[Libreoffice-bugs] [Bug 135604] Invalid multiple XAdES Digital Signature in LibreOffice 7.0
https://bugs.documentfoundation.org/show_bug.cgi?id=135604 --- Comment #18 from Andrii Melashchenko --- It's fixed Thx Tomaž -- You are receiving this mail because: You are the assignee for the bug.
[Libreoffice-bugs] [Bug 135604] Invalid multiple XAdES Digital Signature in LibreOffice 7.0
https://bugs.documentfoundation.org/show_bug.cgi?id=135604 Gabor Kelemen (allotropia) changed: What|Removed |Added Resolution|--- |FIXED Status|UNCONFIRMED |RESOLVED CC||kelem...@ubuntu.com, ||qui...@gmail.com --- Comment #17 from Gabor Kelemen (allotropia) --- Thanks Tomaž for fixing this! -- You are receiving this mail because: You are the assignee for the bug.
[Libreoffice-bugs] [Bug 135604] Invalid multiple XAdES Digital Signature in LibreOffice 7.0
https://bugs.documentfoundation.org/show_bug.cgi?id=135604 --- Comment #16 from Gabor Kelemen (allotropia) --- Created attachment 175994 --> https://bugs.documentfoundation.org/attachment.cgi?id=175994=edit DSS report on the bad signed file -- You are receiving this mail because: You are the assignee for the bug.
[Libreoffice-bugs] [Bug 135604] Invalid multiple XAdES Digital Signature in LibreOffice 7.0
https://bugs.documentfoundation.org/show_bug.cgi?id=135604 --- Comment #15 from Gabor Kelemen (allotropia) --- Created attachment 175993 --> https://bugs.documentfoundation.org/attachment.cgi?id=175993=edit The example file with 3 bad signatures This seems to have been fixed by: https://git.libreoffice.org/core/+/fd5463343ab7f784070f1ab87a345eed20803d07%5E%21 author Tomaž Vajngerl Wed Oct 27 14:15:17 2021 +0200 committer Tomaž VajngerlThu Oct 28 08:49:57 2021 +0200 xmlsec: signing the document fails the 3rd time (invalid signature) The commit right before this produced the attached file, which fails completely the DSS check. -- You are receiving this mail because: You are the assignee for the bug.
[Libreoffice-bugs] [Bug 135604] Invalid multiple XAdES Digital Signature in LibreOffice 7.0
https://bugs.documentfoundation.org/show_bug.cgi?id=135604 --- Comment #14 from Andrii Melashchenko --- (In reply to Gabor Kelemen (allotropia) from comment #13) > Created attachment 175992 [details] > DSS report on the signed file > > Seems to work fine with current master: > > Version: 7.3.0.0.alpha0+ / LibreOffice Community > Build ID: 5b0ae3b59cd2cccfb72d991657366eb2a69bff49 > CPU threads: 8; OS: Linux 5.4; UI render: default; VCL: gtk3 > Locale: hu-HU (hu_HU.UTF-8); UI: en-US > Calc: threaded Thank you! I'll test it and let you know the result with a valid EU DSS signature, I mean signature certificate issued with QTSP -- You are receiving this mail because: You are the assignee for the bug.
[Libreoffice-bugs] [Bug 135604] Invalid multiple XAdES Digital Signature in LibreOffice 7.0
https://bugs.documentfoundation.org/show_bug.cgi?id=135604 --- Comment #13 from Gabor Kelemen (allotropia) --- Created attachment 175992 --> https://bugs.documentfoundation.org/attachment.cgi?id=175992=edit DSS report on the signed file Seems to work fine with current master: Version: 7.3.0.0.alpha0+ / LibreOffice Community Build ID: 5b0ae3b59cd2cccfb72d991657366eb2a69bff49 CPU threads: 8; OS: Linux 5.4; UI render: default; VCL: gtk3 Locale: hu-HU (hu_HU.UTF-8); UI: en-US Calc: threaded -- You are receiving this mail because: You are the assignee for the bug.
[Libreoffice-bugs] [Bug 135604] Invalid multiple XAdES Digital Signature in LibreOffice 7.0
https://bugs.documentfoundation.org/show_bug.cgi?id=135604 --- Comment #12 from Gabor Kelemen (allotropia) --- Created attachment 175991 --> https://bugs.documentfoundation.org/attachment.cgi?id=175991=edit The previous document signed twice with two different X.509 certificates -- You are receiving this mail because: You are the assignee for the bug.
[Libreoffice-bugs] [Bug 135604] Invalid multiple XAdES Digital Signature in LibreOffice 7.0
https://bugs.documentfoundation.org/show_bug.cgi?id=135604 --- Comment #11 from Gabor Kelemen (allotropia) --- Created attachment 175990 --> https://bugs.documentfoundation.org/attachment.cgi?id=175990=edit Example file with text and no signature -- You are receiving this mail because: You are the assignee for the bug.
[Libreoffice-bugs] [Bug 135604] Invalid multiple XAdES Digital Signature in LibreOffice 7.0
https://bugs.documentfoundation.org/show_bug.cgi?id=135604 --- Comment #10 from Andrii Melashchenko --- Up -- You are receiving this mail because: You are the assignee for the bug.
[Libreoffice-bugs] [Bug 135604] Invalid multiple XAdES Digital Signature in LibreOffice 7.0
https://bugs.documentfoundation.org/show_bug.cgi?id=135604 Dieter changed: What|Removed |Added Blocks||105605 See Also||https://bugs.documentfounda ||tion.org/show_bug.cgi?id=10 ||5856 Whiteboard| QA:needsComment| CC||dgp-m...@gmx.de --- Comment #9 from Dieter --- I'm not an expert with digital signatures, but bug 105856 might be realted to the bug you reported. Might be worth to have a look at it. Referenced Bugs: https://bugs.documentfoundation.org/show_bug.cgi?id=105605 [Bug 105605] [META] Digital signatures bugs and enhancements -- You are receiving this mail because: You are the assignee for the bug.___ Libreoffice-bugs mailing list Libreoffice-bugs@lists.freedesktop.org https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs
[Libreoffice-bugs] [Bug 135604] Invalid multiple XAdES Digital Signature in LibreOffice 7.0
https://bugs.documentfoundation.org/show_bug.cgi?id=135604 --- Comment #8 from Andrii Melashchenko --- UP Is there way to fund resolution of this bug? -- You are receiving this mail because: You are the assignee for the bug.___ Libreoffice-bugs mailing list Libreoffice-bugs@lists.freedesktop.org https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs
[Libreoffice-bugs] [Bug 135604] Invalid multiple XAdES Digital Signature in LibreOffice 7.0
https://bugs.documentfoundation.org/show_bug.cgi?id=135604 --- Comment #7 from Andrii Melashchenko --- FYI There is possible issue with ECDSA in Microsoft Crypto libes, it's a theory now. More details - https://ec.europa.eu/cefdigital/tracker/browse/DSS-2191?focusedCommentId=95743=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-95743 -- You are receiving this mail because: You are the assignee for the bug.___ Libreoffice-bugs mailing list Libreoffice-bugs@lists.freedesktop.org https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs
[Libreoffice-bugs] [Bug 135604] Invalid multiple XAdES Digital Signature in LibreOffice 7.0
https://bugs.documentfoundation.org/show_bug.cgi?id=135604 --- Comment #6 from Andrii Melashchenko --- Can I help with comments? -- You are receiving this mail because: You are the assignee for the bug.___ Libreoffice-bugs mailing list Libreoffice-bugs@lists.freedesktop.org https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs
[Libreoffice-bugs] [Bug 135604] Invalid multiple XAdES Digital Signature in LibreOffice 7.0
https://bugs.documentfoundation.org/show_bug.cgi?id=135604 QA Administrators changed: What|Removed |Added Whiteboard|| QA:needsComment -- You are receiving this mail because: You are the assignee for the bug.___ Libreoffice-bugs mailing list Libreoffice-bugs@lists.freedesktop.org https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs
[Libreoffice-bugs] [Bug 135604] Invalid multiple XAdES Digital Signature in LibreOffice 7.0
https://bugs.documentfoundation.org/show_bug.cgi?id=135604 --- Comment #5 from Andrii Melashchenko --- My assumption was proven by DSS team: their comment The problem is that both signatures in your file contain references to SignedProperties with the same Id "idSignedProperties". Conversely, the element with the Id "idSignedProperties" itself is present in the file two times. This is not valid XML structure and an identifier cannot be duplicated in a file. Because of this the DSS validation correctly fails with the result SIGNED_DATA_NOT_FOUND (unable to determine the referenced object). By default DSS creates a unique deterministic identifier for each signed element, including SignedProperties. This allows avoiding of conflicts between references. In the attachment you can find an example of a valid double-signed ODT document created with DSS. I hope this clarifies. Best regards, Aleksandr. -- You are receiving this mail because: You are the assignee for the bug.___ Libreoffice-bugs mailing list Libreoffice-bugs@lists.freedesktop.org https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs
[Libreoffice-bugs] [Bug 135604] Invalid multiple XAdES Digital Signature in LibreOffice 7.0
https://bugs.documentfoundation.org/show_bug.cgi?id=135604 --- Comment #4 from Andrii Melashchenko --- I made request to DSS lib tech team to figure out the issue - https://ec.europa.eu/cefdigital/tracker/browse/DSS-2183 -- You are receiving this mail because: You are the assignee for the bug.___ Libreoffice-bugs mailing list Libreoffice-bugs@lists.freedesktop.org https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs
[Libreoffice-bugs] [Bug 135604] Invalid multiple XAdES Digital Signature in LibreOffice 7.0
https://bugs.documentfoundation.org/show_bug.cgi?id=135604 Andrii Melashchenko changed: What|Removed |Added Summary|Invalid multiple XdES |Invalid multiple XAdES |Digital Signature in|Digital Signature in |LibreOffice 7.0 |LibreOffice 7.0 -- You are receiving this mail because: You are the assignee for the bug.___ Libreoffice-bugs mailing list Libreoffice-bugs@lists.freedesktop.org https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs
