Kaydet (Commit) 229c2177 authored tarafından Samuel Mehrbrodt's avatar Samuel Mehrbrodt

We no longer patch libxmlsec for this

Change-Id: I0e817499e80d2b7292833f5e734974b05ef579b6
Reviewed-on: https://gerrit.libreoffice.org/40041Tested-by: 's avatarJenkins <ci@libreoffice.org>
Reviewed-by: 's avatarSamuel Mehrbrodt <Samuel.Mehrbrodt@cib.de>
üst c6d2e7d7
...@@ -335,13 +335,9 @@ DocumentDigitalSignatures::ImplVerifySignatures( ...@@ -335,13 +335,9 @@ DocumentDigitalSignatures::ImplVerifySignatures(
rSigInfo.Signer = xSecEnv->getCertificate( rInfo.ouX509IssuerName, rSigInfo.Signer = xSecEnv->getCertificate( rInfo.ouX509IssuerName,
xmlsecurity::numericStringToBigInteger( rInfo.ouX509SerialNumber ) ); xmlsecurity::numericStringToBigInteger( rInfo.ouX509SerialNumber ) );
// Verify certificate // On Windows checking the certificate path is buggy. It does name matching (issuer, subject name)
//We have patched our version of libxmlsec, so that it does not verify the certificates. This has two // to find the parent certificate. It does not take into account that there can be several certificates
//reasons. First we want two separate status for signature and certificate. Second libxmlsec calls // with the same subject name.
//CERT_VerifyCertificate (Solaris, Linux) falsely, so that it always regards the certificate as valid.
//On Windows the checking of the certificate path is buggy. It does name matching (issuer, subject name)
//to find the parent certificate. It does not take into account that there can be several certificates
//with the same subject name.
try { try {
rSigInfo.CertificateStatus = xSecEnv->verifyCertificate(rSigInfo.Signer, rSigInfo.CertificateStatus = xSecEnv->verifyCertificate(rSigInfo.Signer,
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment