[Libreoffice-bugs] [Bug 103054] Using certificate by StartCom is somewhat uncomfortable

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=103054

Buovjaga  changed:

   What|Removed |Added

 Status|NEW |RESOLVED
 Resolution|--- |FIXED

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 103054] Using certificate by StartCom is somewhat uncomfortable

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=103054
Bug 103054 depends on bug 107187, which changed state.

Bug 107187 Summary: Windows Installer package should replacing the certificate
https://bugs.documentfoundation.org/show_bug.cgi?id=107187

   What|Removed |Added

 Status|UNCONFIRMED |RESOLVED
 Resolution|--- |FIXED

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 103054] Using certificate by StartCom is somewhat uncomfortable

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=103054

Volga  changed:

   What|Removed |Added

 Depends on||107187
 OS|Windows (All)   |All


Referenced Bugs:

https://bugs.documentfoundation.org/show_bug.cgi?id=107187
[Bug 107187] Windows Installer package should replacing the certificate
-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 103054] Using certificate by StartCom is somewhat uncomfortable

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=103054

--- Comment #12 from Volga  ---
(In reply to Buovjaga from comment #11)
> (In reply to Volga from comment #10)
> > Recently Mozilla, Google and Apple decided not trust StartCom and WoSign,
> > and RevokeChinaCerts script also cause Windows prevent install LibreOffice.
> > To avoid that, I guess getting a new certificate from Let's Encrypt.
> 
> Here is a ticket for the web stuff:
> https://redmine.documentfoundation.org/issues/2115

OK, I can see the effect now, but the binariy distributions (as in
http://dev-builds.libreoffice.org/pre-releases/win/x86_64/) still using this
cert.

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 103054] Using certificate by StartCom is somewhat uncomfortable

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=103054

--- Comment #11 from Buovjaga  ---
(In reply to Volga from comment #10)
> Recently Mozilla, Google and Apple decided not trust StartCom and WoSign,
> and RevokeChinaCerts script also cause Windows prevent install LibreOffice.
> To avoid that, I guess getting a new certificate from Let's Encrypt.

Here is a ticket for the web stuff:
https://redmine.documentfoundation.org/issues/2115

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 103054] Using certificate by StartCom is somewhat uncomfortable

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=103054

--- Comment #10 from Volga  ---
Recently Mozilla, Google and Apple decided not trust StartCom and WoSign, and
RevokeChinaCerts script also cause Windows prevent install LibreOffice. To
avoid that, I guess getting a new certificate from Let's Encrypt.

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 103054] Using certificate by StartCom is somewhat uncomfortable

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=103054

--- Comment #9 from General Kutuzov  ---
I have noticed that some Chinese netizen trend to banning the who certs by
StartCom and WoSign. On this topic I found the following comments:

https://www.v2ex.com/t/317082

等不到 56 了,已经自己手动全拉黑了
Don't waiting for (Chrome) 56.o, (I am) already banned all of them by myself

一样，用的那个 RevokeChinaCerts 脚本
The same as me, uses RevokeChinaCerts script

Later I found a script "RevokeChinaCerts" at GitHub
https://github.com/chengr28/RevokeChinaCerts

This tool can be used to revoke the whole certificates published from PR China,
I found StartCom and its shareholder is included in there. If you use it, you
will failed to install LibreOffice on Windows. To avoid that, I guess LO should
resigned the package without StartCom.

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 103054] Using certificate by StartCom is somewhat uncomfortable

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=103054

--- Comment #8 from General Kutuzov  ---
Google Chrome have already take action since 56.0.

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 103054] Using certificate by StartCom is somewhat uncomfortable

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=103054

--- Comment #7 from Buovjaga  ---
(In reply to General Kutuzov from comment #5)
> (In reply to Aron Budea from comment #4)
> > This was discussed at the most recent ESC meeting:
> > https://lists.freedesktop.org/archives/libreoffice/2016-October/075584.html
> 
> Good, I hope you can take action soon.

Notice, TDF won't take action until their certs expire, UNLESS this scenario
plays out:
"If additional back-dating is discovered (by any means) to circumvent this
control, then Mozilla will immediately and permanently revoke trust in the
affected roots."

Then they obviously have to take action.

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 103054] Using certificate by StartCom is somewhat uncomfortable

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=103054

--- Comment #6 from General Kutuzov  ---
Mozilla announced they started distrusting WoSign and StartCom certificates,
that would affect your website.

https://blog.mozilla.org/security/2016/10/24/distrusting-new-wosign-and-startcom-certificates/

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 103054] Using certificate by StartCom is somewhat uncomfortable

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=103054

--- Comment #5 from General Kutuzov  ---
(In reply to Aron Budea from comment #4)
> This was discussed at the most recent ESC meeting:
> https://lists.freedesktop.org/archives/libreoffice/2016-October/075584.html

Good, I hope you can take action soon.

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 103054] Using certificate by StartCom is somewhat uncomfortable

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=103054

Aron Budea  changed:

   What|Removed |Added

   Keywords||security
 CC||ba...@caesar.elte.hu

--- Comment #4 from Aron Budea  ---
This was discussed at the most recent ESC meeting:
https://lists.freedesktop.org/archives/libreoffice/2016-October/075584.html

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 103054] Using certificate by StartCom is somewhat uncomfortable

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=103054

--- Comment #3 from General Kutuzov  ---
Mozilla have published a report on this:
https://docs.google.com/document/d/1C6BlmbeQfn4a9zydVi2UvjBGv6szuSB4sMYUcVrR8vQ/preview#

And they intended to not trusted StartCom and WoSign. I think this should be
paying attention by not only LibreOffice developers but also the whole TDF
members.

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 103054] Using certificate by StartCom is somewhat uncomfortable

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=103054

--- Comment #2 from Buovjaga  ---
Discussion on Mozilla security list:
https://groups.google.com/forum/#!topic/mozilla.dev.security.policy/1XI3Y7PJ1Uc

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 103054] Using certificate by StartCom is somewhat uncomfortable

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=103054

Buovjaga  changed:

   What|Removed |Added

 Status|UNCONFIRMED |NEW
 CC||todven...@suomi24.fi
 Ever confirmed|0   |1

--- Comment #1 from Buovjaga  ---
Yes -> NEW

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs