Class OdfSigningOptions
Controls digital signature and XAdES behavior for ODF package signing and validation. 控制 ODF 封裝簽署與驗證時的數位簽章與 XAdES 行為。
public class OdfSigningOptions- Inheritance
-
OdfSigningOptions
- Inherited Members
Constructors
OdfSigningOptions()
public OdfSigningOptions()Properties
AllowUntrustedRoot
Gets or sets a value indicating whether untrusted root certificates are accepted during validation. 取得或設定驗證期間是否接受不受信任的根憑證。
public bool AllowUntrustedRoot { get; set; }Property Value
AllowUntrustedTimestamp
Gets or sets a value indicating whether untrusted timestamp certificates are accepted. 取得或設定是否接受不受信任的時間戳記憑證。
public bool AllowUntrustedTimestamp { get; set; }Property Value
AllowedCrlHosts
Gets the exact DNS host names permitted for CRL downloads. An empty set permits any public destination. 取得允許下載 CRL 的確切 DNS 主機名稱；空集合表示允許任何公用網路目的地。
public ISet<string> AllowedCrlHosts { get; }Property Value
Remarks
Matching is case-insensitive and applies to every redirect handled by OdfKit. Wildcards and parent-domain suffix matching are intentionally unsupported. A custom HttpClient must disable automatic redirects so OdfKit can validate every target. Populate this set when the issuing authorities are known. 比對不區分大小寫，且會套用至 OdfKit 處理的每個重新導向。刻意不支援萬用字元與父網域後綴 比對。自訂 HttpClient 必須停用自動重新導向，OdfKit 才能驗證每個目的地；已知 憑證發行者時應填入此集合。
CheckRevocation
Gets or sets a value indicating whether certificate revocation is checked. 取得或設定是否檢查憑證撤銷狀態。
public bool CheckRevocation { get; set; }Property Value
ExtraCertificates
Gets additional certificates used when building signing or validation chains. 取得建立簽署或驗證憑證鏈時使用的額外憑證。
public X509Certificate2Collection ExtraCertificates { get; }Property Value
HttpClient
Gets or sets the HTTP client used to fetch CRLs and contact timestamp authorities. 取得或設定用於擷取 CRL 與查詢時間戳記授權機構的 HTTP client。
public HttpClient? HttpClient { get; set; }Property Value
Remarks
A supplied client is a trusted transport policy boundary. For CRL downloads, configure it to disable automatic redirects and to prevent private, loopback, link-local, and rebinding destinations. When this property is null, OdfKit applies its built-in fail-closed CRL transport policy. 呼叫端提供的 client 屬於受信任傳輸政策邊界。用於 CRL 下載時，應停用自動重新導向，並阻止 私有、loopback、link-local 與 DNS rebinding 目的地。netstandard2.0 若需使用 DNS 主機名稱， 必須提供具備上述政策的 client，並建議同時填入 AllowedCrlHosts。此屬性為 null 時，OdfKit 會套用內建的 fail-closed CRL 傳輸政策。
Level
Gets or sets the XAdES level mapped to SignatureLevel. 取得或設定對應至 SignatureLevel 的 XAdES 層級。
public XadesLevel Level { get; set; }Property Value
SignatureLevel
Gets or sets the ODF signature level to create or validate. 取得或設定要建立或驗證的 ODF 簽章層級。
public OdfSignatureLevel SignatureLevel { get; set; }Property Value
TsaUrl
Gets or sets the RFC 3161 timestamp authority URL. 取得或設定 RFC 3161 時間戳記授權機構 URL。
public string? TsaUrl { get; set; }