https://issues.apache.org/ooo/show_bug.cgi?id=121505
--- Comment #1 from orcmid <[email protected]> --- Created attachment 80048 --> https://issues.apache.org/ooo/attachment.cgi?id=80048&action=edit A Leisurely Hello-Again Confirmation [zip] This is a slow walk through this defect case to gain more clues on what the disconnect is. There are two ODT documents and a variety of screenshots, in date-time sequence: 1. HelloAgain.odt is a simple Word 2013 Preview document saved with a digital signature. 2. SignedFirst.png shows the dialogs that were used in the signing of (1). Aftersigned.png are two screen shots confirming that signing occurred. The last shows that signed documents are considered "final" as a safety measure. 3. HelloAgainInAOO.png shows that a *copy* of HelloAgain.odt, HelloAgain2.odt, is still recognized as signed with a verifiable signature by Apache OpenOffice 3.4.1. (The renamed copy is to prevent alteration to HelloAgain.odt so it can be compared with later ones.) 4. AOO-delines.png is fascinating. AOO 3.4.1 concludes that signatures can't be added because the document does not have an ODF 1.2 digital signature. (There is no digital signature in ODF 1.1, but OpenOffice.org implementations had an implementation-dependent one that is not compatible with the ODF 1.2 digital signature. But that is not what is in HelloAgain2.odt. Hypothesis: This is an unintended consequence of the manifest:version introduction.) 5. HelloAgainInLibO.png is HelloAgain2.odt opened in LibreOffice 3.6.4 (any port in a storm). The document is again recognized as having a verifiable signature. 6. AddSigLibO.png shows that LibreOffice 3.6.4 does allow adding a signature. 7. Oops! After applying the second signature, the first signature is reported as invalid. This is demonstrated in the three OopsLibO.png screen captures. The last of those is on attempting to re-open the HelloAgain2.odt after the defective second signing. 8. OopsAOO.png reveals that Apache OpenOffice 3.4.1 also sees the double-signing as defective. 9. OopsMSWPre.png also demonstrates that Microsoft Office Word 2013 Preview fails to notice that HelloAgain2.odt is signed at all. The document is not opened as read-only or final either. I can see a significant area for work at the next ODF Plugfest [;<). -- You are receiving this mail because: You are on the CC list for the bug. You are the assignee for the bug.
