CODEWITHSUNDEEP
firefox-addonfirefox-addon-webextensionssigning
niceman
niceman

Reputation: 2673

can't install my signed firefox addon : signature verification failed

I've made a web extensions addon and it works when loading it through about:debugging.

Now I'm using web-ext command and I issue web-ext build then upload the zip file to AMO, it correctly validates and signs it and I download the xpi file.

Now when I drag the xpi file and drop it into Addons page I see "add-on could not be installed because it appears to be corrupt" and In browser console I see :

1521507462608 addons.webextension. WARN Loading extension 'null': Reading manifest: Error processing update_url: An unexpected property was found in the WebExtension manifest. 1521507462608 addons.webextension. WARN Loading extension 'null': Reading manifest: Error processing key: An unexpected property was found in the WebExtension manifest. 1521507462622 addons.xpi WARN Add-on [email protected] is not correctly signed.1521507462622 addons.xpi WARN Invalid XPI: signature verification failed

I have to say that when uploading the first version of the extension it worked but on uploading subsequent versions I get this error.

So how to solve this issue ? I already tried uploading it multiple times with different versions.

Edit

here is my manifest.json

{


"name": "NasMtnBarcode",
  "version": "1.2.5",
  "manifest_version": 2,
  "description": "an extension to make mtn able to use their barcodes from inside chrome,firefox and opera",
  "update_url": "http://0.0.0.0",
  "icons": {
    "16": "icons/icon16.png",
    "48": "icons/icon48.png",
    "128": "icons/icon128.png"
  },
  "permissions": [
    "nativeMessaging"
  ],
  "background": {
    "scripts": [ "src/background/background.js" ]
  },
  "key": "mykey",
  "applications": {
    "gecko": {
      "id": "[email protected]"
    }
  },
  "content_scripts": [
    {
      "matches": [
        "<all_urls>"
      ],
      "js": [
        "src/jquery.min.js",
        "src/inject/inject.js"
      ],
      "run_at": "document_end"
    }
  ],
  "web_accessible_resources": [
    "src/inject/mtnViewer.js"
  ]
}

Upvotes: 0

Views: 598

Answers (1)

Paul Heil
Paul Heil

Reputation: 293

First issue I see is I don't believe "key" is a valid Firefox key. Looks specific to Chrome and shouldn't be used anyway. Second, "update_url" should be HTTPS and part of the applications key.

"applications": {
    "gecko": {
        "id": "[email protected]",
        "update_url": "https://0.0.0.0/test.json"
    }
},

Upvotes: 0

Related Questions