To comment on the following update, log in, then open the issue: http://www.openoffice.org/issues/show_bug.cgi?id=103111
------- Additional comments from [email protected] Tue Jul 21 03:56:18 +0000 2009 ------- The problem is, incredibly, a service defect within the Microsoft function WinVerifyTrust. (It shows up for Windows version 5.1 build 2600.xpsp_sp2_rtm.040803-2158: Service Pack 2, which presumably must be older than the known working build xpsp_sp2_qfe.070227-2300 identified in a Heath Stewart blog at MSDN). My proposed solution is to provide a custom parameter to OOo Setup.exe (such as, /trusted) to enable a Microsoft flag which, according to MSDN, the function WinVerifyTrust subfunction MsiGetFileSignatureInformation uses to decide whether the result is reported as a fatal error or a warning that can be ignored. Scan the OOo setup component's final Windows source code for "MsiGetFileSignatureInformation" and if present then this solution should work. Alternatively, perhaps the proposed OOo Setup.exe /trusted parameter can be used to override the default action by deleting the cabinet entry in the MsiDigitalSignature table. http://msdn2.microsoft.com/en-us/library/aa370121(VS.85).aspx details MsiGetFileSignatureInformation function "Remarks When requesting only the certificate context, an invalid hash in the digital signature does not cause MsiGetFileSignatureInformation to return a fatal error. To return a fatal error for an invalid hash, set the MSI_INVALID_HASH_IS_FATAL flag in the dwFlags parameter. The certificate context and hash information is extracted from the file by a call to WinVerifyTrust. The ppcCertContext parameter is a duplicate of the signer certificate context from the signature. It is the responsibility of the caller to call CertFreeCertificateContext to free the certificate context when finished. Note that MsiGetFileSignatureInformation requires the presence of the Wintrust.dll file on the system." --------------------------------------------------------------------- Please do not reply to this automatically generated notification from Issue Tracker. Please log onto the website and enter your comments. http://qa.openoffice.org/issue_handling/project_issues.html#notification --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
