Bug 156082 - PDF Signature: Unknown signature part opening file signed by Hungarian AVDH service
Summary: PDF Signature: Unknown signature part opening file signed by Hungarian AVDH s...
Status: NEW
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: Draw (show other bugs)
Version:
(earliest affected)
6.2.0.3 release
Hardware: All All
: medium normal
Assignee: Not Assigned
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: Digital-Signatures PDF
  Show dependency treegraph
 
Reported: 2023-06-27 18:24 UTC by Gabor Kelemen (allotropia)
Modified: 2023-06-27 18:26 UTC (History)
2 users (show)

See Also:
Crash report or crash signature:


Attachments
Signed PDF from AVDH service (219.91 KB, application/pdf)
2023-06-27 18:24 UTC, Gabor Kelemen (allotropia)
Details
The document in Draw with Digital Signatures dialog open (34.77 KB, image/png)
2023-06-27 18:25 UTC, Gabor Kelemen (allotropia)
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Gabor Kelemen (allotropia) 2023-06-27 18:24:34 UTC
Created attachment 188110 [details]
Signed PDF from AVDH service

Attached document was signed by the https://magyarorszag.hu/avdh document signing service.
When opened in LO, Draw sees two digital signatures, but one of them is not working, no details are shown about it.

1. Open attached document in Draw
2. Notice the infobar shows "This document has invalid signatures" warning.
3. Push the Show Signatures button
4. In the Digital Signatures dialog there are two signatures listed: one by AVDH Sign which is valid in itself, and one without any information.

When opened in a browser, it lists one attachment which is a 1 page document. Maybe this part is misunderstood.

Version: 24.2.0.0.alpha0+ (X86_64) / LibreOffice Community
Build ID: df29592493367bc03c9602c924711852eecf64c4
CPU threads: 8; OS: Linux 5.4; UI render: default; VCL: gtk3
Locale: hu-HU (hu_HU.UTF-8); UI: en-US
Calc: threaded

Note: the AVDH Signature requires two root CAs to be imported into the Firefox certificate store: from the https://hiteles.gov.hu/cikk/22/szolgaltatoi_tanusitvanyok site: 
http://qca.hiteles.gov.hu/cer/GOVCA-ROOT.cer (RSA Főtanúsítványkiadó) and
http://qca.hiteles.gov.hu/cer/GOVCA-Qv2.cer (Minősített Tanúsítványkiadó v2)
Comment 1 Gabor Kelemen (allotropia) 2023-06-27 18:25:29 UTC
Created attachment 188111 [details]
The document in Draw with Digital Signatures dialog open
Comment 2 Gabor Kelemen (allotropia) 2023-06-27 18:26:44 UTC
Self-confirming, since it's a somewhat(?) country-specific issue.

Mikos, maybe this can interest you :).