Bug 36972 - The assigning of a problem to all signatures on a document disrupts troubleshooting
Summary: The assigning of a problem to all signatures on a document disrupts troublesh...
Status: RESOLVED DUPLICATE of bug 36970
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: LibreOffice (show other bugs)
Version:
(earliest affected)
3.4.0 Beta4
Hardware: Other All
: medium normal
Assignee: Not Assigned
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-05-08 09:17 UTC by orcmid
Modified: 2012-09-04 11:57 UTC (History)
1 user (show)

See Also:
Crash report or crash signature:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description orcmid 2011-05-08 09:17:48 UTC
In the reporting on whether or not the digital signatures on a document have a problem, assigning the most severe problem level to all signatures on the document prevents accurate trouble-shooting.

RECOMMENDATION

 1. It is fine to assign the most severe level to the document and in the indicator for the document.  This will result in it being either all signatures valid, some certificates could not be validated (or there are other issues, such as not all parts signed, unable to check for Certificate Revocation or a certificate is revoked/out-of-date) or some signatures are invalid.

 2. However, when the individual signatures are listed, they should not all be identified with the same severity.  That makes it difficult to trouble-shoot the situation and attempt to track down the root cause by users and administrators.  The signatures should be identified individually with respect to verification of signatures and the validation of the certificate.

 3. Finally, although this is a bigger feature issue, it does not appear that LibO will check for Certificate Revocation or indicate that it is unable to do so (e.g., no on-line connectivity, the CRL site is not responding).

 4. From the Help Pack digital signatures overview subtopic, it is not possible to determine what the behavior is if a Certificate has expired and whether it appears to have been signed before expiration/revocation or not.  This should be clarified in the implementation and the Help Pack and on-line Help.
Comment 1 Björn Michaelsen 2011-12-23 12:03:52 UTC Comment hidden (obsolete)
Comment 2 Florian Reisinger 2012-08-14 13:58:37 UTC Comment hidden (obsolete)
Comment 3 Florian Reisinger 2012-08-14 13:59:53 UTC Comment hidden (obsolete)
Comment 4 Florian Reisinger 2012-08-14 14:04:31 UTC Comment hidden (obsolete)
Comment 5 Florian Reisinger 2012-08-14 14:06:41 UTC Comment hidden (obsolete)
Comment 6 sasha.libreoffice 2012-09-04 11:57:59 UTC

*** This bug has been marked as a duplicate of bug 36970 ***