Bug #3401
open
Firefox extension is unsigned
0%
Description
Steps to reproduce:
- download
ndn-protocol.xpifrom GitHub repository - drag the downloaded file into Firefox 43.0 for Linux Mint
Expected: add-on is installed
Actual: "This add-on could not be installed because it has not been verified"
Solution: sign the add-on
Updated by Junxiao Shi over 8 years ago
This issue is urgent because it effectively prevents anyone from installing the add-on.
NFD call recording distribution currently depends on this add-on.
Updated by Anonymous over 8 years ago
- Assignee set to Anonymous
The add-on is now signed. I did not list on the Mozilla add-ons site so that the signing process is automatic. Of course, needing to sign makes it more difficult for developers to experiment with updates to the add-on. A developer could sign the add-on separately, but I think they would need to change the name of the add-on. Some choices:
- Explain to developers how to use about:config to temporarily disable the signing requirement for all add-ons.
- Provide an easy way to change the name of the add-on so that a developer can submit it to be signed.
What do you think?
Updated by Junxiao Shi over 8 years ago
The add-on GUID, along with other parameters for invoking signing API, should be accepted on the ./configure line or in environ.
A link to documentation on how to disable signing requirement should be included, so that a developer can debug the add-on.
This is only for debugging, not for redistribution.
Updated by Anonymous over 8 years ago
- Project changed from 3 to NDN in the browser
Updated by Anonymous over 8 years ago
Hi Junxiao. I found this FAQ from Mozilla. The recommendation for developing and experimenting with add-ons is to use the "unbranded" build which is the same as the release build but has an about:config setting to allow unsigned add-ons. (It's unpractical to submit a new version to be signed with every change during development.) I'll update the instructions to use the unbranded build.
https://wiki.mozilla.org/Add-ons/Extension_Signing#FAQ
Updated by Anonymous about 8 years ago
Mozilla now says that the unbranded version will be available for Firefox 46, scheduled for April 19.
https://blog.mozilla.org/addons/2016/01/22/add-on-signing-update/
In the mean time the recommended solution for testing is to use about:config to set xpinstall.signatures.required to false. We'll keep this issue open until the unbranded version is available.
Updated by Anonymous about 8 years ago
- Priority changed from Urgent to Normal
The Firefox 46 release is delayed until April 26.
Updated by Anonymous almost 8 years ago
My Firefox updated to version 46, and setting xpinstall.signatures.required to false still works. Maybe now we wait for Firefox 47 on June 7?