https://bugs.documentfoundation.org/show_bug.cgi?id=162693
Bug ID: 162693
Summary: Signature is valid notification although I don't trust
the intermediate certificate authority which signed
the certificate used to sign the document.
Product: LibreOffice
Version: 24.2.3.2 release
Hardware: All
OS: Windows (All)
Status: UNCONFIRMED
Severity: normal
Priority: medium
Component: LibreOffice
Assignee: [email protected]
Reporter: [email protected]
Description:
When opening a signed document a message is displayed which states that the
signature is valid although the intermediate CA isn't trusted in Windows'
certificate storage. In the document's "Digital Signature" window it is stated
correctly that the signature couldn't be verified.
Steps to Reproduce:
1. Sign a document with a certificate issued by an intermediate CA
2. Remove the intermediate CA from Windows certificate storage (you keep
trusting the root ca!)
3. Reopen the prior signed document
Actual Results:
A message is shown that the document is signed and that the signature is valid
Expected Results:
A message should be shown which states that at least one signature has problem
because of unvalidatable certificate
Reproducible: Always
User Profile Reset: Yes
Additional Info:
Version: 24.2.3.2 (X86_64) / LibreOffice Community
Build ID: 433d9c2ded56988e8a90e6b2e771ee4e6a5ab2ba
CPU threads: 4; OS: Windows 10.0 Build 19045; UI render: Skia/Raster; VCL: win
Locale: de-DE (de_DE); UI: de-DE
Calc: threaded
Also tested: version 24.2.3.2 and 24.8.1.1 on Windows 11
On this Linux version it behaves as expected:
Version: 7.3.7.2 / LibreOffice Community
Build ID: 30(Build:2)
CPU threads: 8; OS: Linux 5.15; UI render: default; VCL: gtk3
Locale: de-DE (en_US.UTF-8); UI: en-US
Ubuntu package version: 1:7.3.7-0ubuntu0.22.04.6
Calc: threaded
I executed the steps above in safe mode and the problem occurs there as well.
Before issuing this bug report, I opened a forum thread here:
https://ask.libreoffice.org/t/digital-signature-in-windows-client-is-shown-as-valid-although-it-shouldnt/110106/2
--
You are receiving this mail because:
You are the assignee for the bug.
