Talk:Extension Manager:Addon Update Security:Signature: Difference between revisions

Jump to navigation Jump to search
more discussion
No edit summary
(more discussion)
Line 46: Line 46:


You can probably explain better than me the syntax of a DSA signature, the signature is just generated with SEC_SignData regardless of the key type. Though at the moment there is no plan to use a DSA signature.
You can probably explain better than me the syntax of a DSA signature, the signature is just generated with SEC_SignData regardless of the key type. Though at the moment there is no plan to use a DSA signature.
== Nelson's Followup of 2007-09-16 15:39 PDT ==
Dave, if the addons feature requires that an update either come from an https URL or that the manifest provide a hash for the XPI, then shouldn't the example illustrate how do to those forms successfully?  Shouldn't it show an example with a hash of the XPI?  In the absence of a specification or example of how to represent such a hash in the manifest, is it going to be obvious to everyone but me how to do it? 
There are several common ways of encoding DSA signatures. I've described them above.  The question is: what syntax does your code require?  If you're not sure, but you can give me an lxr or mxr URL for the code that checks the signatures, I'll be happy to look at that code and answer the question here.
106

edits

Navigation menu