![]() ![]() There are three special cases of add-ons developed by Mozilla: System add-ons, Mozilla Extensions and Hotfixes. verify all files in the XPI are listed in `manifest.mf`.verify the hashes of all files in the XPI match the hashes stored in `manifest.mf`. ![]() ![]() verify the hash of `manifest.mf` matches the hash stored in `mozilla.sf`.verify the signing cert chains back to the Firefox Root CA.verify the signature of `mozilla.sf` using `mozilla.rsa`.When installing add-ons, Firefox does the following verifications: The root cert is not stored in the document SHA1-Digest-Manifest: 82zZH0Aq6GaTNMq+PnBlzep6fEA=īoth the end-entity and the intermediate certificates are also stored in the MD5-Digest-Manifest: OlmmwIHcPmhoIt4uMxdh8A= $ openssl cms -verify -inform der -in META-INF/mozilla.rsa -content META-INF/mozilla.sf -CAfile .ca.crt -purpose any ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |