[Libreoffice-bugs] [Bug 53254] New: UI: msi packages of 3.6.0 release not signed in contrast to recent months of 3.5.x msi packages?
bugzilla-daemon at freedesktop.org
bugzilla-daemon at freedesktop.org
Wed Aug 8 17:35:32 CEST 2012
https://bugs.freedesktop.org/show_bug.cgi?id=53254
Bug #: 53254
Summary: UI: msi packages of 3.6.0 release not signed in
contrast to recent months of 3.5.x msi packages?
Classification: Unclassified
Product: LibreOffice
Version: 3.6.0.3 rc
Platform: Other
OS/Version: All
Status: UNCONFIRMED
Status Whiteboard: BSA
Severity: normal
Priority: medium
Component: Installation
AssignedTo: libreoffice-bugs at lists.freedesktop.org
ReportedBy: abittner at abittner.de
msi packages of 3.6.0 release not signed in contrast to recent months of 3.5.x
msi packages?
Problem description:
the microsoft windows platform msi installer packages (tried main installer msi
and german-help pack installer) are NOT signed (authenticode digital signature)
any more, in contrast to the recent releases of 3.5.x branch
Steps to reproduce:
1. verify yourselves the msi (multi) package and the german-help package at
least of 3.6.x
http://download.documentfoundation.org/libreoffice/stable/3.6.0/win/x86/LibO_3.6.0_Win_x86_install_multi.msi
http://download.documentfoundation.org/libreoffice/stable/3.6.0/win/x86/LibO_3.6.0_Win_x86_helppack_de.msi
2. sigcheck -a filename
3. sigcheck -r filename
4. sigcheck -u filename
5. sigcheck = microsoft sysinternal tool from:
http://technet.microsoft.com/en-us/sysinternals/bb897441.aspx
Current behavior:
no signature found in these msi packages from 3.6.0
but good signature from documentfoundation found for 3.5.x packages at least
3.5.4
Expected behavior:
compare with output WITH signatures of 3.5.x, e.g. 3.5.5 with sigcheck
C:>sigcheck -a -r -h -m -i "C:\LibO_3.5.5_Win_x86_helppack_de.msi"
Sigcheck v1.71 - File version and signature viewer
Copyright (C) 2004-2010 Mark Russinovich
Sysinternals - www.sysinternals.com
C:\desktop\LibO_3.5.5_Win_x86_helppack_de.msi:
Verified: Signed
Catalog: C:\desktop\LibO_3.5.5_
Win_x86_helppack_de.msi
Signers:
The Document Foundation
StartCom Class 2 Primary Intermediate Object CA
StartCom Certification Authority
Signing date: 17:31 08.08.2012
Publisher: n/a
Description: n/a
Product: n/a
Version: n/a
File version: n/a
Strong Name: Unsigned
Original Name: n/a
Internal Name: n/a
Copyright: n/a
Comments: n/a
MD5: e8e1cdb3491c5103abed37d0e51ef87e
SHA1: d1a5d713d9461a4e88cc933a7b878a18f56da6f4
SHA256:
9de696e3ca6c40fe3b14fd81083cc87526de514d95de990e72e10678e835a570
C:>sigcheck -a -r -h -m -i "C:\LibO_3.5.5_Win_x86_install_multi.msi"
Sigcheck v1.71 - File version and signature viewer
Copyright (C) 2004-2010 Mark Russinovich
Sysinternals - www.sysinternals.com
C:\LibO_3.5.5_Win_x86_install_multi.msi:
Verified: Signed
Catalog: C:\desktop\LibO_3.5.5_
Win_x86_install_multi.msi
Signers:
The Document Foundation
StartCom Class 2 Primary Intermediate Object CA
StartCom Certification Authority
Signing date: 17:32 08.08.2012
Publisher: n/a
Description: n/a
Product: n/a
Version: n/a
File version: n/a
Strong Name: Unsigned
Original Name: n/a
Internal Name: n/a
Copyright: n/a
Comments: n/a
MD5: fe7f09caaedd263e590d9c6316cc30c8
SHA1: 5bf6bad4f10ad621f4588b9bab5a5ba2a6208322
SHA256:
2bf3643367e41e10b0c2947a39688a6ec5588ba8c6b1936819e1274cf02a052b
Platform (if different from the browser):
windows xp 32bit, professional, sp3
Browser: Mozilla/5.0 (Windows NT 5.1; rv:14.0) Gecko/20100101 Firefox/14.0.1
--
Configure bugmail: https://bugs.freedesktop.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
More information about the Libreoffice-bugs
mailing list