Project: help  02139162f541bb56ddbaf0a2d6142256a0454372

digital signatures: briefly document OOXML/PDF signing effort

It may be unexpected for users to see that OOXML files are always only
partially signed.

Change-Id: Ie7c6c553580a4eb38ed72c8a50b75f4b7902613f

Change-Id: Ifaf0f45b12d983d556ca4c7e0b4a57c47ff38597
Reviewed-on: https://gerrit.libreoffice.org/30737Tested-by: Jenkins <ci@libreoffice.org>
Reviewed-by: Noel Grandin <noel.grandin@collabora.co.uk>

Change-Id: Id7d7bb572466bcc803ac424cd8ddb64205a1c273

Change-Id: I0eb2b9986840b1bd5bc892da23c56205047bc120

Change-Id: I6ec274c6c546f60c23fe639002d751f0a9f11d33

Change-Id: If7fb37a3656b55f7820698a59b8f1d8d8b14d594

...seen a failure of JunitTest_sc_unoapi_3 with

> checking: [sc.ScDDELinkObj::com::sun::star::util::XRefreshable] is iface: [com.sun.star.util.XRefreshable] testcode: [ifc.util._XRefreshable]
> LOG> Execute: refresh()
> LOG> starting required method: addRefreshListener()
> LOG> Execute: addRefreshListener()
> Method addRefreshListener() finished with state OK
> LOG> addRefreshListener(): COMPLETED.OK
> warn:unotools.misc:30768:84:unotools/source/misc/mediadescriptor.cxx:690: caught Exception "" while opening <file:///data/lo/core/sc/qa/unoapi/testdocuments/ScDDELinksObj.ods>
> warn:filter.config:30768:84:filter/source/config/cache/typedetection.cxx:455: caught Exception "Could not open stream for <file:///data/lo/core/sc/qa/unoapi/testdocuments/ScDDELinksObj.ods>" while querying type of <file:///data/lo/core/sc/qa/unoapi/testdocuments/ScDDELinksObj.ods>
> Method refresh() finished with state FAILED

and it appears that all of sc.ScDDELinkObj, sc.ScDDELinksObj, and
sc.ScIndexEnumeration_DDELinksEnumeration try to open that file (necessarily for
writing?), and the first two are in JunitTest_sc_unoapi_3 (so are executed
sequentially), but the last one is in JunitTest_sc_unoapi_4 (so may be executed
in parallel with the others), so that may be the reason for such sporadic
failure.  Easiest workaround appears to be to move the third test into the same
JunitTest as the other two...

Change-Id: Iefb94cf657bdc9c1eac92dd49ee6257eb5e80905

Change-Id: I917cdf6e8d3ebfa7c9e4a52ca61adc5b8707ecfc
Reviewed-on: https://gerrit.libreoffice.org/30447Tested-by: Jenkins <ci@libreoffice.org>
Reviewed-by: Lionel Elie Mamane <lionel@mamane.lu>

With this our xref stream output is close enough to Acrobat so that the
existing signature verifier runs without any problems.

Change-Id: I6eca7966890365759c269b465e4bf4d86d335219

Change-Id: I7e77fcf2d120845b436b7d6220025fd5b339aafa

...as that, somewhat surprisingly, causes 'make MODULE.all' do additional
targets that a plain top-level 'make' would never do.  See discussion in mail
thread starting at
<https://lists.freedesktop.org/archives/libreoffice/2016-November/075797.html>
"[Libreoffice-commits] core.git: Branch 'feature/dialog-screenshots' [...]".

Change-Id: I460f3c91cf00d3398c61833fdcd5eaebdc87fbf2

Its last user was
writerfilter::dmapper::DomainMapperTableHandler::getTable(), removed in
commit 6ea66657 (loplugin:unusedmethods
writerfilter, 2015-07-20).

Change-Id: Ibaf536d4dd8f01f4413c3cec033db7438501e58c

and not for each individual label

Change-Id: I7014be30569a275fa20faaa2ba9255d3968b70dd

so we don't have to specify the source type

Change-Id: I4106705a39874a8043f0f294a11374404d6cfc3a
Reviewed-on: https://gerrit.libreoffice.org/30713Tested-by: Jenkins <ci@libreoffice.org>
Reviewed-by: Noel Grandin <noel.grandin@collabora.co.uk>

Change-Id: I9d5487af4729bd3ee4f6450092e4b77f74a12e6d
Reviewed-on: https://gerrit.libreoffice.org/30717Reviewed-by: Noel Grandin <noel.grandin@collabora.co.uk>
Tested-by: Noel Grandin <noel.grandin@collabora.co.uk>

Change-Id: I3dae1d142874c767ec1e32401acba0bbca95df5f
Reviewed-on: https://gerrit.libreoffice.org/30716Reviewed-by: Noel Grandin <noel.grandin@collabora.co.uk>
Tested-by: Noel Grandin <noel.grandin@collabora.co.uk>

Project: help  9b126a4ef3798df131b29e064e9decabea812b5c

Remove the definition of plug-in

Change-Id: Iaa6501d50430a0a27c4535791b9e65ceaf75ec7b
Reviewed-on: https://gerrit.libreoffice.org/30735Reviewed-by: Adolfo Jayme Barrientos <fitojb@ubuntu.com>
Tested-by: Adolfo Jayme Barrientos <fitojb@ubuntu.com>

Project: help  368c92d82e25d61746808d38afd3d5049f9bfe84

Remove one more dead plug-in menu item description

Change-Id: I5be88980aa527e5d03d4fcfd54dfd520a0b7b162
Reviewed-on: https://gerrit.libreoffice.org/30736Reviewed-by: Adolfo Jayme Barrientos <fitojb@ubuntu.com>
Tested-by: Adolfo Jayme Barrientos <fitojb@ubuntu.com>

Project: help  9f5f37dfe07c69e090d7b1cacfd56de91689834e

Remove embeds of the description of the Edit - Plug-in menu item

Change-Id: I57c83a56de0fe124f168adbcb7c4a3fdbd45d60d
Reviewed-on: https://gerrit.libreoffice.org/30734Reviewed-by: Adolfo Jayme Barrientos <fitojb@ubuntu.com>
Tested-by: Adolfo Jayme Barrientos <fitojb@ubuntu.com>

Project: help  e91a6393a3b573906bd3184cafb5b94bb391af7e

Edit - Plug-in menu item was removed in 5.2

Change-Id: Ie3df8491c8002abf871c4ed311ef654d5d0b5849
Reviewed-on: https://gerrit.libreoffice.org/30733Reviewed-by: Adolfo Jayme Barrientos <fitojb@ubuntu.com>
Tested-by: Adolfo Jayme Barrientos <fitojb@ubuntu.com>

Project: help  42dcc36e303f8b7a5d534fb3163e5c2a647560a3

Remove a page about plug-ins

This feature was dropped from 5.2

Change-Id: Ia2721ac34c816e11c1ce3982c604bb7af01c6da4
Reviewed-on: https://gerrit.libreoffice.org/30732Reviewed-by: Adolfo Jayme Barrientos <fitojb@ubuntu.com>
Tested-by: Adolfo Jayme Barrientos <fitojb@ubuntu.com>

Project: help  e4ffa2f2f3a457054e75ce9a41029b94b018d2d1

Another dead URL

Change-Id: Id313b2e262db1d699a52c1bdec9850587e3a5d83

Change-Id: I58c41ce2052371e20c8c84492124c5a687695ca6

Change-Id: I107cf27ea36e092ba3be45d255cc8622eb1c726f

No idea how this ever compiled for me!

Change-Id: I7bfe5df755594448fbe6892873a7cedb2b235d98

Follow UTR#50 and set vertical direction based on character orientation,
not the resolved script.

Change-Id: I54f047e1720e8e4de14ce16a57e5d2d3f6cd2ca2

See http://unicode.org/reports/tr50/#vo

ICU does not support getting this property yet, so I stole some (heavily
redacted) Perl script from Mozilla that reads the data file and
generates property tables. The original Mozilla script:
https://dxr.mozilla.org/mozilla-central/source/intl/unicharutil/tools/genUnicodePropertyData.pl

Change-Id: I2800711c3db3564515139227bdbd3b4d732917eb

Drop useless typedef and use more general nomenclature as I’m going to
extend this in the next commits.

Change-Id: I12aa01fe9f5a6c9aca67f850f36b81661ee14913

Previously we used a symetric image to test JPEG import. This has
the flaw that we doesn't warn if the orientation of the JPEG
image was not correct. This commit fixes this flaw by making all
test images non-symetrical.

Change-Id: If87d257ae44d85b6a9042d09d62ba785ffc5c426
Reviewed-on: https://gerrit.libreoffice.org/30709Tested-by: Jenkins <ci@libreoffice.org>
Reviewed-by: Tomaž Vajngerl <quikee@gmail.com>

Change-Id: I8f2963c9b6b1c8717ea4d19453815fffa6e68484

This way it's a bit smaller for large files and our output is closer to
what Acrobat produces.

Change-Id: Ide5f7b58a74a9d6ad7d806814eb57cb6931023cc
Reviewed-on: https://gerrit.libreoffice.org/30726Tested-by: Jenkins <ci@libreoffice.org>
Reviewed-by: Miklos Vajna <vmiklos@collabora.co.uk>

So that when we have a single signature with ID="Signature2", then we
use "Signature3" for the next ID, not "Signature2". (Acrobat uses that ID
for the first signature.)

Change-Id: I7032fbf014184da2a5be24730a92abc32a9a1258
Reviewed-on: https://gerrit.libreoffice.org/30725Tested-by: Jenkins <ci@libreoffice.org>
Reviewed-by: Miklos Vajna <vmiklos@collabora.co.uk>

In case the input document used a PDF 1.5 xref stream, not an old xref
table, then write that as part of the incremental update. Acrobat seems
to require this.

Change-Id: I9f1f73140c26308f8720aa1ffe1b905d0e60ede0
Reviewed-on: https://gerrit.libreoffice.org/30724Tested-by: Jenkins <ci@libreoffice.org>
Reviewed-by: Miklos Vajna <vmiklos@collabora.co.uk>

Normally it's a direct dictionary, but it's OK to have it as a reference, and
then the referenced object is a dictionary.

Change-Id: If09edaf23501883be68148e430c42e721ec68247
Reviewed-on: https://gerrit.libreoffice.org/30719Tested-by: Jenkins <ci@libreoffice.org>
Reviewed-by: Miklos Vajna <vmiklos@collabora.co.uk>

Sure, using a namespace means we have to decorate each function with the
XMLSECURITY_DLLPUBLIC, but who cares.

Change-Id: If9a364d1be9c5f4cd02f3f146e8b01bd608b373e

The password-to-modify misfeature does not actually provide any
security, but it may induce users to re-use passwords, so at least make
it harder to crack the passwords.

Change-Id: I0adf0e8e11b222fc469013e17a2695bd7122ad01

Given recent elections we need to build a higher wall to keep the
government out of our documents, and we will make the government
pay for it.

These iteration counts were considered appropriate a decade ago.

http://security.stackexchange.com/questions/3959/recommended-of-iterations-when-using-pkbdf2-sha256

We get similar numbers on SandyBridge-E desktop and Haswell i7-4600U laptop:
* with 10k iterations ~20 msec per derivation
* with 100k iterations ~195 msec per derivation
* with 150k iterations ~290 msec per derivation

We can't go too high though because in ODF every package stream gets
its own derived key with a different salt, so a document with embedded
images may need a lot of these.

Change-Id: I6894e71ed399f8c340eff97a9191c8d8419789a6

Change-Id: Id9daf4f5e3208eca8d3d845983b58ab056557621

Change-Id: Ie00840e0b8cff747e131b6bc9def0ddaf57edea7

Change-Id: I0970a86d65aa905cbd02d892be08de8962731e8b