Signing: could not be verified for use in Firefox.

[therube]

Signing: [NoScript] could not be verified for use in Firefox. Proceed with caution.

I don't "use" FF.
But this is (at least) the second time I've seen it occur in FF.

Just saying...

IOW, in my opinion, the whole signing mechanism must be borked.
(And that's in addition to, Global installation and extension signing.)

Whatever it is that I may do or not do in a Profile, whatever version of FF I may or may not run in a particular Profile, that should not be breaking signing, but something is occurring that is.

I did note that the extension was named {73a6fe31-595d-460b-a920-fcc0f8843232}.xpi.XXX, with XXX being something that I might have done to purposely "disable" something [not sure in this instance?] (but in the case of /extensions/ that may or may not be effectual). In any case, renaming it back... [made no difference]... but if in extensions.* it happened to ...?

Oh, maybe because?:

Code: Select all

[MultiprocessIncompatibleExtensions]
Extension0={73a6fe31-595d-460b-a920-fcc0f8843232}

No, removing that makes no difference.

[therube]

Reduced Profile:

https://drive.google.com/file/d/0B3rgcO ... sp=sharing
SHA1: f34360b887ca9d671eb241e069f9398c373b512c
594,726 bytes

Create an empty Profile
Extract contents of ZIP into it

Run FF
Ctrl+Shift+A -> Extensions

See if FF doesn't report that NoScript "could not be verified.

FF43Profile_NoScript_reports_as_UNSIGNED.zip:

Code: Select all

extensions/{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [NoScript, signed]
extensions/memchaser@quality.mozilla.org.xpi [Memchaser, just because it was there, but immaterial AFAIK]
extensions.json
extensions.ini
addons.json

You tell me why it fails?

[therube]

extensions.json, it looks like is the cause.

Now, you tell me why that causes it to fail?

extensions.json:

Code: Select all

{"schemaVersion":17,"addons":[{"id":"memchaser@quality.mozilla.org","syncGUID":"iVbwDa9OaBk_","location":"app-profile","version":"0.7","type":"extension","internalName":null,"updateURL":null,"updateKey":null,"optionsURL":null,"optionsType":"2","aboutURL":null,"iconURL":null,"icon64URL":null,"defaultLocale":{"name":"MemChaser","description":"Chasing garbage collection and memory usage","creator":"Firefox Automation Team <dev-automation@lists.mozilla.org>","homepageURL":null,"contributors":["Henrik Skupin (http://www.hskupin.info)","Dave Hunt (http://www.blargon7.com)","Andrew Petersen (http://github.com/kirbysayshi)","Szabolcs Hubai","Uchida Taishi"]},"visible":true,"active":true,"userDisabled":false,"appDisabled":false,"descriptor":"C:\\WLIB\\Mozilla\\USERS\\FF20\\extensions\\memchaser@quality.mozilla.org.xpi","installDate":1446512920857,"updateDate":1446512920857,"applyBackgroundUpdates":1,"bootstrap":true,"size":55447,"sourceURI":"https://addons.mozilla.org/firefox/downloads/latest/360093/addon-360093-latest.xpi?src=dp-btn-primary","releaseNotesURI":null,"softDisabled":false,"foreignInstall":false,"hasBinaryComponents":false,"strictCompatibility":false,"locales":[],"targetApplications":[{"id":"{ec8030f7-c20a-464f-9b0e-13a3a9e97384}","minVersion":"26.0","maxVersion":"43.0a1"}],"targetPlatforms":[],"multiprocessCompatible":false,"signedState":2},{"id":"{73a6fe31-595d-460b-a920-fcc0f8843232}","syncGUID":"Ti1Zb8gjpRsL","location":"app-profile","version":"2.7rc1","type":"extension","internalName":null,"updateURL":null,"updateKey":null,"optionsURL":"chrome://noscript/content/noscriptOptions.xul","optionsType":null,"aboutURL":"chrome://noscript/content/about.xul","iconURL":"chrome://noscript/skin/icon32.png","icon64URL":"chrome://noscript/skin/icon64.png","defaultLocale":{"name":"NoScript","description":"Extra protection for your Firefox: NoScript allows JavaScript, Java (and other plugins) only for trusted domains of your choice (e.g. your home-banking web site). This whitelist based pre-emptive blocking approach  prevents exploitation of security vulnerabilities (known and even unknown!) with no loss of functionality... Experts will agree: Firefox is really safer with NoScript :-)","creator":"Giorgio Maone","homepageURL":"https://noscript.net","contributors":["aivo (Estonian translation)","Alberto Martínez, EduLeo & Urko (Spanish translation)","Algimantas Margevičius (Lithuanian translation)","Asaf Bartov & baryoni (Hebrew translation)","Alf and Liesbeth (Dutch translation)","Alexander Sokolov, Sergei Smirnov and negodnik (Russian translation)","Batuhan Çetin and eveterinary (Turkish translation)","Baurzhan Muftakhidinov (Kazakh translation)","Beerboy & Haebaru (Japanese translation)","Carsten Winkler (Danish translation)","Chiou Po-Jung (Chinese Traditional translation)","Dario Ornelas (Portuguese translation)","drAcOniS and Petr Jirsa (Czech translation)","Drive DRKA and Dzmitry Drazdou (Belarusian translation)","Engin Yazılan, Erkan Kaplan & Fathi  (Turkish translation)","Georgi Marchev (Bulgarian translation)","Håvard Mork (Norwegian bokmål translation)","Hwasung Kim (Places bookmarklet patch)","Ivan Pesic, dragan021 (Serbian translation)","Ivan Jonoski (Macedonian translation)","Jameka (Swedish translation)","Joan-Josep Bargues (Catalan translation)","Joshua Issac (Malay translation)","Khaled Hosny & Nassim Dhaher (Arabic translation)","Krcko (Croatian translation)","Ian Moody (English GB translation)","LocaLiceR (Hungarian translation)","Lukasz Biegaj & Teo (Polish translation)","Michela Venuto (inspiration)","Mika Pirinen (Finnish translation)","Mindaugas Jakutis (Lithuanian translation)","Mikes Kaszmán István (Hungarian translation)","MozUA (Ukrainian translation)","Pedram Veisi (Persian translation)","Peter Bradley (Welsh translation)","Raryel Costa Souza (Brazilian Portuguese)","regfreak (Indonesian translation)","roebek (Galician translation)","Qen (Thai translation)","seaousak (Korean translation)","SlovakSoft (Slovak translation)","Sonickydon (Greek translation)","Stiepan A. Kovac (Croatian translation)","swarnava (Bengali translation)","Tomaz Macus (Slovenian translation)","Thomas Weber & Volker Hable (German translation)","tonynguyen and loveleeyoungae (Vietnamese translation)","x10firefox and Ultravioletu (Romanian translation)","Xavier Robin & BlackJack (French translation)","X.F Mao & George C. Tsoi (Simplified Chinese)"]},"visible":true,"active":false,"userDisabled":false,"appDisabled":true,"descriptor":"C:\\WLIB\\Mozilla\\USERS\\FF20\\extensions\\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi","installDate":1448224584000,"updateDate":1448224584000,"applyBackgroundUpdates":1,"bootstrap":false,"size":2180716,"sourceURI":null,"releaseNotesURI":null,"softDisabled":false,"foreignInstall":true,"hasBinaryComponents":false,"strictCompatibility":false,"locales":[],"targetApplications":[{"id":"{ec8030f7-c20a-464f-9b0e-13a3a9e97384}","minVersion":"3.0.9","maxVersion":"45.0"},{"id":"{a463f10c-3994-11da-9945-000d60ca027b}","minVersion":"0.4","maxVersion":"2.0.*"},{"id":"{92650c4d-4b8e-4d2a-b7eb-24ecf4f6b63a}","minVersion":"2.0","maxVersion":"2.41"},{"id":"{aa5ca914-c309-495d-91cf-3141bbb04115}","minVersion":"0.2","maxVersion":"3.1.*"},{"id":"dlm@emusic.com","minVersion":"1.0a4","maxVersion":"1.0.0.*"},{"id":"toolkit@mozilla.org","minVersion":"1.9a2","maxVersion":"1.9.6"},{"id":"songbird@songbirdnest.com","minVersion":"0.7","maxVersion":"1.2.0"},{"id":"{a23983c0-fd0e-11dc-95ff-0800200c9a66}","minVersion":"1.0","maxVersion":"2.0a1pre"}],"targetPlatforms":[],"multiprocessCompatible":false,"signedState":1},{"id":"{972ce4c6-7e08-4474-a285-3208198ce6fd}","syncGUID":"IhRFcPJna2Si","location":"app-global","version":"43.0","type":"theme","internalName":"classic/1.0","updateURL":null,"updateKey":null,"optionsURL":null,"optionsType":null,"aboutURL":null,"iconURL":null,"icon64URL":null,"defaultLocale":{"name":"Default","description":"The default theme.","creator":"Mozilla","homepageURL":null,"contributors":["Mozilla Contributors"]},"visible":true,"active":true,"userDisabled":false,"appDisabled":false,"descriptor":"C:\\WLIB\\FIREFOX\\FF43\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}","installDate":1449761181000,"updateDate":1449761181000,"applyBackgroundUpdates":1,"skinnable":true,"size":24166,"sourceURI":null,"releaseNotesURI":null,"softDisabled":false,"foreignInstall":false,"hasBinaryComponents":false,"strictCompatibility":true,"locales":[],"targetApplications":[{"id":"{ec8030f7-c20a-464f-9b0e-13a3a9e97384}","minVersion":"43.0","maxVersion":"43.0"}],"targetPlatforms":[]}]}

A bit more readable:

Code: Select all

{"schemaVersion"
:17,"addons"
:[{"id"
:"memchaser@quality.mozilla.org","syncGUID"
:"iVbwDa9OaBk_","location"
:"app-profile","version"
:"0.7","type"
:"extension","internalName"
:null,"updateURL"
:null,"updateKey"
:null,"optionsURL"
:null,"optionsType"
:"2","aboutURL"
:null,"iconURL"
:null,"icon64URL"
:null,"defaultLocale"
:{"name"
:"MemChaser","description"
:"Chasing garbage collection and memory usage","creator"
:"Firefox Automation Team <dev-automation@lists.mozilla.org>","homepageURL"
:null,"contributors"
:["Henrik Skupin (http
://www.hskupin.info)","Dave Hunt (http
://www.blargon7.com)","Andrew Petersen (http
://github.com/kirbysayshi)","Szabolcs Hubai","Uchida Taishi"]},"visible"
:true,"active"
:true,"userDisabled"
:false,"appDisabled"
:false,"descriptor"
:"C
:\\WLIB\\Mozilla\\USERS\\FF20\\extensions\\memchaser@quality.mozilla.org.xpi","installDate"
:1446512920857,"updateDate"
:1446512920857,"applyBackgroundUpdates"
:1,"bootstrap"
:true,"size"
:55447,"sourceURI"
:"https
://addons.mozilla.org/firefox/downloads/latest/360093/addon-360093-latest.xpi?src=dp-btn-primary","releaseNotesURI"
:null,"softDisabled"
:false,"foreignInstall"
:false,"hasBinaryComponents"
:false,"strictCompatibility"
:false,"locales"
:[],"targetApplications"
:[{"id"
:"{ec8030f7-c20a-464f-9b0e-13a3a9e97384}","minVersion"
:"26.0","maxVersion"
:"43.0a1"}],"targetPlatforms"
:[],"multiprocessCompatible"
:false,"signedState"
:2},{"id"
:"{73a6fe31-595d-460b-a920-fcc0f8843232}","syncGUID"
:"Ti1Zb8gjpRsL","location"
:"app-profile","version"
:"2.7rc1","type"
:"extension","internalName"
:null,"updateURL"
:null,"updateKey"
:null,"optionsURL"
:"chrome
://noscript/content/noscriptOptions.xul","optionsType"
:null,"aboutURL"
:"chrome
://noscript/content/about.xul","iconURL"
:"chrome
://noscript/skin/icon32.png","icon64URL"
:"chrome
://noscript/skin/icon64.png","defaultLocale"
:{"name"
:"NoScript","description"
:"Extra protection for your Firefox
: NoScript allows JavaScript, Java (and other plugins) only for trusted domains of your choice (e.g. your home-banking web site). This whitelist based pre-emptive blocking approach  prevents exploitation of security vulnerabilities (known and even unknown!) with no loss of functionality... Experts will agree
: Firefox is really safer with NoScript 
:-)","creator"
:"Giorgio Maone","homepageURL"
:"https
://noscript.net","contributors"
:["aivo (Estonian translation)","Alberto Martínez, EduLeo & Urko (Spanish translation)","Algimantas Margevičius (Lithuanian translation)","Asaf Bartov & baryoni (Hebrew translation)","Alf and Liesbeth (Dutch translation)","Alexander Sokolov, Sergei Smirnov and negodnik (Russian translation)","Batuhan Çetin and eveterinary (Turkish translation)","Baurzhan Muftakhidinov (Kazakh translation)","Beerboy & Haebaru (Japanese translation)","Carsten Winkler (Danish translation)","Chiou Po-Jung (Chinese Traditional translation)","Dario Ornelas (Portuguese translation)","drAcOniS and Petr Jirsa (Czech translation)","Drive DRKA and Dzmitry Drazdou (Belarusian translation)","Engin Yazılan, Erkan Kaplan & Fathi  (Turkish translation)","Georgi Marchev (Bulgarian translation)","Håvard Mork (Norwegian bokmål translation)","Hwasung Kim (Places bookmarklet patch)","Ivan Pesic, dragan021 (Serbian translation)","Ivan Jonoski (Macedonian translation)","Jameka (Swedish translation)","Joan-Josep Bargues (Catalan translation)","Joshua Issac (Malay translation)","Khaled Hosny & Nassim Dhaher (Arabic translation)","Krcko (Croatian translation)","Ian Moody (English GB translation)","LocaLiceR (Hungarian translation)","Lukasz Biegaj & Teo (Polish translation)","Michela Venuto (inspiration)","Mika Pirinen (Finnish translation)","Mindaugas Jakutis (Lithuanian translation)","Mikes Kaszmán István (Hungarian translation)","MozUA (Ukrainian translation)","Pedram Veisi (Persian translation)","Peter Bradley (Welsh translation)","Raryel Costa Souza (Brazilian Portuguese)","regfreak (Indonesian translation)","roebek (Galician translation)","Qen (Thai translation)","seaousak (Korean translation)","SlovakSoft (Slovak translation)","Sonickydon (Greek translation)","Stiepan A. Kovac (Croatian translation)","swarnava (Bengali translation)","Tomaz Macus (Slovenian translation)","Thomas Weber & Volker Hable (German translation)","tonynguyen and loveleeyoungae (Vietnamese translation)","x10firefox and Ultravioletu (Romanian translation)","Xavier Robin & BlackJack (French translation)","X.F Mao & George C. Tsoi (Simplified Chinese)"]},"visible"
:true,"active"
:false,"userDisabled"
:false,"appDisabled"
:true,"descriptor"
:"C
:\\WLIB\\Mozilla\\USERS\\FF20\\extensions\\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi","installDate"
:1448224584000,"updateDate"
:1448224584000,"applyBackgroundUpdates"
:1,"bootstrap"
:false,"size"
:2180716,"sourceURI"
:null,"releaseNotesURI"
:null,"softDisabled"
:false,"foreignInstall"
:true,"hasBinaryComponents"
:false,"strictCompatibility"
:false,"locales"
:[],"targetApplications"
:[{"id"
:"{ec8030f7-c20a-464f-9b0e-13a3a9e97384}","minVersion"
:"3.0.9","maxVersion"
:"45.0"},{"id"
:"{a463f10c-3994-11da-9945-000d60ca027b}","minVersion"
:"0.4","maxVersion"
:"2.0.*"},{"id"
:"{92650c4d-4b8e-4d2a-b7eb-24ecf4f6b63a}","minVersion"
:"2.0","maxVersion"
:"2.41"},{"id"
:"{aa5ca914-c309-495d-91cf-3141bbb04115}","minVersion"
:"0.2","maxVersion"
:"3.1.*"},{"id"
:"dlm@emusic.com","minVersion"
:"1.0a4","maxVersion"
:"1.0.0.*"},{"id"
:"toolkit@mozilla.org","minVersion"
:"1.9a2","maxVersion"
:"1.9.6"},{"id"
:"songbird@songbirdnest.com","minVersion"
:"0.7","maxVersion"
:"1.2.0"},{"id"
:"{a23983c0-fd0e-11dc-95ff-0800200c9a66}","minVersion"
:"1.0","maxVersion"
:"2.0a1pre"}],"targetPlatforms"
:[],"multiprocessCompatible"
:false,"signedState"
:1},{"id"
:"{972ce4c6-7e08-4474-a285-3208198ce6fd}","syncGUID"
:"IhRFcPJna2Si","location"
:"app-global","version"
:"43.0","type"
:"theme","internalName"
:"classic/1.0","updateURL"
:null,"updateKey"
:null,"optionsURL"
:null,"optionsType"
:null,"aboutURL"
:null,"iconURL"
:null,"icon64URL"
:null,"defaultLocale"
:{"name"
:"Default","description"
:"The default theme.","creator"
:"Mozilla","homepageURL"
:null,"contributors"
:["Mozilla Contributors"]},"visible"
:true,"active"
:true,"userDisabled"
:false,"appDisabled"
:false,"descriptor"
:"C
:\\WLIB\\FIREFOX\\FF43\\browser\\extensions\\{972ce4c6-7e08-4474-a285-3208198ce6fd}","installDate"
:1449761181000,"updateDate"
:1449761181000,"applyBackgroundUpdates"
:1,"skinnable"
:true,"size"
:24166,"sourceURI"
:null,"releaseNotesURI"
:null,"softDisabled"
:false,"foreignInstall"
:false,"hasBinaryComponents"
:false,"strictCompatibility"
:true,"locales"
:[],"targetApplications"
:[{"id"
:"{ec8030f7-c20a-464f-9b0e-13a3a9e97384}","minVersion"
:"43.0","maxVersion"
:"43.0"}],"targetPlatforms"
:[]}]}

[therube]

Create a new Profile
Install NoScript
Restart FF & confirm that NoScript is active

Quit FF

Take above extensions.json
[the "text" & save it in a file named extensions.json, or from the downloaded ZIP]
Replace Profile/extensions.json with the version above

Open FF
Verify that NoScript is not active, that it "could not be verified"


You tell me why it fails?

[therube]

Now how did extensions.json get to be in whatever state it is in?
No clue.

[therube]

Quit FF

Delete Profile/extensions.json

Open FF

Verify that NoScript is active

[therube]

Appears that ...

Remove NoScript
Quit FF [necessary!]
Start FF
Install NoScript
Restart FF (necessary as part of the Install)

... should gets things working again.

[barbaz]

in those extensions.json files, the signedState value looks relevant?

[therube]

Hacking extension.json, changing signedState to either 1's or 2's

1 says, "could not be verified"
2 shows up as "(disabled)", with only a [Remove] button, no option to Enable or anything else.


(There also may be a reliance on extensions.ini, with NoScript listed within, under, [ExtensionDirs] - which is not the case per the file in the ZIP ?)



Hacking extension.json, changing signedState to 0's

0 set both NoScript & Memchaser to "could not be verified"
1 & 2 only affected NoScript, not Memchaser


(And that's all assuming that anything I've done with this is remotely correct .)


min|maxVersion looks fine.