Re: Trusted certificates in LibreOffice 6.3

[Kaleun]

Kaleun wrote
> Do you know how I can tell Windows that this certificate can be trusted? 

Ah, I found out. I had to install the certificate a second time in my MS
certificate store under "Trusted Root Certification Authorities" :)

Greetings

Steve



--
Sent from: 
http://document-foundation-mail-archive.969070.n3.nabble.com/Dev-f1639786.html
___
LibreOffice mailing list
LibreOffice@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice

Re: Trusted certificates in LibreOffice 6.3

[Kaleun]

Miklos Vajna-6 wrote
> Similarly to the nss backend, the xmlsec-mscng keys manager is based on
> the simple keys store from xmlsec core. If keys are not found in the
> simple keys store, then the MS Certificate store (the "MY" store by
> default, visible as Personal -> Certificates in certmgr.msc) is used to
> look up keys.

That works. My self-created certificate is displayed in my MS certificate
store under "My certificates". The certificate is also displayed in
LibreOffice and I can successfully sign with this certificate.


Miklos Vajna-6 wrote
> If the certificate is trusted there, LO is supposed to trust it as well.

I think that's exactly the problem. Do you know how I can tell Windows that
this certificate can be trusted?

Greetings

Steve




--
Sent from: 
http://document-foundation-mail-archive.969070.n3.nabble.com/Dev-f1639786.html
___
LibreOffice mailing list
LibreOffice@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice

Re: XML Schema Definition (XSD) for documentsignatures.xml

[Kaleun]

Hi Miklos,


Miklos Vajna-6 wrote
> Probably not, given that there is a
> schema/odf1.2/OpenDocument-v1.X-os-dsig-schema.rng schema for that file
> in the ODF spec.

Thanks for the note, I found the file in this   directory
  .


Miklos Vajna-6 wrote
> Are you interested in fixing this yourself, i.e. do you
> need code pointers where to look?

Sounds interesting, but first I have to write my master's thesis^^

Regards

Steve



--
Sent from: 
http://document-foundation-mail-archive.969070.n3.nabble.com/Dev-f1639786.html
___
LibreOffice mailing list
LibreOffice@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice

Re: Signature process in LibreOffice 6.3

[Kaleun]

Hi Oliver,


Oliver Brinzing wrote
> you added a new file into the zip package *after* signing the document.

Yeah, thats correct.


Oliver Brinzing wrote
> [...] LO checks all files inside the zip package during opening
> and if it finds a changed file or a file which is not listed in
> "documentsignatures.xml" it will
> invalidate the signature. 

Perhaps. As a result, LibreOffice does not only use the XML signatures but
also checks additional things. Is that correct?

Regards

Steve



--
Sent from: 
http://document-foundation-mail-archive.969070.n3.nabble.com/Dev-f1639786.html
___
LibreOffice mailing list
LibreOffice@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice