Signed version/submitting to Mozilla?

Android-specific support, bug reports and feature requests.
RichZzz
Posts: 13
Joined: Sat May 29, 2010 10:04 pm

Signed version/submitting to Mozilla?

Post by RichZzz » Thu Nov 05, 2015 3:12 pm

Hi,

I am getting slightly nervous that one of the most important plugins could be locked out on Android in the near future.

What are the plans? I could probably submit a copy of the plugin and get it signed for "unlisted" use but there must be many more users?

TIA
Richard

trevordavies
Posts: 1
Joined: Mon Mar 07, 2016 1:12 am

Re: Signed version/submitting to Mozilla?

Post by trevordavies » Mon Mar 07, 2016 1:22 am

The future is now.

Firefox Android 47.0a1 (2016-03-06) from https://nightly.mozilla.org/
Hitting https://noscript.net/nsa/latest/
Redirects to http://support.mozilla.org/1/mobile/47.0a1/Android/en-US/unsigned-addons

Blocked :-(

RichZzz
Posts: 13
Joined: Sat May 29, 2010 10:04 pm

Re: Signed version/submitting to Mozilla?

Post by RichZzz » Mon Mar 07, 2016 9:12 pm

It is now very easy to create a signed version with

Code: Select all

jpm sign --xpi /path/to/your-addon.xpi --api-key ... --api-secret 
for anyone who has an account on AMO. No review or anything else required. So in principle every user could do that but that would cause problems later once (hopefully?) Noscript will be officially listed and signed.

js_blocker
Posts: 17
Joined: Tue Dec 02, 2014 1:14 pm

Re: Signed version/submitting to Mozilla?

Post by js_blocker » Sat Mar 12, 2016 9:01 am

Well, 46.0b1 installed, nsa a10 not working because it's not signed yet. Quick-fix: I toggled "xpinstall.signatures.required" to false. Firefox did not disintegrate ;)

Noidly1
Posts: 11
Joined: Wed Jul 27, 2016 3:59 am

Re: Signed version/submitting to Mozilla?

Post by Noidly1 » Wed Jul 27, 2016 4:08 am

js_blocker wrote: Quick-fix: I toggled "xpinstall.signatures.required" to false. Firefox did not disintegrate ;)

I tried that and as well with no luck so I added xpinstall.enabled set to true and ff still blocked it. Hmm... :|

barbaz
Senior Member
Posts: 8789
Joined: Sat Aug 03, 2013 5:45 pm

Re: Signed version/submitting to Mozilla?

Post by barbaz » Wed Jul 27, 2016 4:58 am

Noidly1 wrote:
js_blocker wrote: Quick-fix: I toggled "xpinstall.signatures.required" to false. Firefox did not disintegrate ;)

I tried that and as well with no luck

Because Mozilla has now disabled that preference from having any effect: https://bugzilla.mozilla.org/show_bug.cgi?id=1233199
*Always* check the changelogs BEFORE updating that important software!

Noidly1
Posts: 11
Joined: Wed Jul 27, 2016 3:59 am

Re: Signed version/submitting to Mozilla?

Post by Noidly1 » Wed Jul 27, 2016 4:16 pm

barbaz wrote:
Noidly1 wrote:
js_blocker wrote: Quick-fix: I toggled "xpinstall.signatures.required" to false. Firefox did not disintegrate ;)

I tried that and as well with no luck

Because Mozilla has now disabled that preference from having any effect: https://bugzilla.mozilla.org/show_bug.cgi?id=1233199

Figures...

A while back I downloaded the offline installer for ff 28 for windows for future needs and love that browser.
I just tried searching for legacy versions on their site to no avail.
Do you know where to find older versions so I can get around this "fix"?

barbaz
Senior Member
Posts: 8789
Joined: Sat Aug 03, 2013 5:45 pm

Re: Signed version/submitting to Mozilla?

Post by barbaz » Wed Jul 27, 2016 4:17 pm

https://ftp.mozilla.org/pub/

Warning: Old Firefox versions contain publicly known vulnerabilities. Proceed at your own risk.
*Always* check the changelogs BEFORE updating that important software!

Noidly1
Posts: 11
Joined: Wed Jul 27, 2016 3:59 am

Re: Signed version/submitting to Mozilla?

Post by Noidly1 » Wed Jul 27, 2016 4:34 pm

Cool. Thanks.
Just looked up ver28 and see two different linux versions
ftp.mozilla.org/pub/firefox/releases/28.0b9/linux-i686
ftp.mozilla.org/pub/firefox/releases/28.0b9/linux-x86_64

I don't know which would work on a samsung tablet.
Assuming android uses the linux kernel, a non-hacker like me, would think it should work...

barbaz
Senior Member
Posts: 8789
Joined: Sat Aug 03, 2013 5:45 pm

Re: Signed version/submitting to Mozilla?

Post by barbaz » Wed Jul 27, 2016 5:46 pm

Android may have the Linux kernel, but it's not a "regular" Linux system so I doubt either would work. Also it's a really bad idea to use a beta version that old for any purpose other than regression testing.

I don't use any of these mobile devices, so I'd only be guessing, but try this one?
https://ftp.mozilla.org/pub/mobile/releases/28.0.1/
*Always* check the changelogs BEFORE updating that important software!

Noidly1
Posts: 11
Joined: Wed Jul 27, 2016 3:59 am

Re: Signed version/submitting to Mozilla?

Post by Noidly1 » Wed Jul 27, 2016 5:59 pm

Ok, I just did some leg work and found out my cpu is an ARMv7.
So I checked out the latest ff47 folder and and didn't find any sub-folders for android systems.
I did find sub-folders for 2 linux Intel installers, i686 and x86_64 as well as windows and mac.
That is odd. How is it that you can get ff47 for android on google play store but not in the archives???
I guess I have to figuer out if this ARMv7 is 32 bit or 64 bit and try and see if one of the older linux installers will work.

barbaz
Senior Member
Posts: 8789
Joined: Sat Aug 03, 2013 5:45 pm

Re: Signed version/submitting to Mozilla?

Post by barbaz » Wed Jul 27, 2016 6:05 pm

Did you see my last post?

The Linux builds you're trying to use will *not* work on ARM! They are only intended for amd64 or Intel processors, and are binary-incompatible with other architectures. We are not able to help you clean up any mess you make of your system trying to fight that fact.
*Always* check the changelogs BEFORE updating that important software!

Noidly1
Posts: 11
Joined: Wed Jul 27, 2016 3:59 am

Re: Signed version/submitting to Mozilla?

Post by Noidly1 » Wed Jul 27, 2016 6:06 pm

barbaz wrote:Android may have the Linux kernel, but it's not a "regular" Linux system so I doubt either would work. Also it's a really bad idea to use a beta version that old for any purpose other than regression testing.

I don't use any of these mobile devices, so I'd only be guessing, but try this one?
https://ftp.mozilla.org/pub/mobile/releases/28.0.1/

I typed b4 for I saw this. I don't know how much difference there is between ARMv6 nd ARMv7.
Also, being that android seems to be gnome based, I don't know how a kde version would work or if that is what ff28 is.

Noidly1
Posts: 11
Joined: Wed Jul 27, 2016 3:59 am

Re: Signed version/submitting to Mozilla?

Post by Noidly1 » Wed Jul 27, 2016 6:08 pm

barbaz wrote:Did you see my last post?

The Linux builds you're trying to use will *not* work on ARM! They are only intended for amd64 or Intel processors, and are binary-incompatible with other architectures. We are not able to help you clean up any mess you make of your system trying to fight that fact.

Gotcha!

barbaz
Senior Member
Posts: 8789
Joined: Sat Aug 03, 2013 5:45 pm

Re: Signed version/submitting to Mozilla?

Post by barbaz » Wed Jul 27, 2016 6:11 pm

Noidly1 wrote:I don't know how much difference there is between ARMv6 nd ARMv7.

According to http://stackoverflow.com/questions/13647999/armv6-armv7-linking-compatibility ARMv7 is (mostly) ARMv6-compatible.
*Always* check the changelogs BEFORE updating that important software!

Post Reply