Issue 54279

Summary:	SecurityEnvironment::verify returns unnessicaryly INVALID
Product:	xml	Reporter:	joachim.lingner
Component:	code	Assignee:	AOO issues mailing list <issues>
Status:	ACCEPTED ---	QA Contact:
Severity:	Trivial
Priority:	P3	CC:	issues
Version:	680m125	Keywords:	security
Target Milestone:	4.x
Hardware:	All
OS:	Windows XP
Issue Type:	DEFECT	Latest Confirmation in:	---
Developer Difficulty:	---

Description joachim.lingner 2005-09-06 17:23:37 UTC

The service com::sun::star::xml::crypto::SecurityEnvironment can be used to
verify certificates. Verification of a certificate can return a combination of
these values:

com::sun::star::security::CertificateValidity::INVALID
com::sun::star::security::CertificateValidity::UNKNOWN_REVOKATION

When one examines the certificate in the internet options dialog then the
certificate and its root certificate are displayed as valid.

The reason for this return value is a mapping from the platform dependent error
code:
CERT_TRUST_REVOCATION_STATUS_UNKNOWN 

I suppose that this is the result of a missing Certificate Distribution Point
extension in the certificates. The Windows certificate dialog seems to ignore this.
I propose to change the service so that CERT_TRUST_REVOCATION_STATUS_UNKNOWN 
does not result in returning CertificateValidity::Invalid. So that the calling
application can decide if it regards the certificate as trustworthy.

I've found a good article about the certificate handling in Windows:
http://www.microsoft.com/technet/security/topics/cryptographyetc/tshtcrl.mspx?#i

Comment 1 malte_timmermann 2005-10-04 17:43:38 UTC

Your task now ;)

Comment 2 malte_timmermann 2005-10-04 17:51:21 UTC

but now...

Comment 3 kai.sommerfeld 2006-02-14 15:01:44 UTC

Comment 4 joachim.lingner 2006-03-21 16:16:24 UTC

Comment 5 kai.sommerfeld 2006-06-15 15:35:45 UTC

Comment 6 joachim.lingner 2008-01-24 10:50:06 UTC

Retargeted to 3.0