Comments for o-regan.org

Comment on XPISigner v1 by Thomas

Thomas — Tue, 29 Dec 2009 22:24:20 +0000

I’ve a problem with XPISigner 1.6 , Java 1.6 and Firefox 3.5.

I can sign any extension successfully, for example the AdBlock extension. The xpi file increases in size by about 5 KBytes. If I try to install the signed file Firefox displays that it’s signed. After clicking on install I get this error message:

Install script not found -204

After this the installation is cancelled.

This happens with any extension from the internet (tested AdBlock and 3 others) and my own extensions too. Unsigned extensions install fine in the browser.

Thanks for any help in advance,
Thomas

Comment on XPISigner v1 by Randy Hawkins

Randy Hawkins — Tue, 17 Nov 2009 19:55:55 +0000

I had, dumped into my lap, a FF Extension that needs to be signed. I am using version 1.6 of xpisigner and have verified that my Java is version 5 (1.5.0_04-b05 to be exact). In a single folder I have the following files:
- test.xpi (my xpi file I want to sign)
- bcmail-jdk15-136.jar
- bcprov-jdk15-136.jar
- files.txt (contains the file name to sign; “test.xpi”)
- mypfxfile.pfx (my verisign pfx file)
- myprivatekey.pvk (don’t know that i need it but its there)
- xpi.jar
- xpisigner.cmd

When I run xpisigner.cmd (“xpisigner.cmd mypfxfile.pfx {mypassword} files.txt randy.xpi”) I get the following error:

java.lang.reflect.InvocationTargetException
at sun.reflect.NativeConstructorAccessorImpl.newInstance0(NativeMethod)
{…snip unneeded stuff…}
at org.oregan.xpi.Main.getInstance(Unknown Source)
at org.oregan.xpi.Main.doSign(Unknown Source)
at org.oregan.xpi.Main.main(Unknown Source)
Caused by: java.lang.NullPointerException
at java.io.File.(File.java:194)
at org.oregan.xpi.XPISigner.(Unknown Source)
at org.oregan.xpi.bc.XPISignerImpl.(Unknown Source)
… 7 more
Failed to load XPISigner internal module: Check xpi.jar is intact.

can you please shed some light on what I could be doing wrong? I can’t tell you how much I’d appreciate the help.

Thanks,
Randy

Comment on Photo – Hidden Carlow by John Hennessy

John Hennessy — Thu, 27 Aug 2009 08:09:23 +0000

Nice photo of this old bridge that crosses the Carlow to Athy Railway line and connects the old head office of Irish Sugar at Strawhall Avenue to the old Erin Food Plant on the Cannery road.
The Cannery road was so named after the Erin Foods Factory was built in early 1960’s by General Costello. He built a small cannery in the Sugar factory yard on the Athy Road for a trial run and then decided just before Christmas to open up a bigger cannery. By July the food factory, Erin Foods, was in full operation.

Comment on XPISigner to be updated in March 2009 by kevin

kevin — Thu, 02 Apr 2009 20:58:41 +0000

Hi Bennett,

The release is held up at the moment due to
a) busy in the day job
b) was waiting on feedback from a customer of a custom build before releasing.

Comment on XPISigner to be updated in March 2009 by Bennett

Bennett — Thu, 02 Apr 2009 15:16:26 +0000

Great! Looking forward to the new version. Any updates on the status?

Comment on XPISigner v1 by kevin

kevin — Wed, 01 Apr 2009 18:52:03 +0000

@EJS
Editing xpisigner.cmd to wrap the -jar parameter in quotes should do the trick:

Was:
java -jar %~dp0\xpi.jar %1 %2 %3 %4 %5 %6

Change to

java -jar “%~dp0\xpi.jar” %1 %2 %3 %4 %5 %6

kevin

Comment on XPISigner v1 by EJS

EJS — Wed, 01 Apr 2009 17:42:18 +0000

I’m having a problem running xpisigner from a path that contains spaces. For example, if I run it under “C:\some path\xpisigner”, I get the error message:
Unable to access jarfile c:\some

(cuts off right at the space)

Is there a way around this? Or do I have to make sure the path doesn’t include spaces?

Comment on XPISigner v1.6 released by Ron Evans

Ron Evans — Fri, 09 Jan 2009 05:55:12 +0000

Thanks for creating this great tool, and also for providing tremendous email support too. Kevin, you are a gentleman and a scholar!

Comment on Download by kevin

kevin — Wed, 07 Jan 2009 10:48:19 +0000

Looks like the Intermediate CA certificate from GoDaddy isn’t in the shipping firefox cert store.

There’s no real workaround for that unless you find a more compatible CA.

Comment on Download by Ron Evans

Ron Evans — Sun, 28 Dec 2008 16:59:29 +0000

I have been successfully using XPISIgner 1.6 with a comodo certificate for almost a year. Recently, we changed over to a GoDaddy code signing cert. Now, XPISigner appears to run fine, however, when attempting to install the extension into firefox, I get the following error:

SIgning could not be verified. -260

Further detail of the extension install error is:
Signature Verification Error: the signature on this .jar archive is invalid because the digital signature (*.RSA) file is not a valid signature of the signature instruction file (*.SF).

Another possible clue… when I look at the zigbert.sf file, I see something curious:
Signature-Version: 1.0
Created-by: XPISigner
XPI-Signer-Version: 1.4 (free) http://o-regan.org

I am using 1.6, and that is what the command line says also, but the contents of this file say 1.4. I installed 1.5 just to be certain, and 1.5 says 1.5 in the zigbert.sf file as it should. Problem with the 1.6 package?

Anyhow, thanks for creating this tool, and any light that you could shed on this would be greatly appreciated.