To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=103111





------- Additional comments from [email protected] Tue Jul 21 03:56:18 
+0000 2009 -------
The problem is, incredibly, a service defect within the Microsoft function
WinVerifyTrust.  (It shows up for Windows version 5.1 build
2600.xpsp_sp2_rtm.040803-2158: Service Pack 2, which presumably must be older
than the known working build xpsp_sp2_qfe.070227-2300 identified in a Heath
Stewart blog at MSDN).

My proposed solution is to provide a custom parameter to OOo Setup.exe (such as,
/trusted) to enable a Microsoft flag which, according to MSDN, the function
WinVerifyTrust subfunction MsiGetFileSignatureInformation uses to decide whether
the result is reported as a fatal error or a warning that can be ignored.  Scan
the OOo setup component's final Windows source code for
"MsiGetFileSignatureInformation" and if present then this solution should work.
 Alternatively, perhaps the proposed OOo Setup.exe /trusted parameter can be
used to override the default action by deleting the cabinet entry in the
MsiDigitalSignature table.


http://msdn2.microsoft.com/en-us/library/aa370121(VS.85).aspx        details
MsiGetFileSignatureInformation function
"Remarks
When requesting only the certificate context, an invalid hash in the digital
signature does not cause MsiGetFileSignatureInformation to return a fatal error.
To return a fatal error for an invalid hash, set the MSI_INVALID_HASH_IS_FATAL
flag in the dwFlags parameter.

The certificate context and hash information is extracted from the file by a
call to WinVerifyTrust. The ppcCertContext parameter is a duplicate of the
signer certificate context from the signature. It is the responsibility of the
caller to call CertFreeCertificateContext to free the certificate context when
finished.

Note that MsiGetFileSignatureInformation requires the presence of the
Wintrust.dll file on the system."


---------------------------------------------------------------------
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to