[Libreoffice-bugs] [Bug 106854] Unable to digitally sign exported PDF with particular certificate

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=106854

Miklos Vajna  changed:

   What|Removed |Added

 Status|NEW |ASSIGNED
   Assignee|libreoffice-b...@lists.free |vmik...@collabora.co.uk
   |desktop.org |

--- Comment #20 from Miklos Vajna  ---
OK, let's misuse this bug to enable CNG by default. I'll close this when I flip
the default.

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 106854] Unable to digitally sign exported PDF with particular certificate

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=106854

--- Comment #19 from Gabor Kelemen  ---
Created attachment 143181
  --> https://bugs.documentfoundation.org/attachment.cgi?id=143181=edit
Example signed pdf from 6.2master made on Win7

Good news, doing 'set SVL_CRYPTO_CNG=1' in cmd and starting swriter resulted in
a successful signing of the attached file during export.

Running swriter from Explorer resulted in the same error message, so the
solution seems to be using the CNG backend.

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 106854] Unable to digitally sign exported PDF with particular certificate

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=106854

--- Comment #18 from Miklos Vajna  ---
Please set the platform, Linux/macOS and Windows crypto is set differently. It
would be also interesting to know if the Windows case improves if you start
soffice as

SVL_CRYPTO_CNG=1 instdir/program/soffice.exe

which opts in for CNG usage. I plan to make that the default in the next few
weeks. PDF signing with ECDSA key works for me in that mode.

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 106854] Unable to digitally sign exported PDF with particular certificate

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=106854

Timur  changed:

   What|Removed |Added

Summary|Unable to digitally sign|Unable to digitally sign
   |exported PDF|exported PDF with
   ||particular certificate

--- Comment #17 from Timur  ---
If nobody else reproduces this, I'm afraid it's up to you to find a cause and
justify this NEW status.

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 106854] Unable to digitally sign exported PDF

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=106854

Gabor Kelemen  changed:

   What|Removed |Added

 Status|NEEDINFO|NEW

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 106854] Unable to digitally sign exported PDF

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=106854

--- Comment #16 from Gabor Kelemen  ---
Created attachment 143169
  --> https://bugs.documentfoundation.org/attachment.cgi?id=143169=edit
Trying to sign with 6.2master and GOVCA example certificate

Still happens, but my hunch is that this particular cert I was given contains
something funny.

While testing bug #109180 I was able to digitally sign a PDF with the HW key of
my eID card, from the very same provider.

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 106854] Unable to digitally sign exported PDF

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=106854

--- Comment #15 from plebi...@tekimmo.com ---
The comment on CAcert certificate is a duplicate of bug 113560.

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 106854] Unable to digitally sign exported PDF

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=106854

--- Comment #14 from plebi...@tekimmo.com ---
Created attachment 139775
  --> https://bugs.documentfoundation.org/attachment.cgi?id=139775=edit
error message

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 106854] Unable to digitally sign exported PDF

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=106854

--- Comment #13 from plebi...@tekimmo.com ---
Created attachment 139774
  --> https://bugs.documentfoundation.org/attachment.cgi?id=139774=edit
export failure

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 106854] Unable to digitally sign exported PDF

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=106854

--- Comment #12 from plebi...@tekimmo.com ---
Created attachment 139773
  --> https://bugs.documentfoundation.org/attachment.cgi?id=139773=edit
tab digital signature

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 106854] Unable to digitally sign exported PDF

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=106854

--- Comment #11 from plebi...@tekimmo.com ---
I experience the problem with Win XP LO 5.4.5.1
When I try exporting an odt file to a pdf to sign with an CAcert certificate,
the signature process fails.

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 106854] Unable to digitally sign exported PDF

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=106854

--- Comment #10 from plebi...@tekimmo.com ---
Created attachment 139772
  --> https://bugs.documentfoundation.org/attachment.cgi?id=139772=edit
selecting a CAcert certificate

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 106854] Unable to digitally sign exported PDF

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=106854

Xisco Faulí  changed:

   What|Removed |Added

 Status|UNCONFIRMED |NEEDINFO
 Ever confirmed|0   |1

--- Comment #9 from Xisco Faulí  ---
(In reply to Xisco Faulí from comment #8)
> Hi Gabor,
> Do you still reproduce this issue?

I have set the bug's status to 'NEEDINFO'. Please change it back to
'UNCONFIRMED' if the bug is still present in the master build

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 106854] Unable to digitally sign exported PDF

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=106854

Xisco Faulí  changed:

   What|Removed |Added

 CC||xiscofa...@libreoffice.org

--- Comment #8 from Xisco Faulí  ---
Hi Gabor,
Do you still reproduce this issue?

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 106854] Unable to digitally sign exported PDF

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=106854

Cor Nouws  changed:

   What|Removed |Added

 CC||c...@nouenoff.nl

--- Comment #7 from Cor Nouws  ---
Does work for me in 5.0.4.3 on Windows 10-64 (6.19)

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 106854] Unable to digitally sign exported PDF

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=106854

--- Comment #6 from Timur  ---
(In reply to Gabor Kelemen from comment #0)

> I'm unable to digitally sign a PDF file on export in LO 5.3.1 Win7, while I
> can do it  in 5.3.1 on Ubuntu 14.04.
Please try with another Win comp. I can sign with Win 7 both 5.3. and master.

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 106854] Unable to digitally sign exported PDF

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=106854

--- Comment #5 from Miklos Vajna  ---
Oh, and I tested with 70fe321f3cadfb4c71bd2948d3b0651ab50ff009 (master as of
yesterday morning).

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 106854] Unable to digitally sign exported PDF

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=106854

--- Comment #4 from Miklos Vajna  ---
I'm afraid you need to be more specific. Here is what I tried:

1) created a test key by running xmlsecurity/qa/create-certs/create-certs.sh
and importing the Alice user on Windows 7
2) created a new writer document, exported it to PDF, and on the digital
signatures tab I selected the Alice key
3) The export finished without any errors
4) Opening the file in Draw I get the infobar about the signature being valid.

So at least this scenario works fine.

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 106854] Unable to digitally sign exported PDF

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=106854

--- Comment #3 from Gabor Kelemen  ---
Created attachment 133595
  --> https://bugs.documentfoundation.org/attachment.cgi?id=133595=edit
LO 5.4 after opening a simple pdf for signing

I tested it with LO 5.4 beta1 on Windows 7 and now the usual yellow infobar
does not appear in Draw, only the PDF opens.

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 106854] Unable to digitally sign exported PDF

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=106854

--- Comment #2 from Gabor Kelemen  ---
Created attachment 132256
  --> https://bugs.documentfoundation.org/attachment.cgi?id=132256=edit
The same odt exported to PDF and signed with the same certificate

This was made with LO 5.2.3 - I'm unable to reproduce this result with 5.3.1.

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 106854] Unable to digitally sign exported PDF

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=106854

--- Comment #1 from Gabor Kelemen  ---
Created attachment 132255
  --> https://bugs.documentfoundation.org/attachment.cgi?id=132255=edit
Test odt file signed with the same certificate that fails to sign the exported
PDF

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs