Page 1 of 1

Hash for .xpi ?

Posted: Thu Jan 23, 2020 10:38 am
by Jamochaz
Hello.

May you please direct me to the correct area to check a download hash of a NoScript downloaded .xpi ?

Thank you.

Re: Hash for .xpi ?

Posted: Thu Jan 23, 2020 10:43 am
by Giorgio Maone
Currently there's none, since XPIs are digitally signed by Mozilla, the signature is automatically verified by Firefox and installation fails if it's missing or invalid.
What do you need the hash for?

Re: Hash for .xpi ?

Posted: Thu Jan 23, 2020 1:01 pm
by Jamochaz
Thank you Giorgio.

I need a hash to check the downloaded .xpi to make sure it has not been
corrupted in the download process.

I'm wishing to use 5.1.9 / PaleMoon and the "Install Add-On From File", but would like to verify
the hash of the downloaded file before installing.

May I please ask for the hash (md5sum or sha256sum) for;
https://secure.informaction.com/downloa ... -5.1.9.xpi

Thanks much.

Re: Hash for .xpi ?

Posted: Thu Jan 23, 2020 1:20 pm
by therube
That is a good point actually, because... 5.1.8.7rc4 is not signed.
s/5.1.8.7rc4 is not/5.1.8.7rc4 & later [legacy versions] are not/

I can only give you what I just downloaded: SHA256 00097023E9015986234AD9AD349E64487674794937EEC143760AD4D622CF2027
And Virustotal: https://www.virustotal.com/gui/file/000 ... /detection

Re: Hash for .xpi ?

Posted: Thu Jan 23, 2020 1:24 pm
by therube
Install Add-On From File
What is that?

In any case, NoScript 5 will work directly with PM, simply drag the .xpi into PM & it will install.
You then need to specifically Enable it & restart PM.
NoScript is verboten in PM-Land (& has its own thread there - for those that use it regardless).


Oh, & it appears that PM ignores /META-INF/, totally.
It can be there, or not.
(Similarly with SeaMonkey.)

Re: Hash for .xpi ?

Posted: Thu Jan 23, 2020 7:46 pm
by Giorgio Maone
Jamochaz wrote: Thu Jan 23, 2020 1:01 pm I'm wishing to use 5.1.9 / PaleMoon and the "Install Add-On From File", but would like to verify
the hash of the downloaded file before installing.

May I please ask for the hash (md5sum or sha256sum) for;
https://secure.informaction.com/downloa ... -5.1.9.xpi
Sorry, I didn't understand you meant the latest classic version.
As therube said, excellent point: therefore I've added SHA256 info for all the legacy XPIs referenced on the download page.
Thanks for raising it.

Re: Hash for .xpi ?

Posted: Fri Jan 24, 2020 12:35 pm
by Jamochaz
Thank you much.

No one should surf the Web without NoScript !

Ciao.