Hash for .xpi ?

Ask for help about NoScript, no registration needed to post
Jamochaz

Hash for .xpi ?

Post by Jamochaz » Thu Jan 23, 2020 10:38 am

Hello.

May you please direct me to the correct area to check a download hash of a NoScript downloaded .xpi ?

Thank you.
Mozilla/5.0 (X11; Linux x86_64; rv:68.9) Gecko/20100101 Goanna/4.4 Firefox/68.9 Basilisk/20200112

User avatar
Giorgio Maone
Site Admin
Posts: 8771
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: Hash for .xpi ?

Post by Giorgio Maone » Thu Jan 23, 2020 10:43 am

Currently there's none, since XPIs are digitally signed by Mozilla, the signature is automatically verified by Firefox and installation fails if it's missing or invalid.
What do you need the hash for?
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0

Jamochaz

Re: Hash for .xpi ?

Post by Jamochaz » Thu Jan 23, 2020 1:01 pm

Thank you Giorgio.

I need a hash to check the downloaded .xpi to make sure it has not been
corrupted in the download process.

I'm wishing to use 5.1.9 / PaleMoon and the "Install Add-On From File", but would like to verify
the hash of the downloaded file before installing.

May I please ask for the hash (md5sum or sha256sum) for;
https://secure.informaction.com/downloa ... -5.1.9.xpi

Thanks much.
Mozilla/5.0 (X11; Linux x86_64; rv:68.9) Gecko/20100101 Goanna/4.4 Firefox/68.9 Basilisk/20200112

User avatar
therube
Ambassador
Posts: 7518
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: Hash for .xpi ?

Post by therube » Thu Jan 23, 2020 1:20 pm

That is a good point actually, because... 5.1.8.7rc4 is not signed.
s/5.1.8.7rc4 is not/5.1.8.7rc4 & later [legacy versions] are not/

I can only give you what I just downloaded: SHA256 00097023E9015986234AD9AD349E64487674794937EEC143760AD4D622CF2027
And Virustotal: https://www.virustotal.com/gui/file/000 ... /detection
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0 SeaMonkey/2.53.2 Lightning/5.8.1

User avatar
therube
Ambassador
Posts: 7518
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: Hash for .xpi ?

Post by therube » Thu Jan 23, 2020 1:24 pm

Install Add-On From File
What is that?

In any case, NoScript 5 will work directly with PM, simply drag the .xpi into PM & it will install.
You then need to specifically Enable it & restart PM.
NoScript is verboten in PM-Land (& has its own thread there - for those that use it regardless).


Oh, & it appears that PM ignores /META-INF/, totally.
It can be there, or not.
(Similarly with SeaMonkey.)
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0 SeaMonkey/2.53.2 Lightning/5.8.1

User avatar
Giorgio Maone
Site Admin
Posts: 8771
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: Hash for .xpi ?

Post by Giorgio Maone » Thu Jan 23, 2020 7:46 pm

Jamochaz wrote:
Thu Jan 23, 2020 1:01 pm
I'm wishing to use 5.1.9 / PaleMoon and the "Install Add-On From File", but would like to verify
the hash of the downloaded file before installing.

May I please ask for the hash (md5sum or sha256sum) for;
https://secure.informaction.com/downloa ... -5.1.9.xpi
Sorry, I didn't understand you meant the latest classic version.
As therube said, excellent point: therefore I've added SHA256 info for all the legacy XPIs referenced on the download page.
Thanks for raising it.
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0

Jamochaz

Re: Hash for .xpi ?

Post by Jamochaz » Fri Jan 24, 2020 12:35 pm

Thank you much.

No one should surf the Web without NoScript !

Ciao.
Mozilla/5.0 (X11; Linux x86_64; rv:68.9) Gecko/20100101 Goanna/4.4 Firefox/68.9 PaleMoon/28.8.1

Post Reply