https://bugs.freedesktop.org/show_bug.cgi?id=58476
Priority: medium
Bug ID: 58476
Assignee: [email protected]
Summary: Adding a signature to a document already signed by MS
Word invalidates the MS Word signature
Severity: normal
Classification: Unclassified
OS: All
Reporter: [email protected]
Hardware: All
Status: UNCONFIRMED
Version: 3.6.1.2 release
Component: framework
Product: LibreOffice
Created attachment 71744
--> https://bugs.freedesktop.org/attachment.cgi?id=71744&action=edit
File signed by MS Word (result of step 7 in the repro steps)
Using LibreOffice to add a signature to a document that has already been signed
by someone in MS Word invalidates the (still-valid) original signature.
Steps (note that a file is attached which allows you to skip steps 1-7):
1) Boot MS Word
2) Hit Escape (Create default document)
3) File -> Info -> Protect Document -> Add a Digital signature
4) Save file as ODF format (.odt)
5) Choose an RSA certificate that uses a SHA1 hash (DSA is fine too)
6) Click Sign
7) Exit MS Word
8) Open document in LibreOffice
9) Under File menu, click Digital Signatures
10) Notice they're considered valid
11) Now click "Sign Document" button and add a digital signature using a SHA1
cert
12) Observe invalid original signature
It seems that this might be happening because LibreOffice is rewriting the XML
for the MS Word signature, but omitting the Type attribute on the Reference
element.
--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
Libreoffice-bugs mailing list
[email protected]
http://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs
