https://bugs.freedesktop.org/show_bug.cgi?id=76142
Priority: medium
Bug ID: 76142
Assignee: [email protected]
Summary: EU-conform digital signatures (XAdES, ASiC container)
in Libre Office
Severity: normal
Classification: Unclassified
OS: All
Reporter: [email protected]
Hardware: Other
Status: UNCONFIRMED
Version: unspecified
Component: Libreoffice
Product: LibreOffice
Topic: How to use EU-conform digital signatures in Libre Office?
Note: I have performed some tests how base XMLDSIG structures of Libre Office
can be extended to XAdES (ETSI TS 101 903) structures that can contain e.g.
timestamps and revocation data without breaking the processing rules of Libre
Office. I found that this is possible, the XML structures can be slightly
modified, but - beyond several minor problems - two major, blocking problems
occurred: the lack of support stronger crypto agorithms (e.g. SHA-256 for
hashing, SHA-256 with RSA for signing) and the matter of 0 byte-sized files
(see bug 60700).
Suggested solution: The signature layer of Libre Office is based on Aleksey
Sanin's library which uses OpenSSL in the background. Perhaps, it is quite
enough if those libraries (libxmlsec.dll, libxmlsec-mscrypto.dll,
xmlsecurity.dll, ssleay32.dll) are updated. The recent versions of such
libraries support just SHA-1 based operations which must be rejected since
2012-01-01 in a legal case...
--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
Libreoffice-bugs mailing list
[email protected]
http://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs
