Re: [libreoffice-users] Digital signatures

Hello.

"Writer 4.2 Guide" from second link.

=====
Certificate Path

Note
This option appears only on Linux and Mac systems. On Windows, LibreOffice uses
the default Windows location for storing and retrieving certificates.

Users can digitally sign documents using LibreOffice. A digital signature requires a personal
signing certificate. Most operating systems can generate a self-signed certificate. However, a
personal certificate issued by an outside agency (after verifying an individual's identity) has a
higher degree of trust associated with it than does a self-signed certificate. LibreOffice does not
provide a secure method of storing these certificates, but it can access certificates that have
been saved using other programs. Click Certificate and select which certificate store to use.
=====

Is it mean, that in LO i can use only self-signed certificates to sign documents?

My problem is that LO do not add my certificate, but can see it in certificate store (i try it on 
windows).
Is it bug and i should report it or this is normal behavior?


12.10.2015, 22:56, "Tom Davies" <tomcecf@gmail.com>:
> Hi :)
> Do the "Published Guides" help at all? They are both here;
> https://wiki.documentfoundation.org/Documentation/Publications
> and here;
> http://www.libreoffice.org/get-help/documentation/
> and a few other places but those two links have them for free.
>
> The Published Guides are usually the best documentation in English. There
> is the Faq and the 'in-built' help but the Published Guides tend to be a
> LOT better. The other help tends to be MUCH easier to translate, and
> people work hard at that, so the translations tend to be excellent but for
> English please try the Published Guides. Having said that i'm not sure if
> they cover this issue! Please let us know.
> Regards from
> Tom :) xxxx
>
> On 12 October 2015 at 14:49, Philip Jackson <philip.jackson@nordnet.fr>
> wrote:
>
> >  Hi, I have been using signatures occasionally over the past couple of years
> >  without any problem. I initially used Firefox to load my signature
> >  together
> >  with the root. LO swriter then had no problem finding the certificate and
> >  signing with it.
> >
> >  Now, my old certificate has expired and I have the replacement certificate
> >  installed in FireFox..
> >
> >  Your email prompted me to try and sign a document with my new
> >  certificate. LO
> >  cannot see my new certificate (only the old expired one).
> >
> >  As usual (see recent threads) the LO Help doesn't actually help very
> >  much. It
> >  talks about an ADD button in the Digital Signing dialog but I don't get an
> >  ADD
> >  button. I can sign with the old certificate even though it is expired and
> >  then
> >  the document shows that the signature is broken.
> >
> >  I used FireFox to remove my expired certificate and even after rebooting
> >  LO only
> >  sees the expired one and not the new one. Still no ADD button so does LO
> >  limit
> >  users to a single certificate ? Where does LO store the certificates ?
> >
> >  I found the answer to this by looking in the LO writer
> >  Tools/Options/LibreOffice/Security tab
> >
> >  There the bottom item was Certificate Path and it gave me two choices :
> >  FireFox
> >  profile or Thunderbird profile
> >
> >  My LO was on Thunderbird's profile and I had forgotten to update that one
> >  with
> >  my new certificate details. So I switched to FireFox which was up to date.
> >
> >  After re-starting LO, my document could be signed by the new certificate.
> >
> >  I updated my Thunderbird profile with the new certificate and set LO to
> >  Thunderbird. After restarting LO, I tried to resign the document. But
> >  from the
> >  Thunderbird profile, LO only sees the outdated certificate.
> >
> >  So I conclude several points :
> >
> >  1. LO Writer can only see 1 certificate in either FireFox or Thunderbird
> >  profiles and that is the oldest of however many certs are present.
> >
> >  2. If the oldest is out of date - tough
> >
> >  3. LO Help button on the digital signing dialog box lands the user on a
> >  webpage
> >  which correctly announces that it has no information.
> >
> >  4. searching on the LO Help website finds some help which talks of using
> >  the
> >  ADD button to add a certificate. But at least with LO 4.2.8.2 (Ubuntu
> >  1404 LTS
> >  with their latest updates), I cannot find any such button.
> >
> >  5. My solution was to delete the expired certificate from FireFox profile.
> >  And
> >  LO correctly used the new one which had remained invisible up to that
> >  point.
> >
> >  I am not sure that time expired certs should be deleted. They are probably
> >  needed to verify old signatures or to decrypt old files.
> >
> >  Philip
> >
> >  On 12/10/15 04:14, Евгений wrote:
> >  > No one here used signatures?
> >  > No one can help or give some advices to resolve problem?
> >  >
> >  >
> >  > 07.10.2015, 10:00, "Евгений" <nauevg@ya.ru>:
> >  >> Hello.
> >  >>
> >  >> Can someone help me with digital signatures?
> >  >>
> >  >> I tried LO 5.0.2, 4.4.5.2 and even AOO 4.1.1 on windows server 2008 r2.
> >  >>
> >  >> I have imported root CA certificate. I have copied private and public
> >  keys to registry from token.
> >  >> My certificate is valid.
> >  >>
> >  >> When i use "File - Digital signatures" and try to add one to document -
> >  nothing happens.
> >  >> I can see my certificate details from LO dialog, but when i select it
> >  and press OK - none added to document.
> >  >>
> >  >> Document - ODT file.
> >  >>
> >  >> No errors or other messages appeared.
> >  >>
> >  >> --
> >  >> To unsubscribe e-mail to: users+unsubscribe@global.libreoffice.org
> >  >> Problems?
> >  http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
> >  >> Posting guidelines + more:
> >  http://wiki.documentfoundation.org/Netiquette
> >  >> List archive: http://listarchives.libreoffice.org/global/users/
> >  >> All messages sent to this list will be publicly archived and cannot be
> >  deleted
> >  >
> >
> >  --
> >  To unsubscribe e-mail to: users+unsubscribe@global.libreoffice.org
> >  Problems?
> >  http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
> >  Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
> >  List archive: http://listarchives.libreoffice.org/global/users/
> >  All messages sent to this list will be publicly archived and cannot be
> >  deleted
>
> --
> To unsubscribe e-mail to: users+unsubscribe@global.libreoffice.org
> Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
> Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
> List archive: http://listarchives.libreoffice.org/global/users/
> All messages sent to this list will be publicly archived and cannot be deleted

-- 
To unsubscribe e-mail to: users+unsubscribe@global.libreoffice.org
Problems? http://www.libreoffice.org/get-help/mailing-lists/how-to-unsubscribe/
Posting guidelines + more: http://wiki.documentfoundation.org/Netiquette
List archive: http://listarchives.libreoffice.org/global/users/
All messages sent to this list will be publicly archived and cannot be deleted