[xmlsec] RE: OpenSSL vs mscrypto

Aleksey Sanin aleksey at aleksey.com
Thu Jan 12 21:36:06 PST 2006


On windows, OO.org uses xmlsec-mscrypto.

Aleksey

Edward Shallow wrote:
> PostScript:
> 
> It seems that OpenOffice.org V2.0 also does not check certificate chains
> when validating a signature. 
> 
> It will show the public issuer in the chain hierarchy (if it is loaded in
> the ROOT store) when you View the Certificate in the Certification Path tab.
> It will not show any hierarchy if it the issuer is not present. That is, it
> will just show the signer's certificate in the 1 line path.
> 
> However it will not display any warning or error if the issuer cannot be
> found.
> 
> I believe OpenOffice.org uses xmlsec with nss.
> 
> Ed




More information about the xmlsec mailing list