[Libreoffice-bugs] [Bug 119331] New: Certificate added via Signature Line considered invalid if document is saved with password

[bugzilla-daemon at bugs.documentfoundation.org]

https://bugs.documentfoundation.org/show_bug.cgi?id=119331

            Bug ID: 119331
           Summary: Certificate added via Signature Line considered
                    invalid if document is saved with password
           Product: LibreOffice
           Version: 6.2.0.0.alpha0+ Master
          Hardware: x86-64 (AMD64)
                OS: Linux (All)
            Status: UNCONFIRMED
          Severity: normal
          Priority: medium
         Component: LibreOffice
          Assignee: libreoffice-bugs at lists.freedesktop.org
          Reporter: dominic at dwalden.co.uk
            Blocks: 105605

_Description_

If a LibreOffice Writer or Calc document is saved with a password, and you use
a Signature Line to add a digital signature/certificate, the certificate is
considered invalid.

The same certificate is considered valid when added to a non-password saved
document.

It is also possible to add it via File > Digital Signatures, in which case it
is considered valid.

As a note, so far I have only tested certificates generated by GnuPG with and
without passwords. When attempting to add a password protected certificate via
the Signature Line I am not asked for a password.

_Steps to Reproduce_

Make sure you have at least one (valid) certificate available.

1. Create a new Writer or Calc document
2. Insert > Signature Line
3. Fill in the dialog and press ok
4. Save the document with a password (in the Save As dialog/filesystem
navigator, at the bottom left should be an option "Save with password")
5. Right-click Signature Line and select "Sign Signature Line"
6. Type in a name, click "Select Certificate" and select a certificate
7. Click Sign

_Actual Results_

You will immediately be told the certificate is invalid.

_Expected Results_

Should be prompted for password (if necessary). Certificate should be added to
the document and it should be considered valid.


Reproducible: Always

User Profile Reset: Yes


_Additional Info_
Version: 6.2.0.0.alpha0+
Build ID: 380d0fda99ff664de8443cfc33c7c86bca18134c
CPU threads: 2; OS: Linux 3.16; UI render: default; VCL: gtk2; 
TinderBox: Linux-rpm_deb-x86_64 at 70-TDF, Branch:master, Time:
2018-08-16_22:45:19
Locale: en-GB (en_GB.UTF-8); Calc: threaded

My OS is Debian 8.10.


Referenced Bugs:

https://bugs.documentfoundation.org/show_bug.cgi?id=105605
[Bug 105605] [META] Digital signatures bugs and enhancements
-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20180817/c94b63ed/attachment.html>