Page 1 of 2

Signed version/submitting to Mozilla?

Posted: Thu Nov 05, 2015 3:12 pm
by RichZzz
Hi,

I am getting slightly nervous that one of the most important plugins could be locked out on Android in the near future.

What are the plans? I could probably submit a copy of the plugin and get it signed for "unlisted" use but there must be many more users?

TIA
Richard

Re: Signed version/submitting to Mozilla?

Posted: Mon Mar 07, 2016 1:22 am
by trevordavies
The future is now.

Firefox Android 47.0a1 (2016-03-06) from https://nightly.mozilla.org/
Hitting https://noscript.net/nsa/latest/
Redirects to http://support.mozilla.org/1/mobile/47. ... ned-addons

Blocked :-(

Re: Signed version/submitting to Mozilla?

Posted: Mon Mar 07, 2016 9:12 pm
by RichZzz
It is now very easy to create a signed version with

Code: Select all

jpm sign --xpi /path/to/your-addon.xpi --api-key ... --api-secret 
for anyone who has an account on AMO. No review or anything else required. So in principle every user could do that but that would cause problems later once (hopefully?) Noscript will be officially listed and signed.

Re: Signed version/submitting to Mozilla?

Posted: Sat Mar 12, 2016 9:01 am
by js_blocker
Well, 46.0b1 installed, nsa a10 not working because it's not signed yet. Quick-fix: I toggled "xpinstall.signatures.required" to false. Firefox did not disintegrate ;)

Re: Signed version/submitting to Mozilla?

Posted: Wed Jul 27, 2016 4:08 am
by Noidly1
js_blocker wrote: Quick-fix: I toggled "xpinstall.signatures.required" to false. Firefox did not disintegrate ;)
I tried that and as well with no luck so I added xpinstall.enabled set to true and ff still blocked it. Hmm... :|

Re: Signed version/submitting to Mozilla?

Posted: Wed Jul 27, 2016 4:58 am
by barbaz
Noidly1 wrote:
js_blocker wrote: Quick-fix: I toggled "xpinstall.signatures.required" to false. Firefox did not disintegrate ;)
I tried that and as well with no luck
Because Mozilla has now disabled that preference from having any effect: https://bugzilla.mozilla.org/show_bug.cgi?id=1233199

Re: Signed version/submitting to Mozilla?

Posted: Wed Jul 27, 2016 4:16 pm
by Noidly1
barbaz wrote:
Noidly1 wrote:
js_blocker wrote: Quick-fix: I toggled "xpinstall.signatures.required" to false. Firefox did not disintegrate ;)
I tried that and as well with no luck
Because Mozilla has now disabled that preference from having any effect: https://bugzilla.mozilla.org/show_bug.cgi?id=1233199
Figures...

A while back I downloaded the offline installer for ff 28 for windows for future needs and love that browser.
I just tried searching for legacy versions on their site to no avail.
Do you know where to find older versions so I can get around this "fix"?

Re: Signed version/submitting to Mozilla?

Posted: Wed Jul 27, 2016 4:17 pm
by barbaz
https://ftp.mozilla.org/pub/

Warning: Old Firefox versions contain publicly known vulnerabilities. Proceed at your own risk.

Re: Signed version/submitting to Mozilla?

Posted: Wed Jul 27, 2016 4:34 pm
by Noidly1
Cool. Thanks.
Just looked up ver28 and see two different linux versions
ftp.mozilla.org/pub/firefox/releases/28.0b9/linux-i686
ftp.mozilla.org/pub/firefox/releases/28.0b9/linux-x86_64

I don't know which would work on a samsung tablet.
Assuming android uses the linux kernel, a non-hacker like me, would think it should work...

Re: Signed version/submitting to Mozilla?

Posted: Wed Jul 27, 2016 5:46 pm
by barbaz
Android may have the Linux kernel, but it's not a "regular" Linux system so I doubt either would work. Also it's a really bad idea to use a beta version that old for any purpose other than regression testing.

I don't use any of these mobile devices, so I'd only be guessing, but try this one?
https://ftp.mozilla.org/pub/mobile/releases/28.0.1/

Re: Signed version/submitting to Mozilla?

Posted: Wed Jul 27, 2016 5:59 pm
by Noidly1
Ok, I just did some leg work and found out my cpu is an ARMv7.
So I checked out the latest ff47 folder and and didn't find any sub-folders for android systems.
I did find sub-folders for 2 linux Intel installers, i686 and x86_64 as well as windows and mac.
That is odd. How is it that you can get ff47 for android on google play store but not in the archives???
I guess I have to figuer out if this ARMv7 is 32 bit or 64 bit and try and see if one of the older linux installers will work.

Re: Signed version/submitting to Mozilla?

Posted: Wed Jul 27, 2016 6:05 pm
by barbaz
Did you see my last post?

The Linux builds you're trying to use will *not* work on ARM! They are only intended for amd64 or Intel processors, and are binary-incompatible with other architectures. We are not able to help you clean up any mess you make of your system trying to fight that fact.

Re: Signed version/submitting to Mozilla?

Posted: Wed Jul 27, 2016 6:06 pm
by Noidly1
barbaz wrote:Android may have the Linux kernel, but it's not a "regular" Linux system so I doubt either would work. Also it's a really bad idea to use a beta version that old for any purpose other than regression testing.

I don't use any of these mobile devices, so I'd only be guessing, but try this one?
https://ftp.mozilla.org/pub/mobile/releases/28.0.1/
I typed b4 for I saw this. I don't know how much difference there is between ARMv6 nd ARMv7.
Also, being that android seems to be gnome based, I don't know how a kde version would work or if that is what ff28 is.

Re: Signed version/submitting to Mozilla?

Posted: Wed Jul 27, 2016 6:08 pm
by Noidly1
barbaz wrote:Did you see my last post?

The Linux builds you're trying to use will *not* work on ARM! They are only intended for amd64 or Intel processors, and are binary-incompatible with other architectures. We are not able to help you clean up any mess you make of your system trying to fight that fact.
Gotcha!

Re: Signed version/submitting to Mozilla?

Posted: Wed Jul 27, 2016 6:11 pm
by barbaz
Noidly1 wrote:I don't know how much difference there is between ARMv6 nd ARMv7.
According to http://stackoverflow.com/questions/1364 ... patibility ARMv7 is (mostly) ARMv6-compatible.