Apache OpenOffice (AOO) Bugzilla – Full Text Issue Listing
|Summary:||no password for certificate asked when signing digitally my document|
|Component:||ui||Assignee:||AOO issues mailing list <issues>|
|Status:||CONFIRMED ---||QA Contact:|
|Priority:||P3||CC:||cno, issues, kent|
|Issue Type:||DEFECT||Latest Confirmation in:||---|
Description snoff 2009-07-31 12:10:44 UTC
Hi, I was studing the ability of digitally signed document in my office. I had made a certificate, and installed it with high level of security (so my computer has to ask me my password every time i use the certificate to sign my documents). It works very fine with softxares like PDFCreator 0.9.8, Autodesk Autocad Map 2005, and my password is asked every time when i sign a document. Whereas, i tested my certificate on OpenOffice 3.1 (in French, i'm sorry if my English is not well, but I'm not perfect, i'm just French). Where i use the option "Fichier / signature numÃ©rique" (File / digital signing ???), i select my certificate, and OpenOffice works, but never ask me the password to access my certificate. If this behaviour is confirmed, it can be a hole in security, because my computer can be used by co-workers, and they just have to select my certificate to sign a document (in place of myself) as if i signed it.
Comment 1 snoff 2009-07-31 12:17:56 UTC
Created attachment 63884 [details] location of digital signing in french version of Writer
Comment 2 snoff 2009-07-31 12:18:10 UTC
Created attachment 63885 [details] location of digital signing in french version of Writer
Comment 3 snoff 2009-07-31 12:19:30 UTC
Created attachment 63886 [details] stage 2 I select my certificate
Comment 4 snoff 2009-07-31 12:21:11 UTC
Created attachment 63887 [details] stage 3 I should enter my password at this time, but no way to do it ??
Comment 5 snoff 2009-07-31 12:21:49 UTC
Created attachment 63888 [details] stage 4 without password my certificate is selected anyway
Comment 6 snoff 2009-07-31 12:22:32 UTC
Created attachment 63889 [details] and Writer signed with my certificate without control of password ??? annoying
Comment 7 snoff 2009-07-31 12:24:42 UTC
Created attachment 63890 [details] when i use my certificate with PDFCreator, my password is asked evry time
Comment 8 snoff 2009-07-31 12:28:05 UTC
Created attachment 63891 [details] when i use the same certificate with Autocad to sign my drawing, my password is asked evry time, as i asked when i installed my certificate...
Comment 9 snoff 2009-07-31 13:10:00 UTC
I just tried it on my portable (with Vista, not XP). My previous tests were done on a computer with Windows XP SP 2 (and OpenOffice didn't ask for password). With Vista, it seems to work fine, and my password is asked.
Comment 10 snoff 2009-07-31 13:25:56 UTC
I uninstalled my certificates and reinstalled it on Windows XP, as the first time, my password is not asked. I don't know if someone in OpenOffice can do something about it, neither if this bug is related to OpenOffice or Windows XP. It seems to depend of software because the dialog asking the password differs when i use PDFCreator or Autocad, and OpenOffice and OOO is the only one that do not ask for password of certificate. I placed my certificate as personnal certificate and approved autority. OOO says that the certificate is valid.
Comment 11 jbf.faure 2009-08-11 20:33:36 UTC
Wrong component, changing to framework.
Comment 12 jbf.faure 2009-08-11 20:39:24 UTC
I am not the right person for this issue. Regards JBF
Comment 13 Kent Tong 2011-10-12 08:35:41 UTC
I have the same problem on XP with OOo 3.2.1.