Bug 146322 - IDE: sign macro
Summary: IDE: sign macro
Status: UNCONFIRMED
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: BASIC (show other bugs)
Version:
(earliest affected)
7.2.3.2 release
Hardware: x86-64 (AMD64) Linux (All)
: medium normal
Assignee: Not Assigned
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2021-12-19 22:55 UTC by documentfoundation@pelly.co
Modified: 2021-12-30 23:17 UTC (History)
1 user (show)

See Also:
Crash report or crash signature:
Regression By:


Attachments
signed macro security warning (32.06 KB, image/png)
2021-12-30 19:37 UTC, documentfoundation@pelly.co
Details

Note You need to log in before you can comment on or make changes to this bug.
Description documentfoundation@pelly.co 2021-12-19 22:55:07 UTC
I have a few macros that run or are available for everything. I'd like to sign them and trust my signature so that I don't have to allow macros every time I open a document. These macros are saved in My Macros & Dialogs > Standard > Module1.

I can sign spreadsheets, and my signature is trusted, but the BASIC IDE does nothing when I click on File > Digital Signatures...

I expect a dialog to appear inviting me to select a signature.

I don't have much interest in simply trusting their location, because everything I do can write there.



Version: 7.2.3.2 / LibreOffice Community
Build ID: 20(Build:2)
Locale: en-GB (en_GB.UTF-8); UI: en-GB
Ubuntu package version: 1:7.2.3-0ubuntu0.21.10.1
Calc: threaded
Comment 2 documentfoundation@pelly.co 2021-12-30 19:37:36 UTC
Created attachment 177214 [details]
signed macro security warning
Comment 3 documentfoundation@pelly.co 2021-12-30 19:55:13 UTC
From the tools > macro menu I do have access to digitally sign the macros in the document.

After the macro is signed, when I open the IDE, the file > digital signatures... option opens the signature dialog as expected.

When opening the document the "security warning" dialog appears telling me the macros are signed by: <blank>. See attachment. Clicking on the view signatures button causes LO to hang until it is killed.

Selecting "always trust macros from this source..." seems to do nothing.

Other Information:
Something seems to have broken for me recently. When I look at Tools > Options > LibreOffice > Security > Macro Security... I have a large error dialog titled "Macro security problem!" The content starts with "Broken certificate data: mQIN..." and ends with "Vs= / com.sun.star.uno.RuntimeException message: ./xmlsecurity/source/xmlsec/nss/x590certificate_nssimpl.cxx:326"

Copy & paste wasn't available so I had to type that... please excuse mistakes.
Comment 4 documentfoundation@pelly.co 2021-12-30 23:17:00 UTC
gah! 

./xmlsecurity/source/xmlsec/nss/x509certificate_nssimpl.cxx