Bug 107187 - Windows Installer package should replacing the certificate
Summary: Windows Installer package should replacing the certificate
Status: RESOLVED FIXED
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: Installation (show other bugs)
Version:
(earliest affected)
5.3.2.2 release
Hardware: All Windows (All)
: medium normal
Assignee: Not Assigned
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: 103054
  Show dependency tree / graph
 
Reported: 2017-04-15 16:29 UTC by Volga
Modified: 2017-06-09 10:18 UTC (History)
2 users (show)

See Also:
Crash report or crash signature:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Volga 2017-04-15 16:29:10 UTC 
Description:
I have found a utility to block some certificates signed by CAs from PR China, which is very popular for Chinese netizens. This utility including StartCom cers.
https://github.com/chengr28/RevokeChinaCerts
When I try to block StartCom certs on Windows, LibreOffice is failed to install.

Steps to Reproduce:
1. Open above site and click Download ZIP button to get this utility
2. Open the ZIP archive, run this utility, then StartCom cert is detected and being move into untrusted CA area
3. Download and install LibreOffice from official website

Actual Results:  
After I click Install button, system abort the installation, and show an alarm to me, after I move StartCom certs into trusted CA area at certmgr.msc, the installation can work.

Expected Results:
To avoid this unexpected results on Windows, and making LibreOffice acceptable by more users, LO should replacing StartCom certificate by another cert signed by trusted CA.


Reproducible: Always

User Profile Reset: No

Additional Info:
Version: 5.3.2.2 (x64)
Build ID: 6cd4f1ef626f15116896b1d8e1398b56da0d0ee1
CPU Threads: 4; OS Version: Windows 6.19; UI Render: default; Layout Engine: new;
Locale: zh-CN (zh_CN); Calc: CL


User-Agent: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:52.0) Gecko/20100101 Firefox/53.0
Comment 1 Buovjaga 2017-06-09 07:05:21 UTC 
5.4 beta2 is now signed with Digicert: https://lists.freedesktop.org/archives/libreoffice-qa/2017-June/010147.html
Should this be closed as fixed and bug 103054 as well?
Comment 2 Xisco Faulí 2017-06-09 08:51:08 UTC 
Yes, I think we can close it as RESOLVED FIXED

@Volga, could you please check again with LibreOffice 5.4 beta2?
Comment 3 Volga 2017-06-09 10:18:27 UTC 
Yes, I checked it, 5.4 beta2 is really resigned by trusted CA. So I agree that bug 103054 can be close.