All files of the following extensions: EXEs, DLLs, SYS, DRV, OCX, SCR, and CPL should be signed. The ones that are not signed now are: Non-driver file C:\Program Files (x86)\LibreOffice 4\program\python33.dll does not have a valid signature, either embedded or via a catalog file. Non-driver file C:\Program Files (x86)\LibreOffice 4\program\python3.dll does not have a valid signature, either embedded or via a catalog file. Non-driver file C:\Program Files (x86)\LibreOffice 4\program\python-core-3.3.0\lib\distutils\command\wininst-9.0.exe does not have a valid signature, either embedded or via a catalog file. Non-driver file C:\Program Files (x86)\LibreOffice 4\program\python-core-3.3.0\lib\distutils\command\wininst-9.0-amd64.exe does not have a valid signature, either embedded or via a catalog file. Non-driver file C:\Program Files (x86)\LibreOffice 4\program\python-core-3.3.0\lib\distutils\command\wininst-8.0.exe does not have a valid signature, either embedded or via a catalog file. Non-driver file C:\Program Files (x86)\LibreOffice 4\program\python-core-3.3.0\lib\distutils\command\wininst-7.1.exe does not have a valid signature, either embedded or via a catalog file. Non-driver file C:\Program Files (x86)\LibreOffice 4\program\python-core-3.3.0\lib\distutils\command\wininst-6.0.exe does not have a valid signature, either embedded or via a catalog file. Non-driver file C:\Program Files (x86)\LibreOffice 4\program\python-core-3.3.0\lib\distutils\command\wininst-10.0.exe does not have a valid signature, either embedded or via a catalog file. Non-driver file C:\Program Files (x86)\LibreOffice 4\program\python-core-3.3.0\lib\distutils\command\wininst-10.0-amd64.exe does not have a valid signature, either embedded or via a catalog file. Non-driver file C:\Program Files (x86)\LibreOffice 4\program\python-core-3.3.0\bin\python.exe does not have a valid signature, either embedded or via a catalog file. Non-driver file C:\Program Files (x86)\LibreOffice 4\program\python.exe does not have a valid signature, either embedded or via a catalog file. Non-driver file C:\Program Files (x86)\LibreOffice 4\share\extensions\presentation-minimizer\SunPresentationMinimizer.uno.dll does not have a valid signature, either embedded or via a catalog file. Non-driver file C:\Program Files (x86)\LibreOffice 4\program\xpcom_core.dll does not have a valid signature, either embedded or via a catalog file. Non-driver file C:\Program Files (x86)\LibreOffice 4\program\xpcom_compat.dll does not have a valid signature, either embedded or via a catalog file. Non-driver file C:\Program Files (x86)\LibreOffice 4\program\xpcom.dll does not have a valid signature, either embedded or via a catalog file. Non-driver file C:\Program Files (x86)\LibreOffice 4\program\nsldappr32v50.dll does not have a valid signature, either embedded or via a catalog file. Non-driver file C:\Program Files (x86)\LibreOffice 4\program\nsldap32v50.dll does not have a valid signature, either embedded or via a catalog file. Non-driver file C:\Program Files (x86)\LibreOffice 4\program\msgbsutl.dll does not have a valid signature, either embedded or via a catalog file. Non-driver file C:\Program Files (x86)\LibreOffice 4\program\mozz.dll does not have a valid signature, either embedded or via a catalog file. Non-driver file C:\Program Files (x86)\LibreOffice 4\program\js3250.dll does not have a valid signature, either embedded or via a catalog file. Non-driver file C:\Program Files (x86)\LibreOffice 4\program\components\xppref32.dll does not have a valid signature, either embedded or via a catalog file. Non-driver file C:\Program Files (x86)\LibreOffice 4\program\components\xpcom_compat_c.dll does not have a valid signature, either embedded or via a catalog file. Non-driver file C:\Program Files (x86)\LibreOffice 4\program\components\xpc3250.dll does not have a valid signature, either embedded or via a catalog file. Non-driver file C:\Program Files (x86)\LibreOffice 4\program\components\vcard.dll does not have a valid signature, either embedded or via a catalog file. Non-driver file C:\Program Files (x86)\LibreOffice 4\program\components\uconv.dll does not have a valid signature, either embedded or via a catalog file. Non-driver file C:\Program Files (x86)\LibreOffice 4\program\components\rdf.dll does not have a valid signature, either embedded or via a catalog file. Non-driver file C:\Program Files (x86)\LibreOffice 4\program\components\profile.dll does not have a valid signature, either embedded or via a catalog file. Non-driver file C:\Program Files (x86)\LibreOffice 4\program\components\pipnss.dll does not have a valid signature, either embedded or via a catalog file. Non-driver file C:\Program Files (x86)\LibreOffice 4\program\components\necko.dll does not have a valid signature, either embedded or via a catalog file. Non-driver file C:\Program Files (x86)\LibreOffice 4\program\components\mozldap.dll does not have a valid signature, either embedded or via a catalog file. Non-driver file C:\Program Files (x86)\LibreOffice 4\program\components\mork.dll does not have a valid signature, either embedded or via a catalog file. Non-driver file C:\Program Files (x86)\LibreOffice 4\program\components\i18n.dll does not have a valid signature, either embedded or via a catalog file. Non-driver file C:\Program Files (x86)\LibreOffice 4\program\components\addrbook.dll does not have a valid signature, either embedded or via a catalog file. This is not mandatory because they are not the main executable files, but should be nice to resolve this issue if it's not a headache to do it.
There are 2 possibilities (they may be both valid) why these dlls/exes are not signed: 1. They are not in the "standard" place in solver (cf. postprocess/CustomTarget_signing.mk: it looks for $(OUTDIR)/bin/*.dll $(OUTDIR)/bin/*.exe). 2. They are not present on signing time because of insufficient dependencies (because most of them come from bundled external projects). 2 is a bit harder to solve than 1, but it is no rocket science either... And you can always ask for pointers :-)
** Please read this message in its entirety before responding ** To make sure we're focusing on the bugs that affect our users today, LibreOffice QA is asking bug reporters and confirmers to retest open, confirmed bugs which have not been touched for over a year. There have been thousands of bug fixes and commits since anyone checked on this bug report. During that time, it's possible that the bug has been fixed, or the details of the problem have changed. We'd really appreciate your help in getting confirmation that the bug is still present. If you have time, please do the following: *Test to see if the bug is still present on a currently supported version of LibreOffice (4.4.1 or later) https://www.libreoffice.org/download/ *If the bug is present, please leave a comment that includes the version of LibreOffice and your operating system, and any changes you see in the bug behavior *If the bug is NOT present, please set the bug's Status field to RESOLVED-WORKSFORME and leave a short comment that includes your version of LibreOffice and Operating System Please DO NOT *Update the version field *Reply via email (please reply directly on the bug tracker) *Set the bug's Status field to RESOLVED - FIXED (this status has a particular meaning that is not appropriate in this case) If you want to do more to help you can test to see if your issue is a REGRESSION. To do so: 1. Download and install oldest version of LibreOffice (usually 3.3 unless your bug pertains to a feature added after 3.3) http://downloadarchive.documentfoundation.org/libreoffice/old/ 2. Test your bug 3. Leave a comment with your results. 4a. If the bug was present with 3.3 - set version to "inherited from OOo"; 4b. If the bug was not present in 3.3 - add "regression" to keyword Feel free to come ask questions or to say hello in our QA chat: http://webchat.freenode.net/?channels=libreoffice-qa Thank you for your help! -- The LibreOffice QA Team This NEW Message was generated on: 2015-04-01
** Please read this message in its entirety before responding ** To make sure we're focusing on the bugs that affect our users today, LibreOffice QA is asking bug reporters and confirmers to retest open, confirmed bugs which have not been touched for over a year. There have been thousands of bug fixes and commits since anyone checked on this bug report. During that time, it's possible that the bug has been fixed, or the details of the problem have changed. We'd really appreciate your help in getting confirmation that the bug is still present. If you have time, please do the following: Test to see if the bug is still present on a currently supported version of LibreOffice (5.0.5 or 5.1.2 https://www.libreoffice.org/download/ If the bug is present, please leave a comment that includes the version of LibreOffice and your operating system, and any changes you see in the bug behavior If the bug is NOT present, please set the bug's Status field to RESOLVED-WORKSFORME and leave a short comment that includes your version of LibreOffice and Operating System Please DO NOT - Update the version field - Reply via email (please reply directly on the bug tracker) - Set the bug's Status field to RESOLVED - FIXED (this status has a particular meaning that is not appropriate in this case) If you want to do more to help you can test to see if your issue is a REGRESSION. To do so: 1. Download and install oldest version of LibreOffice (usually 3.3 unless your bug pertains to a feature added after 3.3) http://downloadarchive.documentfoundation.org/libreoffice/old/ 2. Test your bug 3. Leave a comment with your results. 4a. If the bug was present with 3.3 - set version to "inherited from OOo"; 4b. If the bug was not present in 3.3 - add "regression" to keyword Feel free to come ask questions or to say hello in our QA chat: http://webchat.freenode.net/?channels=libreoffice-qa Thank you for your help! -- The LibreOffice QA Team This NEW Message was generated on: 2016-04-16
** Please read this message in its entirety before responding ** To make sure we're focusing on the bugs that affect our users today, LibreOffice QA is asking bug reporters and confirmers to retest open, confirmed bugs which have not been touched for over a year. There have been thousands of bug fixes and commits since anyone checked on this bug report. During that time, it's possible that the bug has been fixed, or the details of the problem have changed. We'd really appreciate your help in getting confirmation that the bug is still present. If you have time, please do the following: Test to see if the bug is still present on a currently supported version of LibreOffice (5.2.7 or 5.3.3 https://www.libreoffice.org/download/ If the bug is present, please leave a comment that includes the version of LibreOffice and your operating system, and any changes you see in the bug behavior If the bug is NOT present, please set the bug's Status field to RESOLVED-WORKSFORME and leave a short comment that includes your version of LibreOffice and Operating System Please DO NOT Update the version field Reply via email (please reply directly on the bug tracker) Set the bug's Status field to RESOLVED - FIXED (this status has a particular meaning that is not appropriate in this case) If you want to do more to help you can test to see if your issue is a REGRESSION. To do so: 1. Download and install oldest version of LibreOffice (usually 3.3 unless your bug pertains to a feature added after 3.3) http://downloadarchive.documentfoundation.org/libreoffice/old/ 2. Test your bug 3. Leave a comment with your results. 4a. If the bug was present with 3.3 - set version to "inherited from OOo"; 4b. If the bug was not present in 3.3 - add "regression" to keyword Feel free to come ask questions or to say hello in our QA chat: http://webchat.freenode.net/?channels=libreoffice-qa Thank you for helping us make LibreOffice even better for everyone! Warm Regards, QA Team MassPing-UntouchedBug-20170522
Testing version 7.1.0.1 x64 installed from TDF MSI, I see these files unsigned (which are recognized by MS signtool): help\a11y-toggle.js help\fuzzysort.js help\help.js help\help2.js help\hid2file.js help\languages.js help\paginathing.js help\polyfills.js help\prism.js program\pyuno.pyd program\soffice.com program\unopkg.bin program\unopkg.com program\python-core-3.8.4\bin\python.exe program\python-core-3.8.4\lib\libcrypto-1_1.dll program\python-core-3.8.4\lib\libssl-1_1.dll program\python-core-3.8.4\lib\pyexpat.pyd program\python-core-3.8.4\lib\select.pyd program\python-core-3.8.4\lib\unicodedata.pyd program\python-core-3.8.4\lib\winsound.pyd program\python-core-3.8.4\lib\_asyncio.pyd program\python-core-3.8.4\lib\_ctypes.pyd program\python-core-3.8.4\lib\_decimal.pyd program\python-core-3.8.4\lib\_elementtree.pyd program\python-core-3.8.4\lib\_msi.pyd program\python-core-3.8.4\lib\_multiprocessing.pyd program\python-core-3.8.4\lib\_overlapped.pyd program\python-core-3.8.4\lib\_queue.pyd program\python-core-3.8.4\lib\_socket.pyd program\python-core-3.8.4\lib\_ssl.pyd program\python-core-3.8.4\lib\distutils\command\wininst-10.0-amd64.exe program\python-core-3.8.4\lib\distutils\command\wininst-10.0.exe program\python-core-3.8.4\lib\distutils\command\wininst-14.0-amd64.exe program\python-core-3.8.4\lib\distutils\command\wininst-14.0.exe program\python-core-3.8.4\lib\distutils\command\wininst-6.0.exe program\python-core-3.8.4\lib\distutils\command\wininst-7.1.exe program\python-core-3.8.4\lib\distutils\command\wininst-8.0.exe program\python-core-3.8.4\lib\distutils\command\wininst-9.0-amd64.exe program\python-core-3.8.4\lib\distutils\command\wininst-9.0.exe share\Scripts\javascript\ExportSheetsToHTML\exportsheetstohtml.js share\Scripts\javascript\HelloWorld\helloworld.js share\Scripts\javascript\Highlight\ButtonPressHandler.js share\Scripts\javascript\Highlight\ShowDialog.js The script I used for testing: > del sertcheck.log > > for /R "C:\Program Files\LibreOffice" %%f in (*.*) do ( > echo ### %%~ff >> sertcheck.log > "C:\Program Files (x86)\Windows Kits\10\App Certification Kit\signtool.exe" verify /pa "%%~ff" >> sertcheck.log 2>&1 > ) These include some .JS files, and some .PYD; no idea how relevant are they. The script also produces lots of "SignTool Error: This file format cannot be verified because it is not recognized" for files like TXT and PNG, but those errors are of course irrelevant.
Mike Kaganski committed a patch related to this issue. It has been pushed to "master": https://git.libreoffice.org/core/commit/d534a4c7b45ff254b339e806c6a11f13d9ff0043 tdf#68198: sign the rest of binaries It will be available in 7.2.0. The patch should be included in the daily builds available at https://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More information about daily builds can be found at: https://wiki.documentfoundation.org/Testing_Daily_Builds Affected users are encouraged to test the fix and report feedback.