[Libreoffice-bugs] [Bug 136821] New: Wrong "Signed By" Information on Digital Signature Information Dialog

[bugzilla-daemon at bugs.documentfoundation.org]

https://bugs.documentfoundation.org/show_bug.cgi?id=136821

            Bug ID: 136821
           Summary: Wrong "Signed By" Information on Digital Signature
                    Information Dialog
           Product: LibreOffice
           Version: 6.4.6.2 release
          Hardware: All
                OS: All
            Status: UNCONFIRMED
          Severity: normal
          Priority: medium
         Component: LibreOffice
          Assignee: libreoffice-bugs at lists.freedesktop.org
          Reporter: diego.garzon at netco.la

Description:
When I add a new digital signature to a docx file using an external tool and 
then add another digital certificate to the signature xml file (apart from the
signer's certificate) Libreoffice apparently shows the last certificate's owner
information in the signed by field instead of the actual signer's information.
Please check screenshots attached.

Steps to Reproduce:
1. Add a digital signature to an existing docx file.
2. Open the file with an archive file manager (in my case winrar)
3. Modify the sig1.xml file located on _xmlsignatures folder by adding a new
<X509Certificate> tag with any base64 encoded digital certificate
4. Open the edited file on Libreoffice
5. Open the signature details dialog


Actual Results:
You will see the signed by column populated with the information from the last
certificate added manually. This shouldn't happen or else anyone can
impersonate a valid user .

Expected Results:
You should see the signed by column populated with the information from the
actual signer.The software should search for the signer certificate and when
found populate this information on the signed by column


Reproducible: Always


User Profile Reset: No



Additional Info:
Versión: 6.4.6.2 (x64)
Id. de compilación: 0ce51a4fd21bff07a5c061082cc82c5ed232f115
Subprocs. CPU: 12; SO: Windows 10.0 Build 17763; Repres. IU: predet.; VCL: win; 
Configuración regional: es-CO (es_CO); Idioma de IU: es-ES
Calc: threaded

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20200916/cebe0edb/attachment-0001.htm>