[Libreoffice-bugs] [Bug 129311] Don't ask to add a trusted macro signature, if trusted macro signatures are read-only
bugzilla-daemon at bugs.documentfoundation.org
bugzilla-daemon at bugs.documentfoundation.org
Thu Dec 19 18:56:41 UTC 2019
https://bugs.documentfoundation.org/show_bug.cgi?id=129311
--- Comment #7 from Oliver Brinzing <oliver.brinzing at gmx.de> ---
(In reply to Commit Notification from comment #6)
> The document is opened without enabled macros. Eventually LO even displays
> some message box informing the user about the untrusted signature and the
> therefore disabled macros.
> Affected users are encouraged to test the fix and report feedback.
checked with:
Version: 6.5.0.0.alpha0+ (x64)
Build ID: 4b7b6993134a48c850608c758f7b7283bed27fec
CPU threads: 4; OS: Windows 10.0 Build 18363; UI render: default; VCL: win;
Locale: de-DE (de_DE); UI-Language: en-US
Calc: threaded
I was not able to make it work with the attached *.oxt (certificate did not
appear in "Trusted Sources") but using an own certificate worked for me:
1. With macro Security "High" and MacroSecurityLevel finalized="true"
a) Macro enabled:
- opened signed document/template
Document changes will not affect macro signing as long as macro
itself is not changed. The signature of a modified macros is lost
when you save the document.
b) Macro disabled:
- opened unsigned document
- opened signed document (signed with an unknown certificate) *)
2. With macro Security "Medium"
a) Macro enabled:
- opened signed document/template
b) User is able to enabled/disable macro:
- opened unsigned document
- opened signed document (signed with an unknown certificate) *)
*) With MacroSecurityLevel finalized="false" user is able to add the
unknown certificate to the "Trusted Source" list.
--
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20191219/46cd78e8/attachment.htm>
More information about the Libreoffice-bugs
mailing list