@trupdf/signature
Digital signatures
PKI sign · CMS PKCS#7 · chain validation · OCSP/CRL
Sign with a P12 keystore, verify the byte-range integrity, and validate the certificate chain against host-supplied trust anchors.
F.01 — What you get
- Standard CMS detached PKCS#7 placeholder + replace flow.
- Host-injected OCSP / CRL fetchers — TruPDF never owns the network I/O.
- CertChainVerifier ships LTV detection and intactByteRange checks.
- Signing engine is lazy-loaded — zero overhead when signing isn't used.
Next step
See it in the demo
The live demo wires this feature into a full viewer. Open any PDF and try it.