Created attachment 188422 [details] Problematic file with signed signature https://ask.libreoffice.org/t/the-right-way-to-sign-a-macro/93656 The attachment there (also attached here) is an ods file with a simple macro, signed by the author's OpenPGP key. He signed the macro but not the file itself. When I opened it with LibreOffice 7.6.0.1, it asked me if I would trust the signature or not. If I clicked View Signature, it didn't show the signature, but directly got into the main screen with the macro button there. But then it told me that the macro was disabled due to Macro Security Settings (I set it to "Medium" - Confirmed required before executing macros from untrusted sources). Now a couple of problems here - 1. In this condition, I couldn't leave LibreOffice. Either clicked the x button in the upright corner, or selected "Exit LibreOffice" from File menu didn't work. 2. It didn't respond when I click "Show Macros" or hit the macro button ("hello world"). 3. In the Tools - Options - Security, when I clicked Macro Security to check, it popped a window saying Macro security problem! Broken certificate data: [a bunch of bogus messages] com.sun.star.uno.RuntimeException message: "at /home/buildslave/source/libo-core/xmlsecurity/source/xmlsec/nss/x509certificate_nssimpl.cxx:307" before showing the Macro security window. The file is signed by 7.0.4.2. Tested by 7.6.0.1: Version: 7.6.0.1 (X86_64) / LibreOffice Community Build ID: 776eaf34564cbf3f034a0ba1fd1d5c32ff9ccf1c CPU threads: 4; OS: Linux 6.3; UI render: default; VCL: kf5 (cairo+xcb) Locale: zh-TW (zh_TW.UTF-8); UI: en-US Calc: threaded
I have to manually kill the LibreOffice process from command line to exit LibreOffice. Also, even I checked to "Always trust macros from this source" and clicked "Enable macros", it still told me that Macros disabled. But from there, I could check macros and exit LibreOffice. It still told me Broken certificate data when I clicked Macro Security in Tools - Options - Security, and the next time I open it, it still asked me if I trust the signature or not.
Hey, I am the man ask on ask.libreoffice. Following is the full libreoffice version text on my linux: Version: 7.0.4.2 Build ID: 00(Build:2) CPU threads: 4; OS: Linux 5.10; UI render: default; VCL: x11 Locale: en-US (zh_TW.UTF-8); UI：zh-TW Debian package version: 1:7.0.4-4+deb11u7 Calc: threaded
Dear Franklin Weng, To make sure we're focusing on the bugs that affect our users today, LibreOffice QA is asking bug reporters and confirmers to retest open, confirmed bugs which have not been touched for over a year. There have been thousands of bug fixes and commits since anyone checked on this bug report. During that time, it's possible that the bug has been fixed, or the details of the problem have changed. We'd really appreciate your help in getting confirmation that the bug is still present. If you have time, please do the following: Test to see if the bug is still present with the latest version of LibreOffice from https://www.libreoffice.org/download/ If the bug is present, please leave a comment that includes the information from Help - About LibreOffice. If the bug is NOT present, please set the bug's Status field to RESOLVED-WORKSFORME and leave a comment that includes the information from Help - About LibreOffice. Please DO NOT Update the version field Reply via email (please reply directly on the bug tracker) Set the bug's Status field to RESOLVED - FIXED (this status has a particular meaning that is not appropriate in this case) If you want to do more to help you can test to see if your issue is a REGRESSION. To do so: 1. Download and install oldest version of LibreOffice (usually 3.3 unless your bug pertains to a feature added after 3.3) from https://downloadarchive.documentfoundation.org/libreoffice/old/ 2. Test your bug 3. Leave a comment with your results. 4a. If the bug was present with 3.3 - set version to 'inherited from OOo'; 4b. If the bug was not present in 3.3 - add 'regression' to keyword Feel free to come ask questions or to say hello in our QA chat: https://web.libera.chat/?settings=#libreoffice-qa Thank you for helping us make LibreOffice even better for everyone! Warm Regards, QA Team MassPing-UntouchedBug
Tested with: Version: 25.8.2.2 (X86_64) Build ID: d401f2107ccab8f924a8e2df40f573aab7605b6f CPU threads: 4; OS: Linux 6.8; UI render: default; VCL: kf5 (cairo+xcb) Locale: zh-TW (zh_TW.UTF-8); UI: zh-TW Calc: threaded This bug is no longer there. With the Macro Security Settings set to "Medium" and enabled the macro, I could execute it and check the signature by Tools - Macro - Signature, showing the correct signature. The macro executed correctly too.