xmlsecurity/source/xmlsec/mscrypt/xmlsignature_mscryptimpl.cxx |    1 +
 1 file changed, 1 insertion(+)

New commits:
commit c61a5f5657bc259accc2d05d9c628050db2153c1
Author:     Miklos Vajna <vmik...@collabora.com>
AuthorDate: Wed Jan 29 09:40:46 2025 +0100
Commit:     Michael Weghorn <m.wegh...@posteo.de>
CommitDate: Tue Feb 11 22:20:18 2025 +0100

    tdf#161872 xmlsecurity mscrypt: don't require trusted signing certs
    
    See commit 1817760f56b74e47120c1b4d7641fbaebcf378ad (tdf#161872
    xmlsecurity nss: don't require trusted signing certs, 2025-01-28), this
    is the same situation, but this time on Windows.
    
    Change-Id: I945899da47ab5dcc421f35db31ec7af240c59b8c
    Reviewed-on: https://gerrit.libreoffice.org/c/core/+/180881
    Reviewed-by: Miklos Vajna <vmik...@collabora.com>
    Tested-by: Jenkins
    (cherry picked from commit ec9dbbe288ccb759ed95533fb849dac8a65c4a6b)
    Reviewed-on: https://gerrit.libreoffice.org/c/core/+/180886
    Reviewed-by: Moritz Duge <moritz.d...@allotropia.de>
    Reviewed-by: Xisco Fauli <xiscofa...@libreoffice.org>
    (cherry picked from commit b9c8f8a0fb0f56fc91b4882afcc06041796f1ca3)
    Reviewed-on: https://gerrit.libreoffice.org/c/core/+/181050
    (cherry picked from commit 83a67cfbde00887b5e158e1026d0b6c2cadff3b4)
    Reviewed-on: https://gerrit.libreoffice.org/c/core/+/181366
    Tested-by: Michael Weghorn <m.wegh...@posteo.de>
    Reviewed-by: Michael Weghorn <m.wegh...@posteo.de>
    Reviewed-by: Ilmari Lauhakangas <ilmari.lauhakan...@libreoffice.org>

diff --git a/xmlsecurity/source/xmlsec/mscrypt/xmlsignature_mscryptimpl.cxx 
b/xmlsecurity/source/xmlsec/mscrypt/xmlsignature_mscryptimpl.cxx
index 581249292f1a..1014addbff27 100644
--- a/xmlsecurity/source/xmlsec/mscrypt/xmlsignature_mscryptimpl.cxx
+++ b/xmlsecurity/source/xmlsec/mscrypt/xmlsignature_mscryptimpl.cxx
@@ -143,6 +143,7 @@ SAL_CALL XMLSignature_MSCryptImpl::generate(
     }
 
     //Sign the template
+    pDsigCtx->keyInfoReadCtx.flags |= 
XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS;
     if( xmlSecDSigCtxSign( pDsigCtx , pNode ) == 0 )
     {
         if (pDsigCtx->status == xmlSecDSigStatusSucceeded)

Reply via email to