<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>Forwarding to the devloper list<br>
</p>
<div class="moz-forward-container"><br>
-------- Weitergeleitete Nachricht --------
<table class="moz-email-headers-table" cellspacing="0"
cellpadding="0" border="0">
<tbody>
<tr>
<th nowrap="nowrap" valign="BASELINE" align="RIGHT">Betreff:
</th>
<td>[libreoffice-users] FIPS 140-2 support with
password-protected docs</td>
</tr>
<tr>
<th nowrap="nowrap" valign="BASELINE" align="RIGHT">Datum: </th>
<td>Thu, 3 Jan 2019 12:08:55 -0500</td>
</tr>
<tr>
<th nowrap="nowrap" valign="BASELINE" align="RIGHT">Von: </th>
<td>Sean <a class="moz-txt-link-rfc2396E" href="mailto:smalder73@gmail.com"><smalder73@gmail.com></a></td>
</tr>
<tr>
<th nowrap="nowrap" valign="BASELINE" align="RIGHT">An: </th>
<td><a class="moz-txt-link-abbreviated" href="mailto:users@global.libreoffice.org">users@global.libreoffice.org</a></td>
</tr>
</tbody>
</table>
<br>
<br>
<pre>Hi, I just joined the list. I'm a Linux system admin with (among
other things) about 20 CentOS 7.6 desktops under my wing. Yesterday I
posted a question to the ASK site [1], because one of my users had
issues with password-protected docs after getting his new laptop. I
now have confirmed that this issue is related to our desktops being
FIPS enabled ( kernel/grub2 with fips=1 ).
I joined the list to further this discussion and determine if I should
file a bug report or what. The gist of the problem is that when FIPS
is enabled, a user can encrypt a document, but not decrypt the
document, and LO reports that the password provided was incorrect. I
am not very technical with how LO does password protection, but this
seems like an bug. FIPS causes the system to disable non-compliant
ciphers and algorithms, but I'm guessing that there is some piece of
code that's calling a non-compliant function only on decrypt, and not
on encrypt...or (less likely) the encrypt side isn't throwing an error
when it should.
Would this be the right place to hold such a discussion?
[1] <a class="moz-txt-link-freetext" href="https://ask.libreoffice.org/en/question/178069/problems-decrypting-documents-version-5361-19el7/">https://ask.libreoffice.org/en/question/178069/problems-decrypting-documents-version-5361-19el7/</a>
</pre>
</div>
</body>
</html>