To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=54350
                  Issue #:|54350
                  Summary:|securiy::DocumentDigitalSignature: no certificate
                          |information when signature not valid
                Component:|xml
                  Version:|680m125
                 Platform:|All
                      URL:|
               OS/Version:|All
                   Status:|NEW
        Status whiteboard:|
                 Keywords:|
               Resolution:|
               Issue type:|DEFECT
                 Priority:|P3
             Subcomponent:|code
              Assigned to:|mt
              Reported by:|jl





------- Additional comments from [EMAIL PROTECTED] Thu Sep  8 03:08:36 -0700 
2005 -------
The function
com::sun::star::security::XDocumentDigitalSignatures::verifyPackageSignatures
returns a 
sequence< com::sun::star::security::DocumentSignaturesInformation >

DocumentSignatures.Signer contains the XCertificate representing the signer.
However, if the validation of a signature fails then Signer is null although the
information is contained in the package. A user may still want to know WHO
signed the package even if the signature cannot be validated.

For example I modified the name of a file contained in the package. But in the
packagesignatures.xml file was still the original name. The implementation tries
to create a stream when it encounters a Reference tag in the
packagesignatures.xml. Because this file was not there, an exception was thrown
which prevented further processing of this file. That is, the data relevant for
the  X.509  certificate are not processed anymore.

---------------------------------------------------------------------
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to