Framework EDI Reference. Methods and Properties
ediSecurityCertificate. VerifyFile

Verifies a signed file.

Syntax:

• <lretval> = object.VerifyFile(<sSignedFileName>, <sSignatureFile>, <sSignAlgorithm>, <lSignatureFormatType>, <sVerifiedFileName>)

Parameters:

• sSignedFileName – Full path name of file to verify.  This parameter is required when the format type is as follows, otherwise it is ignored:
  • SignatureFormat_SignedHash
  • SignatureFormat_SignedData_Detached
• sSignatureFile – Full path name of file containing the digital signature of file to verify.
• sSignAlgorithm – Signature algorithm used to verify the signed file.
• lSignatureFormatType – Signature format of signed file.  The supported signed file formats are listed in Signature Format Type Constants.
• sVerifiedFileName – Full path name of the target file resulting from the file verification.  This parameter is required when the format type is SignatureFormat_SignedData.

Returns:

Returns 1 if the operation is successful; otherwise the operation returns zero.

Remarks:

The public key of the certificate is used to verify a file

The parameter requirements of sSignedFileName, sSignatureFile and sVerifiedFileName depend on the format type being used and are explained as follows:

• SignatureFormat_SignedHash - When a file is signed using this format, the signed file generates a separate digital signature.  When verifying, the signed file is verified against the separate file containing the digital signature.

  • sSignedFileName - REQUIRED

  • sSignatureFile - REQUIRED

  • sVerifiedFileName - NOT REQUIRED

• SignatureFormat_SignedData - When a file is signed using this format, the digital signature both contains the signature and the file being signed.  When verifying, only the digital signature is required, and if the verification is successful, the verified file is extracted and saved to a target file.

  • sSignedFileName - NOT REQUIRED

  • sSignatureFile - REQUIRED

  • sVerifiedFileName - REQUIRED

• SignatureFormat_SignedData_Detached - When a file is signed using this format, the digital signature is in the same format as the SignatureFormat_SignedData, but only the signed file is not embedded with the digital signature in the same file.  When verifying, the signed file is verified against the separate SignedData signature.

  • sSignedFileName - REQUIRED

  • sSignatureFile - REQUIRED

  • sVerifiedFileName - NOT REQUIRED
    

For additional information on the signed-data content type, please refer to RFC 2315 - PKCS #7: Cryptographic Message Syntax Version 1.5.