Created attachment 188422 [details] Problematic file with signed signature https://ask.libreoffice.org/t/the-right-way-to-sign-a-macro/93656 The attachment there (also attached here) is an ods file with a simple macro, signed by the author's OpenPGP key. He signed the macro but not the file itself. When I opened it with LibreOffice 7.6.0.1, it asked me if I would trust the signature or not. If I clicked View Signature, it didn't show the signature, but directly got into the main screen with the macro button there. But then it told me that the macro was disabled due to Macro Security Settings (I set it to "Medium" - Confirmed required before executing macros from untrusted sources). Now a couple of problems here - 1. In this condition, I couldn't leave LibreOffice. Either clicked the x button in the upright corner, or selected "Exit LibreOffice" from File menu didn't work. 2. It didn't respond when I click "Show Macros" or hit the macro button ("hello world"). 3. In the Tools - Options - Security, when I clicked Macro Security to check, it popped a window saying Macro security problem! Broken certificate data: [a bunch of bogus messages] com.sun.star.uno.RuntimeException message: "at /home/buildslave/source/libo-core/xmlsecurity/source/xmlsec/nss/x509certificate_nssimpl.cxx:307" before showing the Macro security window. The file is signed by 7.0.4.2. Tested by 7.6.0.1: Version: 7.6.0.1 (X86_64) / LibreOffice Community Build ID: 776eaf34564cbf3f034a0ba1fd1d5c32ff9ccf1c CPU threads: 4; OS: Linux 6.3; UI render: default; VCL: kf5 (cairo+xcb) Locale: zh-TW (zh_TW.UTF-8); UI: en-US Calc: threaded
I have to manually kill the LibreOffice process from command line to exit LibreOffice. Also, even I checked to "Always trust macros from this source" and clicked "Enable macros", it still told me that Macros disabled. But from there, I could check macros and exit LibreOffice. It still told me Broken certificate data when I clicked Macro Security in Tools - Options - Security, and the next time I open it, it still asked me if I trust the signature or not.
Hey, I am the man ask on ask.libreoffice. Following is the full libreoffice version text on my linux: Version: 7.0.4.2 Build ID: 00(Build:2) CPU threads: 4; OS: Linux 5.10; UI render: default; VCL: x11 Locale: en-US (zh_TW.UTF-8); UI：zh-TW Debian package version: 1:7.0.4-4+deb11u7 Calc: threaded