https://bugs.freedesktop.org/show_bug.cgi?id=78820
Priority: medium Bug ID: 78820 Assignee: libreoffice-bugs@lists.freedesktop.org Summary: document signing should only make use of signing certificates Severity: major Classification: Unclassified OS: All Reporter: zvr+freedesk...@zvr.gr Hardware: All Status: UNCONFIRMED Version: 4.2.4.2 release Component: framework Product: LibreOffice When digitally signing a document, the user is presented with a list of certificates to choose from. This list should not contain certificates that have an express purpose of encryption (not signing). The bug seems to be in the function CertificateChooser::ImplInitialize() in xmlsecurity/source/dialogs/certificatechooser.cxx, which loops and inserts all the available certificates, without checking their purpose. I apologize for not being familiar enough with the security::XCertificate framework to contribute a fix. -- You are receiving this mail because: You are the assignee for the bug.
_______________________________________________ Libreoffice-bugs mailing list Libreoffice-bugs@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs