Apache OpenOffice (AOO) Bugzilla – Issue 103934
no password for certificate asked when signing digitally my document
Last modified: 2024-02-18 10:51:07 UTC
Hi, I was studing the ability of digitally signed document in my office. I had made a certificate, and installed it with high level of security (so my computer has to ask me my password every time i use the certificate to sign my documents). It works very fine with softxares like PDFCreator 0.9.8, Autodesk Autocad Map 2005, and my password is asked every time when i sign a document. Whereas, i tested my certificate on OpenOffice 3.1 (in French, i'm sorry if my English is not well, but I'm not perfect, i'm just French). Where i use the option "Fichier / signature numérique" (File / digital signing ???), i select my certificate, and OpenOffice works, but never ask me the password to access my certificate. If this behaviour is confirmed, it can be a hole in security, because my computer can be used by co-workers, and they just have to select my certificate to sign a document (in place of myself) as if i signed it.
Created attachment 63884 [details] location of digital signing in french version of Writer
Created attachment 63885 [details] location of digital signing in french version of Writer
Created attachment 63886 [details] stage 2 I select my certificate
Created attachment 63887 [details] stage 3 I should enter my password at this time, but no way to do it ??
Created attachment 63888 [details] stage 4 without password my certificate is selected anyway
Created attachment 63889 [details] and Writer signed with my certificate without control of password ??? annoying
Created attachment 63890 [details] when i use my certificate with PDFCreator, my password is asked evry time
Created attachment 63891 [details] when i use the same certificate with Autocad to sign my drawing, my password is asked evry time, as i asked when i installed my certificate...
I just tried it on my portable (with Vista, not XP). My previous tests were done on a computer with Windows XP SP 2 (and OpenOffice didn't ask for password). With Vista, it seems to work fine, and my password is asked.
I uninstalled my certificates and reinstalled it on Windows XP, as the first time, my password is not asked. I don't know if someone in OpenOffice can do something about it, neither if this bug is related to OpenOffice or Windows XP. It seems to depend of software because the dialog asking the password differs when i use PDFCreator or Autocad, and OpenOffice and OOO is the only one that do not ask for password of certificate. I placed my certificate as personnal certificate and approved autority. OOO says that the certificate is valid.
Wrong component, changing to framework.
I am not the right person for this issue. Regards JBF
I have the same problem on XP with OOo 3.2.1.