Created attachment 134860 [details] Three digital signatures on document When adding three or more Digital Signature in XCaDES format third and the next signatures are marked as invalid. With an old Digital Signature algorithm valid only the first and the last signatures, but the date of signature from the second are zero valued. With PCaDES (PDF) all works as expected. This Issue exists in all LibreOffice suite after this version, including 5.4 (current development build at 21.07.2017) See an attachment screenshot
Confirmed with current master (3a7e836ab532fcb52770b72ef054841768154891).
** Please read this message in its entirety before responding ** To make sure we're focusing on the bugs that affect our users today, LibreOffice QA is asking bug reporters and confirmers to retest open, confirmed bugs which have not been touched for over a year. There have been thousands of bug fixes and commits since anyone checked on this bug report. During that time, it's possible that the bug has been fixed, or the details of the problem have changed. We'd really appreciate your help in getting confirmation that the bug is still present. If you have time, please do the following: Test to see if the bug is still present with the latest version of LibreOffice from https://www.libreoffice.org/download/ If the bug is present, please leave a comment that includes the information from Help - About LibreOffice. If the bug is NOT present, please set the bug's Status field to RESOLVED-WORKSFORME and leave a comment that includes the information from Help - About LibreOffice. Please DO NOT Update the version field Reply via email (please reply directly on the bug tracker) Set the bug's Status field to RESOLVED - FIXED (this status has a particular meaning that is not appropriate in this case) If you want to do more to help you can test to see if your issue is a REGRESSION. To do so: 1. Download and install oldest version of LibreOffice (usually 3.3 unless your bug pertains to a feature added after 3.3) from http://downloadarchive.documentfoundation.org/libreoffice/old/ 2. Test your bug 3. Leave a comment with your results. 4a. If the bug was present with 3.3 - set version to 'inherited from OOo'; 4b. If the bug was not present in 3.3 - add 'regression' to keyword Feel free to come ask questions or to say hello in our QA chat: https://kiwiirc.com/nextclient/irc.freenode.net/#libreoffice-qa Thank you for helping us make LibreOffice even better for everyone! Warm Regards, QA Team MassPing-UntouchedBug
This bug are still present in version 6.0.5.2, using build 1:6.0.5~rc2-0ubuntu0.16.04.1~lo1. Needs to be resolved to use digital signatures in corporate document systems.
*** Bug 124207 has been marked as a duplicate of this bug. ***
Dear Ivan Batalin, To make sure we're focusing on the bugs that affect our users today, LibreOffice QA is asking bug reporters and confirmers to retest open, confirmed bugs which have not been touched for over a year. There have been thousands of bug fixes and commits since anyone checked on this bug report. During that time, it's possible that the bug has been fixed, or the details of the problem have changed. We'd really appreciate your help in getting confirmation that the bug is still present. If you have time, please do the following: Test to see if the bug is still present with the latest version of LibreOffice from https://www.libreoffice.org/download/ If the bug is present, please leave a comment that includes the information from Help - About LibreOffice. If the bug is NOT present, please set the bug's Status field to RESOLVED-WORKSFORME and leave a comment that includes the information from Help - About LibreOffice. Please DO NOT Update the version field Reply via email (please reply directly on the bug tracker) Set the bug's Status field to RESOLVED - FIXED (this status has a particular meaning that is not appropriate in this case) If you want to do more to help you can test to see if your issue is a REGRESSION. To do so: 1. Download and install oldest version of LibreOffice (usually 3.3 unless your bug pertains to a feature added after 3.3) from https://downloadarchive.documentfoundation.org/libreoffice/old/ 2. Test your bug 3. Leave a comment with your results. 4a. If the bug was present with 3.3 - set version to 'inherited from OOo'; 4b. If the bug was not present in 3.3 - add 'regression' to keyword Feel free to come ask questions or to say hello in our QA chat: https://kiwiirc.com/nextclient/irc.freenode.net/#libreoffice-qa Thank you for helping us make LibreOffice even better for everyone! Warm Regards, QA Team MassPing-UntouchedBug
This bug is still present in 7.1.1.2 LO version 20.04 Libreoffice Lime PPA
Created attachment 170581 [details] Screenshot of invalid signatures
This is fixed now with: https://git.libreoffice.org/core/+/fd5463343ab7f784070f1ab87a345eed20803d07%5E%21 author Tomaž Vajngerl <tomaz.vajngerl@collabora.co.uk> Wed Oct 27 14:15:17 2021 +0200 committer Tomaž Vajngerl <quikee@gmail.com> Thu Oct 28 08:49:57 2021 +0200 xmlsec: signing the document fails the 3rd time (invalid signature) Third signature with the same key is no longer considered invalid. Thanks Tomaž for solving this longstanding problem :)
Created attachment 176002 [details] Screenshot of an example document with three signatures made with the same cert
Issue backported to 7.2 branch: https://cgit.freedesktop.org/libreoffice/core/commit/?h=libreoffice-7-2&id=369b883ac9cda5acae77e6df9edc00d1f1213b10