1cdf0e10cSrcweir<?xml version="1.0" encoding="UTF-8"?>
2cdf0e10cSrcweir<helpdocument version="1.0">
3cdf0e10cSrcweir
4*226a8927SAndrew Rist<!--***********************************************************
5cdf0e10cSrcweir *
6*226a8927SAndrew Rist * Licensed to the Apache Software Foundation (ASF) under one
7*226a8927SAndrew Rist * or more contributor license agreements.  See the NOTICE file
8*226a8927SAndrew Rist * distributed with this work for additional information
9*226a8927SAndrew Rist * regarding copyright ownership.  The ASF licenses this file
10*226a8927SAndrew Rist * to you under the Apache License, Version 2.0 (the
11*226a8927SAndrew Rist * "License"); you may not use this file except in compliance
12*226a8927SAndrew Rist * with the License.  You may obtain a copy of the License at
13*226a8927SAndrew Rist *
14*226a8927SAndrew Rist *   http://www.apache.org/licenses/LICENSE-2.0
15*226a8927SAndrew Rist *
16*226a8927SAndrew Rist * Unless required by applicable law or agreed to in writing,
17*226a8927SAndrew Rist * software distributed under the License is distributed on an
18*226a8927SAndrew Rist * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
19*226a8927SAndrew Rist * KIND, either express or implied.  See the License for the
20*226a8927SAndrew Rist * specific language governing permissions and limitations
21*226a8927SAndrew Rist * under the License.
22*226a8927SAndrew Rist *
23*226a8927SAndrew Rist ***********************************************************-->
24*226a8927SAndrew Rist
25*226a8927SAndrew Rist
26cdf0e10cSrcweir
27cdf0e10cSrcweir
28cdf0e10cSrcweir<meta>
29cdf0e10cSrcweir      <topic id="textsharedguidedigitalsign_sendxhp" indexer="include" status="PUBLISH">
30cdf0e10cSrcweir         <title xml-lang="en-US" id="tit">Applying Digital Signatures</title>
31cdf0e10cSrcweir         <filename>/text/shared/guide/digitalsign_send.xhp</filename>
32cdf0e10cSrcweir      </topic>
33cdf0e10cSrcweir   </meta>
34cdf0e10cSrcweir   <body>
35cdf0e10cSrcweir<bookmark xml-lang="en-US" branch="index" id="bm_id7430951"><bookmark_value>signing documents with digital signatures</bookmark_value>
36cdf0e10cSrcweir      <bookmark_value>digital signatures;getting/managing/applying</bookmark_value>
37cdf0e10cSrcweir</bookmark><comment>mw transferred one entry from digital_signatures.xhp and added a new entry</comment>
38cdf0e10cSrcweir<paragraph xml-lang="en-US" id="hd_id344248" role="heading" level="1" l10n="NEW"><variable id="digitalsign_send"><link href="text/shared/guide/digitalsign_send.xhp">Applying Digital Signatures</link>
39cdf0e10cSrcweir</variable></paragraph><comment>MW created this file by splitting shared/guide/digital_signatures.xhp</comment>
40cdf0e10cSrcweir<paragraph xml-lang="en-US" id="par_idN1063C" role="heading" level="2" l10n="NEW">Getting a Certificate</paragraph>
41cdf0e10cSrcweir      <paragraph xml-lang="en-US" id="par_idN10640" role="paragraph" l10n="NEW">You can get a certificate from a certification authority, which may be a private company or a governmental institution. Some certification authorities want money for their service, for example when they certify your identity. Other certificates are free of costs, for example those offered by some e-mail providers, which certify your e-mail address. A few of the companies that offer certificates to private persons are listed in the following, in alphabetical order: <link href="http://www.globalsign.net">GlobalSign</link>, <link href="http://www.verisign.com">Verisign</link>.</paragraph>
42cdf0e10cSrcweir      <paragraph xml-lang="en-US" id="par_idN106F6" role="heading" level="2" l10n="NEW">Managing your Certificates</paragraph>
43cdf0e10cSrcweir<switch select="sys">
44cdf0e10cSrcweir<case select="WIN">
45cdf0e10cSrcweir<paragraph xml-lang="en-US" id="par_idN1070A" role="paragraph" l10n="NEW">If you are using Microsoft Windows, you can manage your certificates from the Control Panel applet "Internet Options" on the "Contents" tab page.</paragraph>
46cdf0e10cSrcweir      <paragraph xml-lang="en-US" id="par_id8311410" role="paragraph" l10n="NEW">Import your new root certificate into the Trusted Root Certification Authorities list.</paragraph>
47cdf0e10cSrcweir</case>
48cdf0e10cSrcweir<default>
49cdf0e10cSrcweir<paragraph xml-lang="en-US" id="par_idN1071D" role="paragraph" l10n="NEW">If you are using Solaris or Linux, you must install a recent version of Thunderbird, Mozilla Suite, or Firefox software to install some system files that are needed for encryption.<comment>how about Mac OS X?</comment></paragraph>
50cdf0e10cSrcweir      <paragraph xml-lang="en-US" id="par_idN10720" role="tip" l10n="NEW">If you have created different profiles in Thunderbird, Mozilla, or Firefox, and you want %PRODUCTNAME to use one specified profile for certificates, then you can set the environment variable MOZILLA_CERTIFICATE_FOLDER to point to the folder of that specified profile.</paragraph>
51cdf0e10cSrcweir      <list type="ordered">
52cdf0e10cSrcweir         <listitem>
53cdf0e10cSrcweir            <paragraph xml-lang="en-US" id="par_id944242" role="paragraph" l10n="NEW">Open your Web browser's preferences dialog, select the Privacy &amp; Security tab page, click on Certificates - Manage Certificates. </paragraph>
54cdf0e10cSrcweir         </listitem>
55cdf0e10cSrcweir         <listitem>
56cdf0e10cSrcweir            <paragraph xml-lang="en-US" id="par_id6452223" role="paragraph" l10n="NEW">Import your new root certificate, then select and edit the certificate. Enable the root certificate to be trusted at least for web and email access. This ensures that the certificate can sign your documents. You may edit any intermediate certificate in the same way, but it is not mandatory for signing documents.</paragraph>
57cdf0e10cSrcweir         </listitem>
58cdf0e10cSrcweir         <listitem>
59cdf0e10cSrcweir            <paragraph xml-lang="en-US" id="par_id6486098" role="paragraph" l10n="NEW">When you have edited the new certificates, restart %PRODUCTNAME.</paragraph>
60cdf0e10cSrcweir         </listitem>
61cdf0e10cSrcweir      </list>
62cdf0e10cSrcweir</default>
63cdf0e10cSrcweir</switch>
64cdf0e10cSrcweir<paragraph xml-lang="en-US" id="par_idN10681" role="heading" level="2" l10n="NEW">Signing a document</paragraph>
65cdf0e10cSrcweir      <list type="ordered">
66cdf0e10cSrcweir         <listitem>
67cdf0e10cSrcweir            <paragraph xml-lang="en-US" id="par_idN10688" role="paragraph" l10n="NEW">Choose <emph>File - Digital Signatures</emph>.</paragraph>
68cdf0e10cSrcweir         </listitem>
69cdf0e10cSrcweir         <listitem>
70cdf0e10cSrcweir            <paragraph xml-lang="en-US" id="par_idN10690" role="paragraph" l10n="NEW">A message box advises you to save the document. Click <emph>Yes</emph> to save the file.</paragraph>
71cdf0e10cSrcweir         </listitem>
72cdf0e10cSrcweir         <listitem>
73cdf0e10cSrcweir            <paragraph xml-lang="en-US" id="par_idN10698" role="paragraph" l10n="NEW">After saving, you see the <link href="text/shared/01/digitalsignatures.xhp">Digital Signatures</link> dialog. Click <emph>Add</emph> to add a public key to the document.</paragraph>
74cdf0e10cSrcweir         </listitem>
75cdf0e10cSrcweir         <listitem>
76cdf0e10cSrcweir            <paragraph xml-lang="en-US" id="par_idN106AE" role="paragraph" l10n="NEW">In the <link href="text/shared/01/selectcertificate.xhp">Select Certificate</link> dialog, select your certificate and click OK. </paragraph>
77cdf0e10cSrcweir         </listitem>
78cdf0e10cSrcweir         <listitem>
79cdf0e10cSrcweir            <paragraph xml-lang="en-US" id="par_idN106C0" role="paragraph" l10n="NEW">You see again the Digital Signatures dialog, where you can add more certificates if you want. Click OK to add the public key to the saved file.</paragraph>
80cdf0e10cSrcweir         </listitem>
81cdf0e10cSrcweir      </list>
82cdf0e10cSrcweir      <paragraph xml-lang="en-US" id="par_idN106C3" role="paragraph" l10n="NEW">A signed document shows an icon
83cdf0e10cSrcweir<image id="img_id262764" src="xmlsecurity/res/certificate_16.png" width="0.2228in" height="0.2228in"><alt xml-lang="en-US" id="alt_id262764">Icon</alt>
84cdf0e10cSrcweir	</image> in the status bar. You can double-click the icon in the status bar to view the certificate.</paragraph>
85cdf0e10cSrcweir      <paragraph xml-lang="en-US" id="par_id2008200911381426" role="paragraph" l10n="NEW">The result of the signature validation is displayed in the status bar and within the Digital Signature dialog. Several documents and macro signatures can exist inside an ODF document. If there is a problem with one signature, then the validation result of that one signature is assumed for all signatures. That is, if there are ten valid signatures and one invalid signature, then the status bar and the status field in the dialog will flag the signature as invalid.</paragraph>
86cdf0e10cSrcweir      <paragraph xml-lang="en-US" id="par_idN106E0" role="heading" level="2" l10n="NEW">Signing the macros inside a document</paragraph>
87cdf0e10cSrcweir      <paragraph xml-lang="en-US" id="par_idN106E4" role="paragraph" l10n="NEW">Normally, macros are part of a document. If you sign a document, the macros inside the document are signed automatically. If you want to sign only the macros, but not the document, proceed as follows:</paragraph>
88cdf0e10cSrcweir      <list type="ordered">
89cdf0e10cSrcweir         <listitem>
90cdf0e10cSrcweir            <paragraph xml-lang="en-US" id="par_idN106EA" role="paragraph" l10n="NEW">Choose <emph>Tools - Macros - Digital Signature</emph>.</paragraph>
91cdf0e10cSrcweir         </listitem>
92cdf0e10cSrcweir         <listitem>
93cdf0e10cSrcweir            <paragraph xml-lang="en-US" id="par_idN106F2" role="paragraph" l10n="NEW">Apply the signature as described above for documents.</paragraph>
94cdf0e10cSrcweir         </listitem>
95cdf0e10cSrcweir      </list>
96cdf0e10cSrcweir      <paragraph xml-lang="en-US" id="par_idN106F5" role="paragraph" l10n="NEW">When you open the Basic IDE that contains signed macros, you see an icon
97cdf0e10cSrcweir<image id="img_id9252296" src="xmlsecurity/res/certificate_16.png" width="0.2228in" height="0.2228in"><alt xml-lang="en-US" id="alt_id9252296">Icon</alt>
98cdf0e10cSrcweir	</image> in the status bar. You can double-click the icon in the status bar to view the certificate.</paragraph><comment>WebDAV see issue 32935</comment><comment>main dialog IDs are here to lead the user initially to this help page</comment><comment>Examine certificate button</comment>
99cdf0e10cSrcweir<!-- removed HID 1311740419 -->
100cdf0e10cSrcweir<paragraph xml-lang="en-US" id="par_id5734733" role="paragraph" l10n="NEW"><ahelp hid="." visibility="hidden">Click to open the View Certificate dialog.</ahelp></paragraph><comment>Accept this certificate temporarily for this session radio button</comment>
101cdf0e10cSrcweir<!-- removed HID 1311736321 -->
102cdf0e10cSrcweir<paragraph xml-lang="en-US" id="par_id561540" role="paragraph" l10n="NEW"><ahelp hid="." visibility="hidden">Choose this setting to accept the certificate until you exit %PRODUCTNAME.</ahelp></paragraph><comment>Do not accept this certificate and do not connect to this Web site radio button</comment>
103cdf0e10cSrcweir<!-- removed HID 1311736326 -->
104cdf0e10cSrcweir<paragraph xml-lang="en-US" id="par_id7705618" role="paragraph" l10n="NEW"><ahelp hid="." visibility="hidden">Choose this setting to cancel the connection.</ahelp></paragraph>
105cdf0e10cSrcweir      <section id="relatedtopics">
106cdf0e10cSrcweir         <paragraph xml-lang="en-US" id="par_id3204443" role="paragraph" l10n="NEW"><link href="http://wiki.services.openoffice.org/wiki/How_to_use_digital_Signatures">English Wiki page on digital signatures</link></paragraph>
107cdf0e10cSrcweir         <paragraph xml-lang="en-US" id="par_id5166173" role="paragraph" l10n="NEW"><link href="text/shared/guide/digital_signatures.xhp">About digital signatures</link></paragraph>
108cdf0e10cSrcweir      </section>
109cdf0e10cSrcweir   </body>
110cdf0e10cSrcweir</helpdocument>