[RELEASE]: availability of RC builds
Hi, we are currently in the unlucky situation that the server where the RC builds are uploaded and hosted is not available due to hardware issues. New replacement disks are ordered and expected to be available on Friday. Maybe later on Friday or Saturday the server will be back. I have deleted the RC3 builds already in preparation for RC4 and where we have started the upload. This was already before Imacat reported a problem with digital signatures for document and macros. A related discussion is ongoing. Digital signatures are broken on Linux and Mac and work on Windows. But of course a further detailed testing is necessary on Windows as well. It's surprising that a so called important feature wasn't reported over month and for me it is seems to be not so important. We have to decide how to proceed and opinions are welcome or better active help. I would like propose to move forward with the 4.1 release and fix this problem asap and release it with a 4.1.1. The problem is related to the removal of very old mozilla libs where we have agreed to drop them for various reasons. Juergen - To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional commands, e-mail: dev-h...@openoffice.apache.org
Re: [RELEASE]: RC3 available
Juergen Schmidt wrote: Am Donnerstag, 17. April 2014 um 01:04 schrieb Andrea Pescetti: It seems rather serious. I expect that ordinary private users are not affected so much, but corporate or institutional users may be. this is very speculative and I am not aware of any reported problem until now. Indeed this is just my expectation. I would like to ask the mailing lists for some dedicated testing and evaluation, as I wrote. But I can't even give users the link since our CI server is broken and nobody can download RC3 at the moment. I described the four lost features from Mozilla we identified so far (this one and the three from the release notes) and asked on the mailing lists in Italian if somebody is using them. http://mail-archives.apache.org/mod_mbox/openoffice-utenti-it/201404.mbox/%3C534F8104.20408%40apache.org%3E (why the Italian lists? because digital signatures in OpenOffice are a topic that I've seen discussed there over the years) Does it make sense to send a warning to the international users list too? Do we really want stop the current 4.1 release that is probably good for 95% of our users? We are estimating with no knowledge. A quick e-mail discussion on the users list would give us better information on whether we are dropping something critical for users or not. Then I perfectly understand that we have to deliver 4.1.0 in a reasonable timeframe and that we have no immediate solution for this removed feature. Ideally, we should at least conclude that: 1) the Windows version is completely unaffected (best way: ask people who rely on these features to test with the Beta or RC3) 2) the feature is not seen as critical in other environments (it isn't for me, it isn't for you; but we may be missing some important use cases). I would go for the release, fix it and release a 4.1.1 when a fix is available. If we are committed to fix it in 4.1.1 this is important to say too. Regards, Andrea. - To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional commands, e-mail: dev-h...@openoffice.apache.org
Re: [RELEASE]: RC3 available
On Thu, 17 Apr 2014 09:40:25 +0200 Andrea Pescetti pesce...@apache.org wrote: Juergen Schmidt wrote: Am Donnerstag, 17. April 2014 um 01:04 schrieb Andrea Pescetti: It seems rather serious. I expect that ordinary private users are not affected so much, but corporate or institutional users may be. this is very speculative and I am not aware of any reported problem until now. Indeed this is just my expectation. I would like to ask the mailing lists for some dedicated testing and evaluation, as I wrote. But I can't even give users the link since our CI server is broken and nobody can download RC3 at the moment. I described the four lost features from Mozilla we identified so far (this one and the three from the release notes) and asked on the mailing lists in Italian if somebody is using them. http://mail-archives.apache.org/mod_mbox/openoffice-utenti-it/201404.mbox/%3C534F8104.20408%40apache.org%3E (why the Italian lists? because digital signatures in OpenOffice are a topic that I've seen discussed there over the years) Does it make sense to send a warning to the international users list too? Do we really want stop the current 4.1 release that is probably good for 95% of our users? We are estimating with no knowledge. A quick e-mail discussion on the users list would give us better information on whether we are dropping something critical for users or not. Then I perfectly understand that we have to deliver 4.1.0 in a reasonable timeframe and that we have no immediate solution for this removed feature. Ideally, we should at least conclude that: 1) the Windows version is completely unaffected (best way: ask people who rely on these features to test with the Beta or RC3) 2) the feature is not seen as critical in other environments (it isn't for me, it isn't for you; but we may be missing some important use cases). I would go for the release, fix it and release a 4.1.1 when a fix is available. If we are committed to fix it in 4.1.1 this is important to say too. Regards, Andrea. Another possibility: I am not au fait with Digital Signatures so may be utterly off target Would it be possible to (quickly) develop an extension that provided the Digital Signature functionality? Then release of OO 4.1 could continue as planned, with the Digital Signature functionality available by such an add-on? -- Rory O'Farrell ofarr...@iol.ie - To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional commands, e-mail: dev-h...@openoffice.apache.org
Re: [RELEASE]: RC3 available
On 4/17/14 9:50 AM, Rory O'Farrell wrote: On Thu, 17 Apr 2014 09:40:25 +0200 Andrea Pescetti pesce...@apache.org wrote: Juergen Schmidt wrote: Am Donnerstag, 17. April 2014 um 01:04 schrieb Andrea Pescetti: It seems rather serious. I expect that ordinary private users are not affected so much, but corporate or institutional users may be. this is very speculative and I am not aware of any reported problem until now. Indeed this is just my expectation. I would like to ask the mailing lists for some dedicated testing and evaluation, as I wrote. But I can't even give users the link since our CI server is broken and nobody can download RC3 at the moment. I described the four lost features from Mozilla we identified so far (this one and the three from the release notes) and asked on the mailing lists in Italian if somebody is using them. http://mail-archives.apache.org/mod_mbox/openoffice-utenti-it/201404.mbox/%3C534F8104.20408%40apache.org%3E (why the Italian lists? because digital signatures in OpenOffice are a topic that I've seen discussed there over the years) Does it make sense to send a warning to the international users list too? Do we really want stop the current 4.1 release that is probably good for 95% of our users? We are estimating with no knowledge. A quick e-mail discussion on the users list would give us better information on whether we are dropping something critical for users or not. Then I perfectly understand that we have to deliver 4.1.0 in a reasonable timeframe and that we have no immediate solution for this removed feature. Ideally, we should at least conclude that: 1) the Windows version is completely unaffected (best way: ask people who rely on these features to test with the Beta or RC3) 2) the feature is not seen as critical in other environments (it isn't for me, it isn't for you; but we may be missing some important use cases). I would go for the release, fix it and release a 4.1.1 when a fix is available. If we are committed to fix it in 4.1.1 this is important to say too. Regards, Andrea. Another possibility: I am not au fait with Digital Signatures so may be utterly off target Would it be possible to (quickly) develop an extension that provided the Digital Signature functionality? Then release of OO 4.1 could continue as planned, with the Digital Signature functionality available by such an add-on? probably not easy ;-) We should discuss the this feature in a separate thread because I see many open question about it in general... But the good news is that it still works on Windows and I am very confident that it works completely. Juergen - To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional commands, e-mail: dev-h...@openoffice.apache.org
Network Error (tcp_error) - A communication error occurred: Connection refused
Hello, trying to access any of the links provided on the page: http://ci.apache.org/projects/openoffice/ the pages time out or I receive a Connection refused error. Balázs Orbán Reporting Business Analyst Phone: +421-2-4974-9631 ITN: 34219631 email: bal...@sk.ibm.com IBM Intern. Services Centre Ltd. IBM International Services Centre s.r.o. Apollo II, Mlynské Nivy 49, Bratislava, 821 09 , Slovakia IČO: 35 852 631 Obchodný register Okresného súdu Bratislava I. Vložka číslo: 28278/B; Oddiel: sro My Strengths are: Ideation, Input, Competition, Adaptability, Achiever
[DISCUSS]: Digital signing of documents and macros
Hi, we currently have an issue with digital signing on non Windows platforms. The whole problem was introduced with the drop of some very old Mozilla stuff that made always problems. Feature description (simplified) Digital signing of document and/or macros is a feature to increase the integrity in a workflow where documents are exchanged and to build a trusted environment. 1. document signatures With a valid certificate it is possible to sign a document after it is saved. It is comparable with a seal. Other users loading this document will see a signature icon in the status bar that shows that this document is signed. Double click on this icon opens a dialog where the user can view the certificate. Two status are possible, the first one is that the certificate can be validated and is marked as trusted. The second (identified with the same icon + a yellow triangle warning sign) is where the certificate can't be validated automatically. 2. macro signatures Similar to documents the user can sign macros in the same way. When a user load a document with signed macros a dialog is opened to enable macros or not. In this dialog the user get also information that the macro is signed and is able to view the certificate. It is also possible to trust this certificate always and the next time the macro is accepted automatically. Problem This functionality was tightly coupled to Mozilla and made use of the Mozilla certificate store. At least on Linux and MacOS where as on Windows system certificate store was used directly. Current situation is that it still works on Windows but is partly broken on Linux and MacOS. Signing of new document or macros is not possible at all because no certificate store is available or better accessible. Signed documents can be loaded but the cert can't be validated. Signed macros can be loaded/enabled and executed. It is also possible to add an exception to trust this cert always to prevent the macro dialog in the future. General This feature heavily depends on the Mozilla certificate store which seems to be not optimal. For example on Mac the user would have to install Mozilla to make use of this feature. Standard browser for most users is Safari. A further observation is why I can't accept a cert for document signatures but for macro signatures. For example if I know where it comes from and know that it is a self signed cert why I can't trust this cert. Solution idea Rely on the system certificate store where possible similar to Windows, means on MacOS connect to the Keychain. On Linux it is still unclear to me how it can work. Maybe managing an own cert store and use openssl to access system resources to validate certificates. Or access via openssl an existing cert store for the user/system. I am no expert here and many open questions that have to be answered. Opinions and especially expert knowledge from an implementation perspective are highly appreciated and welcome. Juergen - To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional commands, e-mail: dev-h...@openoffice.apache.org
The Apache Software Foundation Announces 100 Million Downloads of Apache™ OpenOffice™
[Rob: Please help spread the word by sharing this link with your friends on Facebook, Twitter, Google+, etc.] this announcement is also available online at http://s.apache.org/4BL Leading Open Source office application and personal productivity suite for Windows, Mac, and Linux reaches a major adoption milestone 17 April 2014 --Forest Hill, MD-- The Apache Software Foundation (ASF), the all-volunteer developers, stewards, and incubators of more than 170 Open Source projects and initiatives, announced today that Apache OpenOffice™ has been downloaded 100 million times. Apache OpenOffice is the leading Open Source office document productivity suite, available in 32 languages on Windows, OS X, and Linux. OpenOffice includes a word processor (Writer), a spreadsheet (Calc), a presentation editor (Impress), a vector graphics editor (Draw), a mathematical formula editor (Math), and a database management program (Base). As Open Source software, Apache OpenOffice is available to all users free of charge; the C++ source code is readily available for anyone who wishes to enhance the applications. Originally created as StarOffice by StarDivision and after further development as an Open Source product under the name OpenOffice.org, OpenOffice entered the Apache Incubator in 2011 and graduated as an Apache Top-level Project in October 2012. I'm extremely pleased to see us reach this major milestone in less than two years, said Andrea Pescetti, Vice President of Apache OpenOffice. This is a testament to our community volunteers: the hundreds of talented individuals who make Apache OpenOffice what it is, who write the code, test for bugs, translate the user interface, write documentation, answer user questions and manage our servers. We remain committed to offering the successful combination of reliability and innovation that so many users appreciate. Official downloads at openoffice.org are hosted by SourceForge, where users can also find repositories for more than 750 extensions and over 2,800 templates for OpenOffice. By continuously improving Apache OpenOffice Extensions and Templates sites we show how committed we are about providing projects with what they need most, said Gaurav Kuchhal, General Manager for Slashdot and SourceForge. We are happy to help open source projects to grow, no matter where they are hosted or developed. We have been serving over 122 Million downloads for the Apache OpenOffice project, with daily peaks of about 250,000 and we are committed to providing products and services that demonstrate our dedication to technical excellence. Apache OpenOffice reaching 100 million downloads is a remarkable achievement in the project's 29-year history and testament to the power of successful Open Source communities, said Shane Curcuru, Apache OpenOffice mentor and ASF Vice President of Brand Management. We extend our gratitude to all the volunteers and users whose contribution, feedback, support, engagement, and enthusiasm keeps us focused on delivering great software. We couldn't celebrate this milestone without them! Some Trends and Fun Facts about Apache OpenOffice - OpenOffice supports Microsoft Windows, Apple OS X and Linux - Top downloads by operating system, in order: Windows, Mac, Linux - Top downloads by browser, in order: Internet Explorer, Firefox, Chrome - Top 10 countries for OpenOffice downloads, in order: United States, France, Germany, Italy, Japan, United Kingdom, Spain, Russia, Canada, and Poland - OpenOffice supports 120+ languages --those that are 100% translated and maintained are officially released. Latest languages released include Asturian, Basque, Danish, Korean, Norwegian, Polish, Scottish Gaelic, and Swedish, thanks to the work of new translation volunteers - Apache OpenOffice features integrated improvements from IBM Lotus Symphony (a previous fork that has been closed and donated to the ASF) to bring better compatibility with Microsoft Office documents - OpenOffice 4.0 debuts a major change to its user interface with the introduction of the Sidebar, developed by the Apache OpenOffice dream team in Hamburg in close cooperation with hundreds of community members - OpenOffice 4.0 reflects 500 bug fixes, advances in Microsoft Office interoperability, enhancements to drawing/graphics, and performance improvements, among many others - The new logo for OpenOffice was chosen after a long selection process that saw over 5,000 votes cast. The winning proposal was submitted by community member Chris Rottensteiner from South Tyrol - Demand for Apache OpenOffice 4.0 averages 1 million downloads per week - The Apache OpenOffice 4.0.1 maintenance release fixes critical issues and improves the overall quality of the application, including: additional native language translations, bug fixes, performance improvements, and Windows 8 compatibility enhancements - Apache OpenOffice successfully supports the Microsoft Active Accessibility (MSAA) and IAccessible2 interfaces,
Re: [RELEASE]: availability of RC builds
On 4/17/14 9:17 AM, Jürgen Schmidt wrote: Hi, we are currently in the unlucky situation that the server where the RC builds are uploaded and hosted is not available due to hardware issues. New replacement disks are ordered and expected to be available on Friday. Maybe later on Friday or Saturday the server will be back. I have deleted the RC3 builds already in preparation for RC4 and where we have started the upload. This was already before Imacat reported a problem with digital signatures for document and macros. A related discussion is ongoing. Digital signatures are broken on Linux and Mac and work on Windows. But of course a further detailed testing is necessary on Windows as well. It's surprising that a so called important feature wasn't reported over month and for me it is seems to be not so important. We have to decide how to proceed and opinions are welcome or better active help. I would like propose to move forward with the 4.1 release and fix this problem asap and release it with a 4.1.1. The problem is related to the removal of very old mozilla libs where we have agreed to drop them for various reasons. For completeness, when the server is back the upload is finished we will have a RC4 build available based on revision 1587478. Juergen - To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional commands, e-mail: dev-h...@openoffice.apache.org
Fwd: Reporting a problem with the OpenOffice website
This is my 2nd email to you. Can you please have some one contact me from your office to fix this minor problem on my laptop regarding OpenOffice.org Respectfully Submitted, George Kaliampos -Original Message- From: gkaliampos gkaliam...@aol.com To: dev dev@openoffice.apache.org Sent: Wed, Apr 16, 2014 11:45 am Subject: Reporting a problem with the OpenOffice website To whom it may concern: I have a macbook pro I am having some problems with openoffice.org. Yesterday I went to shutdown my Mac it kept on telling me to exit out of Open office in which I attempted to quit but would not allow me to shut down. Ultimately, I held down the shutdown button closed my computer. This morning I tried to download a document from an email i got this message: Either another instance of OpenOffice.org is accessing your personal settings or your personal settings are locked. Simultaneous access can lead to inconsistencies in your personal settings. Before continuing, you should make sure user georgeKaliampos closes OpenOffice.org on host 'George-Kaliampos-MacBook-Pro.local'. Do you really want to continue? (the option for no is highlighted I honestly dont know why I am receiving this message. I have never had a problem with this laptop or OpenOffice. Can you please assist me in fixing this problem? I can be reached on my mobile at any time of the day 646.296.0615 Thank You, George Kaliampos
Re: Reporting a problem with the OpenOffice website
Maybe the reply didn't get back to you because you are not subscribed to the mailing list. To answer your questions check this answer about the 'lock' files which makes AOO hang: https://forum.openoffice.org/en/forum/viewtopic.php?f=17t=38843 The path would have changed from 3 to 4 and OpenOffice.org to OpenOffice. A more hard solution is to delete your whole profile folder, which will delete your OpenOffice presets. http://forums.macrumors.com/showthread.php?t=1648405 So at the moment you should check out both threats and report back. Regards. On 4/16/14, gkaliam...@aol.com gkaliam...@aol.com wrote: To whom it may concern: I have a macbook pro I am having some problems with openoffice.org. Yesterday I went to shutdown my Mac it kept on telling me to exit out of Open office in which I attempted to quit but would not allow me to shut down. Ultimately, I held down the shutdown button closed my computer. This morning I tried to download a document from an email i got this message: Either another instance of OpenOffice.org is accessing your personal settings or your personal settings are locked. Simultaneous access can lead to inconsistencies in your personal settings. Before continuing, you should make sure user georgeKaliampos closes OpenOffice.org on host 'George-Kaliampos-MacBook-Pro.local'. Do you really want to continue? (the option for no is highlighted I honestly dont know why I am receiving this message. I have never had a problem with this laptop or OpenOffice. Can you please assist me in fixing this problem? I can be reached on my mobile at any time of the day 646.296.0615 Thank You, George Kaliampos -- Alexandro Colorado Apache OpenOffice Contributor http://www.openoffice.org - To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional commands, e-mail: dev-h...@openoffice.apache.org
Re: Reporting a problem with the OpenOffice website
Yes a correct shutdown of OpenOffice could 'expire' that lock file that is the one that triggers the message you were talking about. All your settings are based on the Library folder on Lion. This is a tutorial about the library folder: http://www.macworld.com/article/1161156/view_library_folder_in_lion.html On 4/17/14, gkaliam...@aol.com gkaliam...@aol.com wrote: I went to open an email today that message did not pop up. Does that mean it went back to normal itself?? -Original Message- From: Alexandro Colorado j...@oooes.org To: dev dev@openoffice.apache.org Cc: gkaliampos gkaliam...@aol.com Sent: Thu, Apr 17, 2014 9:13 am Subject: Re: Reporting a problem with the OpenOffice website Maybe the reply didn't get back to you because you are not subscribed to the mailing list. To answer your questions check this answer about the 'lock' files which makes AOO hang: https://forum.openoffice.org/en/forum/viewtopic.php?f=17t=38843 The path would have changed from 3 to 4 and OpenOffice.org to OpenOffice. A more hard solution is to delete your whole profile folder, which will delete your OpenOffice presets. http://forums.macrumors.com/showthread.php?t=1648405 So at the moment you should check out both threats and report back. Regards. On 4/16/14, gkaliam...@aol.com gkaliam...@aol.com wrote: To whom it may concern: I have a macbook pro I am having some problems with openoffice.org. Yesterday I went to shutdown my Mac it kept on telling me to exit out of Open office in which I attempted to quit but would not allow me to shut down. Ultimately, I held down the shutdown button closed my computer. This morning I tried to download a document from an email i got this message: Either another instance of OpenOffice.org is accessing your personal settings or your personal settings are locked. Simultaneous access can lead to inconsistencies in your personal settings. Before continuing, you should make sure user georgeKaliampos closes OpenOffice.org on host 'George-Kaliampos-MacBook-Pro.local'. Do you really want to continue? (the option for no is highlighted I honestly dont know why I am receiving this message. I have never had a problem with this laptop or OpenOffice. Can you please assist me in fixing this problem? I can be reached on my mobile at any time of the day 646.296.0615 Thank You, George Kaliampos -- Alexandro Colorado Apache OpenOffice Contributor http://www.openoffice.org -- Alexandro Colorado Apache OpenOffice Contributor http://www.openoffice.org - To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional commands, e-mail: dev-h...@openoffice.apache.org
Re: [DISCUSS]: Digital signing of documents and macros
A small update on that topic: there is a simple workaround! Signing also works on Mac and Linux if the environment variable MOZILLA_CERTIFICATE_FOLDER is set to the currently active mozilla/thunderbird/firefox/etc. profile. E.g. on Linux setting the environment variable could look like MOZILLA_CERTIFICATE_FOLDER=sql:/home/xxx/.mozilla/firefox/23d7j.default and on Mac it could look like MOZILLA_CERTIFICATE_FOLDER=sql:/Users/xxx/Library/Application Support/Firefox/Profiles/23d7j.default Herbert On 17.04.2014 11:55, Jürgen Schmidt wrote: Hi, we currently have an issue with digital signing on non Windows platforms. The whole problem was introduced with the drop of some very old Mozilla stuff that made always problems. Feature description (simplified) Digital signing of document and/or macros is a feature to increase the integrity in a workflow where documents are exchanged and to build a trusted environment. 1. document signatures With a valid certificate it is possible to sign a document after it is saved. It is comparable with a seal. Other users loading this document will see a signature icon in the status bar that shows that this document is signed. Double click on this icon opens a dialog where the user can view the certificate. Two status are possible, the first one is that the certificate can be validated and is marked as trusted. The second (identified with the same icon + a yellow triangle warning sign) is where the certificate can't be validated automatically. 2. macro signatures Similar to documents the user can sign macros in the same way. When a user load a document with signed macros a dialog is opened to enable macros or not. In this dialog the user get also information that the macro is signed and is able to view the certificate. It is also possible to trust this certificate always and the next time the macro is accepted automatically. Problem This functionality was tightly coupled to Mozilla and made use of the Mozilla certificate store. At least on Linux and MacOS where as on Windows system certificate store was used directly. Current situation is that it still works on Windows but is partly broken on Linux and MacOS. Signing of new document or macros is not possible at all because no certificate store is available or better accessible. Signed documents can be loaded but the cert can't be validated. Signed macros can be loaded/enabled and executed. It is also possible to add an exception to trust this cert always to prevent the macro dialog in the future. General This feature heavily depends on the Mozilla certificate store which seems to be not optimal. For example on Mac the user would have to install Mozilla to make use of this feature. Standard browser for most users is Safari. A further observation is why I can't accept a cert for document signatures but for macro signatures. For example if I know where it comes from and know that it is a self signed cert why I can't trust this cert. Solution idea Rely on the system certificate store where possible similar to Windows, means on MacOS connect to the Keychain. On Linux it is still unclear to me how it can work. Maybe managing an own cert store and use openssl to access system resources to validate certificates. Or access via openssl an existing cert store for the user/system. I am no expert here and many open questions that have to be answered. Opinions and especially expert knowledge from an implementation perspective are highly appreciated and welcome. Juergen - To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional commands, e-mail: dev-h...@openoffice.apache.org - To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional commands, e-mail: dev-h...@openoffice.apache.org
4.1.0_release_blocker granted: [Issue 124701] signing of documents/macros are broken on non windows platforms
j...@apache.org has granted 4.1.0_release_blocker: Issue 124701: signing of documents/macros are broken on non windows platforms https://issues.apache.org/ooo/show_bug.cgi?id=124701 - To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional commands, e-mail: dev-h...@openoffice.apache.org
Re: [DISCUSS]: Digital signing of documents and macros
On 4/17/14 3:53 PM, Herbert Duerr wrote: A small update on that topic: there is a simple workaround! Signing also works on Mac and Linux if the environment variable MOZILLA_CERTIFICATE_FOLDER is set to the currently active mozilla/thunderbird/firefox/etc. profile. E.g. on Linux setting the environment variable could look like MOZILLA_CERTIFICATE_FOLDER=sql:/home/xxx/.mozilla/firefox/23d7j.default and on Mac it could look like MOZILLA_CERTIFICATE_FOLDER=sql:/Users/xxx/Library/Application Support/Firefox/Profiles/23d7j.default we have verified this on Linux as well and I think it is very usable and good workaround for now. We will create a wiki page where we describe in detail what the user have to do ... We should keep in mind that the workflow was far from optimal and relied heavily on a Mozilla cert store and still does. As I described earlier on Mac a not very common environment. Anyway I think we can proceed with the workaround for now. And thanks to Herbert who initially dropped the ugly old Mozilla stuff (kudos for this) and who find this easy workaround in nss (some further kudos for this). I will take care of uploading the RC4 when the server is back again (hope I will notice this in my vacation ;-)). Please test this feature with the upcoming RC4 and for some detail information please review issue https://issues.apache.org/ooo/show_bug.cgi?id=124701 Juergen Herbert On 17.04.2014 11:55, Jürgen Schmidt wrote: Hi, we currently have an issue with digital signing on non Windows platforms. The whole problem was introduced with the drop of some very old Mozilla stuff that made always problems. Feature description (simplified) Digital signing of document and/or macros is a feature to increase the integrity in a workflow where documents are exchanged and to build a trusted environment. 1. document signatures With a valid certificate it is possible to sign a document after it is saved. It is comparable with a seal. Other users loading this document will see a signature icon in the status bar that shows that this document is signed. Double click on this icon opens a dialog where the user can view the certificate. Two status are possible, the first one is that the certificate can be validated and is marked as trusted. The second (identified with the same icon + a yellow triangle warning sign) is where the certificate can't be validated automatically. 2. macro signatures Similar to documents the user can sign macros in the same way. When a user load a document with signed macros a dialog is opened to enable macros or not. In this dialog the user get also information that the macro is signed and is able to view the certificate. It is also possible to trust this certificate always and the next time the macro is accepted automatically. Problem This functionality was tightly coupled to Mozilla and made use of the Mozilla certificate store. At least on Linux and MacOS where as on Windows system certificate store was used directly. Current situation is that it still works on Windows but is partly broken on Linux and MacOS. Signing of new document or macros is not possible at all because no certificate store is available or better accessible. Signed documents can be loaded but the cert can't be validated. Signed macros can be loaded/enabled and executed. It is also possible to add an exception to trust this cert always to prevent the macro dialog in the future. General This feature heavily depends on the Mozilla certificate store which seems to be not optimal. For example on Mac the user would have to install Mozilla to make use of this feature. Standard browser for most users is Safari. A further observation is why I can't accept a cert for document signatures but for macro signatures. For example if I know where it comes from and know that it is a self signed cert why I can't trust this cert. Solution idea Rely on the system certificate store where possible similar to Windows, means on MacOS connect to the Keychain. On Linux it is still unclear to me how it can work. Maybe managing an own cert store and use openssl to access system resources to validate certificates. Or access via openssl an existing cert store for the user/system. I am no expert here and many open questions that have to be answered. Opinions and especially expert knowledge from an implementation perspective are highly appreciated and welcome. Juergen - To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional commands, e-mail: dev-h...@openoffice.apache.org - To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional commands, e-mail: dev-h...@openoffice.apache.org - To unsubscribe, e-mail:
[RELEASE]: propose RC4 on revision 1587478
Hi, I would like to propose a new RC3 based on revision 1587478 of our AOO410 release branch. Integrated fixe for https://issues.apache.org/ooo/show_bug.cgi?id=124682 The latest reported problems with digital signatures can be solved with setting an additional environment variable on non windows platforms. A wiki page will be created to describe in detail what the user have to do. and the release notes will be updated as well. For now you can view issue https://issues.apache.org/ooo/show_bug.cgi?id=124701 for some details. I would like to invite everybody with valid certificates to check and test this feature in detail and give us feedback. Juergen - To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional commands, e-mail: dev-h...@openoffice.apache.org
100 million news now on Slashdot...
http://apache.slashdot.org/story/14/04/17/144228/apache-openoffice-reaches-100-million-downloads-now-what Regards, -Rob - To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional commands, e-mail: dev-h...@openoffice.apache.org
Re: [DISCUSS]: Digital signing of documents and macros
Jürgen Schmidt wrote: On 4/17/14 3:53 PM, Herbert Duerr wrote: A small update on that topic: there is a simple workaround! Signing also works on Mac and Linux if the environment variable MOZILLA_CERTIFICATE_FOLDER is set to the currently active mozilla/thunderbird/firefox/etc. profile. ... we have verified this on Linux as well and I think it is very usable and good workaround for now. Thanks a lot for this. It shows, once again, that we take users into consideration. https://issues.apache.org/ooo/show_bug.cgi?id=124701 Am I right in understanding that no code changes are necessary then, merely configuring the environment appropriately? And that (waiting for the servers to wake up) this can be tested on 4.1.0-beta or any previous RC too? Regards, Andrea. - To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional commands, e-mail: dev-h...@openoffice.apache.org
Re: [DISCUSS]: Digital signing of documents and macros
Am Donnerstag, 17. April 2014 um 17:59 schrieb Andrea Pescetti: Jürgen Schmidt wrote: On 4/17/14 3:53 PM, Herbert Duerr wrote: A small update on that topic: there is a simple workaround! Signing also works on Mac and Linux if the environment variable MOZILLA_CERTIFICATE_FOLDER is set to the currently active mozilla/thunderbird/firefox/etc. profile. ... we have verified this on Linux as well and I think it is very usable and good workaround for now. Thanks a lot for this. It shows, once again, that we take users into consideration. https://issues.apache.org/ooo/show_bug.cgi?id=124701 Am I right in understanding that no code changes are necessary then, merely configuring the environment appropriately? And that (waiting for the servers to wake up) this can be tested on 4.1.0-beta or any previous RC too? yes it should work with any RC and Beta (not tested) as well. We are indeed happen that Herbert find this workaround because everything else would have been taken much longer. The good thing for me is that I learned something new ;-) Juergen Regards, Andrea. - To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional commands, e-mail: dev-h...@openoffice.apache.org
Re: [DISCUSS]: Digital signing of documents and macros
On Thu, Apr 17, 2014 at 10:19 AM, Juergen Schmidt jogischm...@gmail.comwrote: Am Donnerstag, 17. April 2014 um 17:59 schrieb Andrea Pescetti: Jürgen Schmidt wrote: On 4/17/14 3:53 PM, Herbert Duerr wrote: A small update on that topic: there is a simple workaround! Signing also works on Mac and Linux if the environment variable MOZILLA_CERTIFICATE_FOLDER is set to the currently active mozilla/thunderbird/firefox/etc. profile. ... we have verified this on Linux as well and I think it is very usable and good workaround for now. Thanks a lot for this. It shows, once again, that we take users into consideration. https://issues.apache.org/ooo/show_bug.cgi?id=124701 Am I right in understanding that no code changes are necessary then, merely configuring the environment appropriately? And that (waiting for the servers to wake up) this can be tested on 4.1.0-beta or any previous RC too? yes it should work with any RC and Beta (not tested) as well. We are indeed happen that Herbert find this workaround because everything else would have been taken much longer. The good thing for me is that I learned something new ;-) Juergen Yes, really good news! And thank you Herbert for this simple and creative solution! Although I am not familiar with the sql: prefix reference for environment variables (??) Good going! Regards, Andrea. - To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional commands, e-mail: dev-h...@openoffice.apache.org -- - MzK Life is either a daring adventure, or nothing. -- Helen Keller
Re: Network Error (tcp_error) - A communication error occurred: Connection refused
Am 04/17/2014 11:16 AM, schrieb Balazs Orban: trying to access any of the links provided on the page: http://ci.apache.org/projects/openoffice/ the pages time out or I receive a Connection refused error. Currently there is a problem with the build server which can be monitored here: http://monitoring.apache.org/status/ Look for the aegis server (second item from top list). HTH Marcus - To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional commands, e-mail: dev-h...@openoffice.apache.org
Re: [RELEASE]: propose RC4 on revision 1587478
Am 04/17/2014 04:59 PM, schrieb Jürgen Schmidt: Hi, I would like to propose a new RC3 based on revision 1587478 of our AOO410 release branch. Integrated fixe for https://issues.apache.org/ooo/show_bug.cgi?id=124682 +1 The latest reported problems with digital signatures can be solved with setting an additional environment variable on non windows platforms. A wiki page will be created to describe in detail what the user have to do. and the release notes will be updated as well. For now you can view issue https://issues.apache.org/ooo/show_bug.cgi?id=124701 for some details. This looks like an simple and acceptable workaround for the Mac/Linux users. When I understand Herbert's last comment [1] correctly, then it sounds for me as a fix for the next release (4.1.1 or 4.2.0). [1] https://issues.apache.org/ooo/show_bug.cgi?id=124701#c9 Marcus - To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional commands, e-mail: dev-h...@openoffice.apache.org
Re: The Apache Software Foundation Announces 100 Million Downloads of Apache™ OpenOffice™
On Thu, Apr 17, 2014 at 3:17 AM, Rob Weir robw...@apache.org wrote: [Rob: Please help spread the word by sharing this link with your friends on Facebook, Twitter, Google+, etc.] this announcement is also available online at http://s.apache.org/4BL Leading Open Source office application and personal productivity suite for Windows, Mac, and Linux reaches a major adoption milestone 17 April 2014 --Forest Hill, MD-- The Apache Software Foundation (ASF), the all-volunteer developers, stewards, and incubators of more than 170 Open Source projects and initiatives, announced today that Apache OpenOffice™ has been downloaded 100 million times. Apache OpenOffice is the leading Open Source office document productivity suite, available in 32 languages on Windows, OS X, and Linux. OpenOffice includes a word processor (Writer), a spreadsheet (Calc), a presentation editor (Impress), a vector graphics editor (Draw), a mathematical formula editor (Math), and a database management program (Base). As Open Source software, Apache OpenOffice is available to all users free of charge; the C++ source code is readily available for anyone who wishes to enhance the applications. Originally created as StarOffice by StarDivision and after further development as an Open Source product under the name OpenOffice.org, OpenOffice entered the Apache Incubator in 2011 and graduated as an Apache Top-level Project in October 2012. I'm extremely pleased to see us reach this major milestone in less than two years, said Andrea Pescetti, Vice President of Apache OpenOffice. This is a testament to our community volunteers: the hundreds of talented individuals who make Apache OpenOffice what it is, who write the code, test for bugs, translate the user interface, write documentation, answer user questions and manage our servers. We remain committed to offering the successful combination of reliability and innovation that so many users appreciate. Official downloads at openoffice.org are hosted by SourceForge, where users can also find repositories for more than 750 extensions and over 2,800 templates for OpenOffice. By continuously improving Apache OpenOffice Extensions and Templates sites we show how committed we are about providing projects with what they need most, said Gaurav Kuchhal, General Manager for Slashdot and SourceForge. We are happy to help open source projects to grow, no matter where they are hosted or developed. We have been serving over 122 Million downloads for the Apache OpenOffice project, with daily peaks of about 250,000 and we are committed to providing products and services that demonstrate our dedication to technical excellence. Apache OpenOffice reaching 100 million downloads is a remarkable achievement in the project's 29-year history and testament to the power of successful Open Source communities, said Shane Curcuru, Apache OpenOffice mentor and ASF Vice President of Brand Management. We extend our gratitude to all the volunteers and users whose contribution, feedback, support, engagement, and enthusiasm keeps us focused on delivering great software. We couldn't celebrate this milestone without them! Some Trends and Fun Facts about Apache OpenOffice - OpenOffice supports Microsoft Windows, Apple OS X and Linux - Top downloads by operating system, in order: Windows, Mac, Linux - Top downloads by browser, in order: Internet Explorer, Firefox, Chrome - Top 10 countries for OpenOffice downloads, in order: United States, France, Germany, Italy, Japan, United Kingdom, Spain, Russia, Canada, and Poland - OpenOffice supports 120+ languages --those that are 100% translated and maintained are officially released. Latest languages released include Asturian, Basque, Danish, Korean, Norwegian, Polish, Scottish Gaelic, and Swedish, thanks to the work of new translation volunteers - Apache OpenOffice features integrated improvements from IBM Lotus Symphony (a previous fork that has been closed and donated to the ASF) to bring better compatibility with Microsoft Office documents - OpenOffice 4.0 debuts a major change to its user interface with the introduction of the Sidebar, developed by the Apache OpenOffice dream team in Hamburg in close cooperation with hundreds of community members - OpenOffice 4.0 reflects 500 bug fixes, advances in Microsoft Office interoperability, enhancements to drawing/graphics, and performance improvements, among many others - The new logo for OpenOffice was chosen after a long selection process that saw over 5,000 votes cast. The winning proposal was submitted by community member Chris Rottensteiner from South Tyrol - Demand for Apache OpenOffice 4.0 averages 1 million downloads per week - The Apache OpenOffice 4.0.1 maintenance release fixes critical issues and improves the overall quality of the application, including: additional native language translations, bug fixes, performance improvements, and
Re: The Apache Software Foundation Announces 100 Million Downloads of Apache™ OpenOffice™
Rob Weir wrote: [Rob: Please help spread the word by sharing this link with your friends on Facebook, Twitter, Google+, etc.] Italian version available at http://www.plio.it/node/105 Congratulations to everybody! Andrea - To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional commands, e-mail: dev-h...@openoffice.apache.org
RE: EXTERNAL: Re: Extension Manager Add Crashes
I traced this osl_getAsciiFunctionSymbol issues down to sal/osl/unx/module.c line 154. Apparently, the function osl_getAsciiDunctionSymbol is calling dlsym (fcnAddr = dlsym(Module, pSymbol) which attempts to get the address of a symbol in a shared object or executable. NULL is returned if address of the symbol's name as a character string cannot be found. In the case of error: osl_getAsciiFunctionSymbol failed with ld.so.1: soffice.bin: fatal: component_getImplementationEnvironmnet: can't find symbol I received in my trace output, null is returned. (from dbx dump) fcnAddr = (nil) pSymbol = 0xfdc7710 component_getImplementationEnvironmnet Module = 0xf80008e0 Also, I noticed this call to dlsym is wraped in an #ifndef NO_DL_FUNCTIONS, however this is not defined in my environment. What is the significance of calling dlsym, can't I simple define NO_DL_FUNCTIONS to prevent this from occurring or will this have a negative impact on my underlying issue with the bridge? Raymond -Original Message- From: Steele, Raymond Sent: Tuesday, April 15, 2014 12:28 PM To: a...@openoffice.apache.org; dev@openoffice.apache.org Cc: Meffe, David K Subject: RE: EXTERNAL: Re: Extension Manager Add Crashes Thanks AGAIN, Herbert. Is there any significance to the following trace output: Trace 23946/1: error: osl_getAsciiFunctionSympol failed with ld.so.1: soffice.bin: fatal: component_getImplementationEnvironmnet: can't find symbol I see this a lot while OpenOffice is launching. It appears to happen right before SAL_CALL uno_getMapping is called. -Original Message- From: Herbert Duerr [mailto:h...@apache.org] Sent: Tuesday, April 15, 2014 7:14 AM To: dev@openoffice.apache.org Cc: a...@openoffice.apache.org Subject: Re: EXTERNAL: Re: Extension Manager Add Crashes On 14.04.2014 17:59, Steele, Raymond wrote: Anyone available that understands the OpenOffice bridges or could point me to the correct documentation so that I can begin to understand the problem myself? This has been a road block for me. The OpenOffice bridges are part of the UNO framework. An overview [1] and FAQ [2] can help to get started into this topic. Especially see the FAQ's chapter 2.9 (Why is it so annoying to write a compiler version dependent C++ bridge?) on the deliberate design decisions that lead to this unfortunate fragility. There are other applications in the same league as OpenOffice that use plain implementation languages and thus avoid these extreme platform dependencies. [1] https://wiki.openoffice.org/wiki/Uno/Article/Understanding_Uno [2] https://wiki.openoffice.org/wiki/Uno/FAQ [3] http://www.openoffice.org/udk/cpp/man/cpp_bridges.html [4] https://wiki.openoffice.org/w/images/5/5e/DevelopersGuide_OOo3.1.0_05AdvancedUNO.odt There is a good chance that the ABI hasn't much changed and that the different compiler versions produces similar enough code so that one could eventually get along with minor tweaks to the Sparc Solaris UNO bridge. But finding the right knobs to tweak is a bit tricky. I hope the references above help to solve this. Herbert - To unsubscribe, e-mail: api-unsubscr...@openoffice.apache.org For additional commands, e-mail: api-h...@openoffice.apache.org
RE: EXTERNAL: Re: Extension Manager Add Crashes
Also, it only seems to happen when the symbol names are component_canUnload and component_getImplementationEnvironment. Is this really a problem? If not, why would the trace output report it as an error? Why would the code check for these symbols in ld.so.1? Isn't that the linker library? -Original Message- From: Steele, Raymond Sent: Thursday, April 17, 2014 3:58 PM To: 'a...@openoffice.apache.org'; 'dev@openoffice.apache.org' Cc: Meffe, David K; Marks, Jeffrie Subject: RE: EXTERNAL: Re: Extension Manager Add Crashes I traced this osl_getAsciiFunctionSymbol issues down to sal/osl/unx/module.c line 154. Apparently, the function osl_getAsciiDunctionSymbol is calling dlsym (fcnAddr = dlsym(Module, pSymbol) which attempts to get the address of a symbol in a shared object or executable. NULL is returned if address of the symbol's name as a character string cannot be found. In the case of error: osl_getAsciiFunctionSymbol failed with ld.so.1: soffice.bin: fatal: component_getImplementationEnvironmnet: can't find symbol I received in my trace output, null is returned. (from dbx dump) fcnAddr = (nil) pSymbol = 0xfdc7710 component_getImplementationEnvironmnet Module = 0xf80008e0 Also, I noticed this call to dlsym is wraped in an #ifndef NO_DL_FUNCTIONS, however this is not defined in my environment. What is the significance of calling dlsym, can't I simple define NO_DL_FUNCTIONS to prevent this from occurring or will this have a negative impact on my underlying issue with the bridge? Raymond -Original Message- From: Steele, Raymond Sent: Tuesday, April 15, 2014 12:28 PM To: a...@openoffice.apache.org; dev@openoffice.apache.org Cc: Meffe, David K Subject: RE: EXTERNAL: Re: Extension Manager Add Crashes Thanks AGAIN, Herbert. Is there any significance to the following trace output: Trace 23946/1: error: osl_getAsciiFunctionSympol failed with ld.so.1: soffice.bin: fatal: component_getImplementationEnvironmnet: can't find symbol I see this a lot while OpenOffice is launching. It appears to happen right before SAL_CALL uno_getMapping is called. -Original Message- From: Herbert Duerr [mailto:h...@apache.org] Sent: Tuesday, April 15, 2014 7:14 AM To: dev@openoffice.apache.org Cc: a...@openoffice.apache.org Subject: Re: EXTERNAL: Re: Extension Manager Add Crashes On 14.04.2014 17:59, Steele, Raymond wrote: Anyone available that understands the OpenOffice bridges or could point me to the correct documentation so that I can begin to understand the problem myself? This has been a road block for me. The OpenOffice bridges are part of the UNO framework. An overview [1] and FAQ [2] can help to get started into this topic. Especially see the FAQ's chapter 2.9 (Why is it so annoying to write a compiler version dependent C++ bridge?) on the deliberate design decisions that lead to this unfortunate fragility. There are other applications in the same league as OpenOffice that use plain implementation languages and thus avoid these extreme platform dependencies. [1] https://wiki.openoffice.org/wiki/Uno/Article/Understanding_Uno [2] https://wiki.openoffice.org/wiki/Uno/FAQ [3] http://www.openoffice.org/udk/cpp/man/cpp_bridges.html [4] https://wiki.openoffice.org/w/images/5/5e/DevelopersGuide_OOo3.1.0_05AdvancedUNO.odt There is a good chance that the ABI hasn't much changed and that the different compiler versions produces similar enough code so that one could eventually get along with minor tweaks to the Sparc Solaris UNO bridge. But finding the right knobs to tweak is a bit tricky. I hope the references above help to solve this. Herbert - To unsubscribe, e-mail: api-unsubscr...@openoffice.apache.org For additional commands, e-mail: api-h...@openoffice.apache.org
Re: [RELEASE]: propose RC4 on revision 1587478
On 04/17/2014 07:59 AM, Jürgen Schmidt wrote: Hi, I would like to propose a new RC3 based on revision 1587478 of our AOO410 release branch. Integrated fixe for https://issues.apache.org/ooo/show_bug.cgi?id=124682 The latest reported problems with digital signatures can be solved with setting an additional environment variable on non windows platforms. A wiki page will be created to describe in detail what the user have to do. and the release notes will be updated as well. For now you can view issue https://issues.apache.org/ooo/show_bug.cgi?id=124701 for some details. I would like to invite everybody with valid certificates to check and test this feature in detail and give us feedback. Juergen +1 for RC4 based on these issues. - To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional commands, e-mail: dev-h...@openoffice.apache.org -- - MzK Life is either a daring adventure, or nothing. -- Helen Keller - To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional commands, e-mail: dev-h...@openoffice.apache.org
Re: [RELEASE]: propose RC4 on revision 1587478
+1 Thanks for the hard work 2014-04-17 22:59 GMT+08:00 Jürgen Schmidt jogischm...@gmail.com: Hi, I would like to propose a new RC3 based on revision 1587478 of our AOO410 release branch. Integrated fixe for https://issues.apache.org/ooo/show_bug.cgi?id=124682 The latest reported problems with digital signatures can be solved with setting an additional environment variable on non windows platforms. A wiki page will be created to describe in detail what the user have to do. and the release notes will be updated as well. For now you can view issue https://issues.apache.org/ooo/show_bug.cgi?id=124701 for some details. I would like to invite everybody with valid certificates to check and test this feature in detail and give us feedback. Juergen - To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org For additional commands, e-mail: dev-h...@openoffice.apache.org
