Resolved: Exactly which SSL certificates?

[SimonsNoscript]

Hi there,

I have a Firefox browser profile where I have deleted all CA certificates. The only certificate in the entire trust store is the one used by the one site I want to use this profile to access (it will not be used for general purpose browsing). I would like to install noscript into this browser profile.

In order to do this, I temporarily imported the certificates for addons.mozilla.org (needed to retrieve https://addons.mozilla.org/firefox/down ... ddondetail) and https://services.addons.mozilla.org (which the install process seems to use). It seems to successfully download the .xpi file (over HTTP by the way - is that intentional?), however firefox then tries to validate the XPI signature, and fails because I don't have the right certificate in my trust store.

Does anyone know where I can get a copy of the signing cert to temporarily import, so that I can get noscript working?

Many thanks,

-simon

[Giorgio Maone]

https://support.comodo.com/index.php?_m ... ditemid=79

[SimonsNoscript]

Thanks!

Not quite there yet though. I imported that certificate into Firefox, but I'm still getting:

Code: Select all

Firefox could not install the file at 

http://releases.mozilla.org/pub/mozilla.org/addons/722/noscript-2.1.0.1-sm+fn+fx.xpi

because: Signing could not be verified.
-260

Any further thoughts? I'll keep googling

-simon

[SimonsNoscript]

Resolved: I needed to edit the certificate such that it was trusted, and select "This certificate can identify software makers".

Many thanks for all your help!

-simon