Trustanchor Element - Adobe LIVE CYCLE 7.2 - INSTALLING AND CONFIGURING Manual

Adobe LiveCycle
Installing and Configuring LiveCycle Security Products for JBoss
<prefs>
<proxy name="network-proxy" port="80" />
<ocsp URL="" SendNonce="true" ReqRevCheck="CertRevRequiredIfInfoAvail"
MaxClockSkew="10" ResponseFreshness="525600"
URLToConsult="AIAInCertToCheck" SignRequest="false" />
<timestamp URL="http://tsp.adobe.com" CheckRevocation="CertRev"
HashAlgorithm="SHA1" Username="uname" Password="pwd" />
<signature EmbedRevInfo="true" VerificationTime="UseSigningTime" />
</prefs>
</trust>

trustAnchor element

The
trustAnchor
has two required attributes:
cerFile
●
not a path name.
trustedFor
●
This information is used during the signature validation operation of the PDF Manipulation Module, and is
used in a similar manner as the AddressBook in Acrobat. The PDF Manipulation Module searches the
certificates directory for file names. The certificates directory is imported into the deployment unit. The
Adobe root CDS certificate, from which all Adobe CDS intermediate CAs are issued, is always automatically
trusted for the
The values allowed in the
Flag
Identity
Signatures
CertifiedDocuments
DynamicContent
EmbeddedJavaScript
SSL
element has one sub-element, which is
—A reference to a certificate (.cer) file. The value for this attribute must be a file name only,
—A list of things that the certificate is trusted for.
,
Identity Signatures
trustedFor
Description
Include this certificate when determining trust. If this flag is not
present, the certificate can be used in building a certificate chain, but
cannot be used to determine what the signature is trusted for.
Documents signed with this signature, or whose certificate chain
includes this certificate, are trusted.
Documents signed with this signature as an author signature, or
whose certificate chain includes this certificate, are considered trusted
for
This value is valid only when the
present in the flag list. When present, dynamic content (movies, audio,
and so on) are allowed.
This value is valid only when the
present in the flag list. When present, JavaScript™ embedded in the
document can be executed. This flag needs to be set when you want to
allow certified documents to run any embedded Javascript scripts on
the server.
(Linux) Use this certificate as a trust anchor when determining if any
particular server is trusted for SSL communication. In Windows, the
default (Internet Explorer) certificate store is used instead.
cerrecord
, and
CertifiedDocuments
attribute are described in this table.
CertifiedDocuments
Content and Format of the trust.xml File
trustAnchor element
. The
cerrecord
flags.
.
CertifiedDocuments
CertifiedDocuments
80
sub-element
flag is also
flag is also