The number of signature lines. |
SignatureLineId[Index] | Contains signature unique ID. |
SignatureLineImageData[Index] | Contains signature image. |
SignatureLineIndex | Specifies the index of the signature line to sign. |
SignatureLineShowSignDate[Index] | Indicates if signing date should be shown. |
SignatureLineSignatureIndex[Index] | The index of the signature that signs signature line. |
SignatureLineSignatureProviderId[Index] | Contains signature provider ID. |
SignatureLineSignatureProviderUrl[Index] | Contains signature provider URL. |
SignatureLineSigned[Index] | Indicates if signature line is signed. |
SignatureLineSigningInstructions[Index] | Contains signing instructions. |
SignatureLineSuggestedSigner2[Index] | Suggested signer line two. |
SignatureLineSuggestedSigner[Index] | Suggested signer line one. |
SignatureLineSuggestedSignerEmail[Index] | Suggested signer email address. |
SignTime | Specifies the signing time in UTC. |
SigPolicyDescription | signature policy description. |
SigPolicyExplicitText | The explicit text of the user notice. |
SigPolicyHash | The hash value of the signature policy. |
SigPolicyHashAlgorithm | Specifies the hash algorithm used to compute the signature policy hash. |
SigPolicyID | Identifies the signature policy. |
SigPolicyNoticeNumbers | Contains user notice numbers. |
SigPolicyNoticeOrganization | The organization part of the NoticeReference qualifier. |
SigPolicyURI | Signature policy URI. |
TempPath | Location where the temporary files are stored. |
TimestampCanonicalizationMethod | Specifies canonicalization method used in timestamp. |
TimestampValidationDataDetails | Specifies timestamp validation data details to include to the signature. |
TLSChainValidationDetails | Contains the advanced details of the TLS server certificate validation. |
TLSChainValidationResult | Contains the result of the TLS server certificate validation. |
TLSClientAuthRequested | Indicates whether the TLS server requests client authentication. |
TLSValidationLog | Contains the log of the TLS server certificate validation. |
TolerateMinorChainIssues | Whether to tolerate minor chain issues. |
TspHashAlgorithm | Sets a specific hash algorithm for use with the timestamping service. |
UseMicrosoftCTL | Enables or disables automatic use of Microsoft online certificate trust list. |
UseSystemCertificates | Enables or disables the use of the system certificates. |
UseValidationCache | Enables or disable the use of the product-wide certificate chain validation cache. |
ValidationDataRefsDetails | Specifies validation data references details to include to the signature. |
ValidationDataValuesDetails | Specifies validation data values details to include to the signature. |
CheckKeyIntegrityBeforeUse | Enables or disable private key integrity check before use. |
CookieCaching | Specifies whether a cookie cache should be used for HTTP(S) transports. |
Cookies | Gets or sets local cookies for the class (supported for HTTPClient, RESTClient and SOAPClient only). |
DefDeriveKeyIterations | Specifies the default key derivation algorithm iteration count. |
EnableClientSideSSLFFDHE | Enables or disables finite field DHE key exchange support in TLS clients. |
GlobalCookies | Gets or sets global cookies for all the HTTP transports. |
HttpUserAgent | Specifies the user agent name to be used by all HTTP clients. |
LogDestination | Specifies the debug log destination. |
LogDetails | Specifies the debug log details to dump. |
LogFile | Specifies the debug log filename. |
LogFilters | Specifies the debug log filters. |
LogFlushMode | Specifies the log flush mode. |
LogLevel | Specifies the debug log level. |
LogMaxEventCount | Specifies the maximum number of events to cache before further action is taken. |
LogRotationMode | Specifies the log rotation mode. |
MaxASN1BufferLength | Specifies the maximal allowed length for ASN.1 primitive tag data. |
MaxASN1TreeDepth | Specifies the maximal depth for processed ASN.1 trees. |
OCSPHashAlgorithm | Specifies the hash algorithm to be used to identify certificates in OCSP requests. |
UseOwnDNSResolver | Specifies whether the client classes should use own DNS resolver. |
UseSharedSystemStorages | Specifies whether the validation engine should use a global per-process copy of the system certificate stores. |
UseSystemOAEPAndPSS | Enforces or disables the use of system-driven RSA OAEP and PSS computations. |
UseSystemRandom | Enables or disables the use of the OS PRNG. |