Contents

# 套用數位簽名

## 取得憑證

You can get a certificate from a certification authority. No matter if you choose a governmental institution or a private company it is common to be charged for this service, for example when they certify your identity. Few other authorities issue certificates free of costs, like the Open Source Project CAcert which is based on the well-known and reliable Web of Trust model and is of growing popularity.

## 管理您的憑證

If you are using Linux, macOS or Solaris, you must install a recent version of Thunderbird or Firefox. LibreOffice will then access their certificate storage.

If you have created different profiles in Thunderbird or Firefox and you want to use certificates from one specific user profile, select the profile in LibreOffice - Preferences Tools - Options - Security - Certificate Path. Alternatively, you can set the environment variable MOZILLA_CERTIFICATE_FOLDER to point to the folder containing that profile.

1. Open your web browser’s preferences, select the Advanced section, click on the Certificates tab, and then choose View Certificates. The Certificate Manager dialog will appear.

2. 匯入新的根憑證，然後選取並編輯該憑證。使根憑證至少受 Web 和電子郵件存取信任。如此可確保憑證可簽署您的文件。您可用相同的方式編輯任何中繼憑證，但對於簽署文件而言不是必要的。

3. 新憑證編輯完成之後，請重新啟動 LibreOffice。

On Windows systems, LibreOffice will access the system certificate storage.

Your private key for the digital signature will usually be generated and securely stored by Windows as part of the signature-issuance process. Once the issuing Certificate Authority is satisfied that your computer produced the private key and you have satisfied any other identification requirements, the corresponding public key is signed by the Certificate Authority. For personal keys obtained over the Internet, the private key is generated by your browser and it is not shared with the Certificate Authority.

If a private key is received by other means or you transfer it from another computer, you can install it on your Windows PC by double-clicking on the private key certificate and providing any required password. This private key may be known to others (such as an organizational or governmental security administration) depending on how it was issued to you.

Public keys of other people used to verify document digital signatures, or encrypt documents for their eyes only, are usually stored in your system with digital certificate-management applications. In some cases you will need to manage those public-key certificates yourself.

The general management of public and private keys on your PC will vary depending on the version of Windows you are operating. For more information, use the "Help and Support" topic of your Windows version and search for "digital signature".

## 簽署文件

1. Choose File - Digital Signatures - Digital Signatures.

2. 訊息方塊會建議您儲存文件。按一下 [是] 以儲存檔案。

3. After saving, you see the Digital Signatures dialog. Click Add to add a public key to the document.

4. In the Select Certificate dialog, select your certificate and click OK.

5. You see again the Digital Signatures dialog, where you can add more certificates if you want. Click OK to add the public key to the saved file.

A signed document shows an icon in the status bar. You can double-click the icon in the status bar to view the certificate.

The result of the signature validation is displayed in the status bar and within the Digital Signature dialog. Several documents and macro signatures can exist inside an ODF document. If there is a problem with one signature, then the validation result of that one signature is assumed for all signatures. That is, if there are ten valid signatures and one invalid signature, then the status bar and the status field in the dialog will flag the signature as invalid.

## 簽署文件內的巨集

巨集通常屬於文件的一部份。如果簽署文件，將會自動簽署該文件內的巨集。如果想要僅簽署巨集，而不簽署文件，請依照下列方式進行：

1. 選擇 [工具] - [巨集] - [數位簽名]。

2. 依以上說明為文件套用簽名。

When you open the Basic IDE that contains signed macros, you see an icon in the status bar.
You can double-click the icon in the status bar to view the certificate.

相關主題

English Wiki page on digital signatures

關於數位簽名

Please support us!