You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@openoffice.apache.org by Don Lewis <tr...@apache.org> on 2019/11/17 23:45:18 UTC
document signing broken?
I'm working on an upgrade to the bundled nss. I got a successful build
on Debian 9, but when I tried to sign a document, OpenOffice didn't see
the self-signed certificate that I imported into Firefox. Thinking that
the nss upgrade broke something, I backed out my changes, rebuilt, and
reinstalled. I still don't see my certificate in the Select Certificate
dialog. Is anyone else seeing this?
This works with the FreeBSD port of a recent snapshot of AOO42X. It
uses the system nss library, which is even more modern than the version
I'm trying to upgrade to.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@openoffice.apache.org
For additional commands, e-mail: dev-help@openoffice.apache.org
Re: document signing broken?
Posted by Matthias Seidel <ma...@hamburg.de>.
Hi Don,
Am 18.11.19 um 03:03 schrieb Don Lewis:
> I lost my old firefox profiles some time ago (on FreeBSD) and my Linux
> testing has been on recently built machines / VMs, so I don't have any
> old certficats installed in firefox. It turns out that Mozilla changed
> the database implementation a while back, and you appear to be seeing
> some old certs in your legacy database.
That explains it. The last certificate I can see in AOO expired in July
2018.
>
> nss can support both database versions. If I change the default:
> export NSS_DEFAULT_DB_TYPE=sql
> then OpenOffice trunk can see the new certificates I just added. I'll
> do some further investigation to see how to either change the default or
> possibly look both places.
Both places would be ideal. (In fact, I can see all certificates in Firefox)
We should also cherry-pick it for 4.1.8.
Matthias
>
> The Windows implementation is different under the hood.
>
> On 18 Nov, Matthias Seidel wrote:
>> Hi Don,
>>
>> I also have the issue that I can't see my latest certificate on Ubuntu
>> 16.04. Only my old expired ones are listed.
>> This is with AOO 4.1.7.
>>
>> On Windows all imported certificates are visible and signing works as
>> expected.
>>
>> Regards,
>>
>> Matthias
>>
>> Am 18.11.19 um 00:45 schrieb Don Lewis:
>>> I'm working on an upgrade to the bundled nss. I got a successful build
>>> on Debian 9, but when I tried to sign a document, OpenOffice didn't see
>>> the self-signed certificate that I imported into Firefox. Thinking that
>>> the nss upgrade broke something, I backed out my changes, rebuilt, and
>>> reinstalled. I still don't see my certificate in the Select Certificate
>>> dialog. Is anyone else seeing this?
>>>
>>> This works with the FreeBSD port of a recent snapshot of AOO42X. It
>>> uses the system nss library, which is even more modern than the version
>>> I'm trying to upgrade to.
>>>
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: dev-unsubscribe@openoffice.apache.org
>>> For additional commands, e-mail: dev-help@openoffice.apache.org
>>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@openoffice.apache.org
> For additional commands, e-mail: dev-help@openoffice.apache.org
>
Re: document signing broken?
Posted by Don Lewis <tr...@apache.org>.
I lost my old firefox profiles some time ago (on FreeBSD) and my Linux
testing has been on recently built machines / VMs, so I don't have any
old certficats installed in firefox. It turns out that Mozilla changed
the database implementation a while back, and you appear to be seeing
some old certs in your legacy database.
nss can support both database versions. If I change the default:
export NSS_DEFAULT_DB_TYPE=sql
then OpenOffice trunk can see the new certificates I just added. I'll
do some further investigation to see how to either change the default or
possibly look both places.
The Windows implementation is different under the hood.
On 18 Nov, Matthias Seidel wrote:
> Hi Don,
>
> I also have the issue that I can't see my latest certificate on Ubuntu
> 16.04. Only my old expired ones are listed.
> This is with AOO 4.1.7.
>
> On Windows all imported certificates are visible and signing works as
> expected.
>
> Regards,
>
> Matthias
>
> Am 18.11.19 um 00:45 schrieb Don Lewis:
>> I'm working on an upgrade to the bundled nss. I got a successful build
>> on Debian 9, but when I tried to sign a document, OpenOffice didn't see
>> the self-signed certificate that I imported into Firefox. Thinking that
>> the nss upgrade broke something, I backed out my changes, rebuilt, and
>> reinstalled. I still don't see my certificate in the Select Certificate
>> dialog. Is anyone else seeing this?
>>
>> This works with the FreeBSD port of a recent snapshot of AOO42X. It
>> uses the system nss library, which is even more modern than the version
>> I'm trying to upgrade to.
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@openoffice.apache.org
>> For additional commands, e-mail: dev-help@openoffice.apache.org
>>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@openoffice.apache.org
For additional commands, e-mail: dev-help@openoffice.apache.org
Re: document signing broken?
Posted by Matthias Seidel <ma...@hamburg.de>.
Hi Don,
I also have the issue that I can't see my latest certificate on Ubuntu
16.04. Only my old expired ones are listed.
This is with AOO 4.1.7.
On Windows all imported certificates are visible and signing works as
expected.
Regards,
Matthias
Am 18.11.19 um 00:45 schrieb Don Lewis:
> I'm working on an upgrade to the bundled nss. I got a successful build
> on Debian 9, but when I tried to sign a document, OpenOffice didn't see
> the self-signed certificate that I imported into Firefox. Thinking that
> the nss upgrade broke something, I backed out my changes, rebuilt, and
> reinstalled. I still don't see my certificate in the Select Certificate
> dialog. Is anyone else seeing this?
>
> This works with the FreeBSD port of a recent snapshot of AOO42X. It
> uses the system nss library, which is even more modern than the version
> I'm trying to upgrade to.
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@openoffice.apache.org
> For additional commands, e-mail: dev-help@openoffice.apache.org
>