[Libreoffice-bugs] [Bug 53254] New: UI: msi packages of 3.6.0 release not signed in contrast to recent months of 3.5.x msi packages?

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=53254

             Bug #: 53254
           Summary: UI: msi packages of 3.6.0 release not signed in
                    contrast to recent months of 3.5.x msi packages?
    Classification: Unclassified
           Product: LibreOffice
           Version: 3.6.0.3 rc
          Platform: Other
        OS/Version: All
            Status: UNCONFIRMED
 Status Whiteboard: BSA
          Severity: normal
          Priority: medium
         Component: Installation
        AssignedTo: libreoffice-bugs at lists.freedesktop.org
        ReportedBy: abittner at abittner.de


msi packages of 3.6.0 release not signed in contrast to recent months of 3.5.x
msi packages?

Problem description: 
the microsoft windows platform msi installer packages (tried main installer msi
and german-help pack installer) are NOT signed (authenticode digital signature)
any more, in contrast to the recent releases of 3.5.x branch

Steps to reproduce:
1. verify yourselves the msi (multi) package and the german-help package at
least of 3.6.x

http://download.documentfoundation.org/libreoffice/stable/3.6.0/win/x86/LibO_3.6.0_Win_x86_install_multi.msi

http://download.documentfoundation.org/libreoffice/stable/3.6.0/win/x86/LibO_3.6.0_Win_x86_helppack_de.msi
2. sigcheck -a filename
3. sigcheck -r filename
4. sigcheck -u filename
5. sigcheck = microsoft sysinternal tool from: 
http://technet.microsoft.com/en-us/sysinternals/bb897441.aspx

Current behavior:
no signature found in these msi packages from 3.6.0
but good signature from documentfoundation found for 3.5.x packages at least
3.5.4 
Expected behavior:


compare with output WITH signatures of 3.5.x, e.g. 3.5.5 with sigcheck

C:>sigcheck -a -r -h -m -i "C:\LibO_3.5.5_Win_x86_helppack_de.msi"

Sigcheck v1.71 - File version and signature viewer
Copyright (C) 2004-2010 Mark Russinovich
Sysinternals - www.sysinternals.com

C:\desktop\LibO_3.5.5_Win_x86_helppack_de.msi:

        Verified:       Signed
        Catalog:        C:\desktop\LibO_3.5.5_
Win_x86_helppack_de.msi
        Signers:
                The Document Foundation
                StartCom Class 2 Primary Intermediate Object CA
                StartCom Certification Authority
        Signing date:   17:31 08.08.2012
        Publisher:      n/a
        Description:    n/a
        Product:        n/a
        Version:        n/a
        File version:   n/a
        Strong Name:    Unsigned
        Original Name:  n/a
        Internal Name:  n/a
        Copyright:      n/a
        Comments:       n/a
        MD5:    e8e1cdb3491c5103abed37d0e51ef87e
        SHA1:   d1a5d713d9461a4e88cc933a7b878a18f56da6f4
        SHA256:
9de696e3ca6c40fe3b14fd81083cc87526de514d95de990e72e10678e835a570


C:>sigcheck -a -r -h -m -i "C:\LibO_3.5.5_Win_x86_install_multi.msi"

Sigcheck v1.71 - File version and signature viewer
Copyright (C) 2004-2010 Mark Russinovich
Sysinternals - www.sysinternals.com

C:\LibO_3.5.5_Win_x86_install_multi.msi:
        Verified:       Signed
        Catalog:        C:\desktop\LibO_3.5.5_
Win_x86_install_multi.msi
        Signers:
                The Document Foundation
                StartCom Class 2 Primary Intermediate Object CA
                StartCom Certification Authority
        Signing date:   17:32 08.08.2012
        Publisher:      n/a
        Description:    n/a
        Product:        n/a
        Version:        n/a
        File version:   n/a
        Strong Name:    Unsigned
        Original Name:  n/a
        Internal Name:  n/a
        Copyright:      n/a
        Comments:       n/a
        MD5:    fe7f09caaedd263e590d9c6316cc30c8
        SHA1:   5bf6bad4f10ad621f4588b9bab5a5ba2a6208322
        SHA256:
2bf3643367e41e10b0c2947a39688a6ec5588ba8c6b1936819e1274cf02a052b

Platform (if different from the browser): 
windows xp 32bit, professional, sp3

Browser: Mozilla/5.0 (Windows NT 5.1; rv:14.0) Gecko/20100101 Firefox/14.0.1

-- 
Configure bugmail: https://bugs.freedesktop.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.