MozillaWiki

Extension Manager:Addon Update Security:Signature: Difference between revisions

Page Discussion

Extension Manager:Addon Update Security:Signature (view source)

Revision as of 09:55, 20 August 2007

17,624 bytes added ,  20 August 2007
no edit summary
No edit summary
Line 9: Line 9:
<pre>
<pre>
<?xml version="1.0"?>
<?xml version="1.0"?>
<RDF:RDF xmlns:em="http://www.mozilla.org/2004/em-rdf#"
 
         xmlns:RDF="http://www.w3.org/1999/02/22-rdf-syntax-ns#">
<RDF:RDF xmlns:RDF="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
  <RDF:Description about="urn:mozilla:install-manifest">
         xmlns="http://www.mozilla.org/2004/em-rdf#">
    <em:id>TabSidebar@blueprintit.co.uk</em:id>
<RDF:Description about="urn:mozilla:install-manifest">
    <em:version>2.0a1</em:version>
<id>{1280606b-2510-4fe0-97ef-9b5a22eafe80}</id>
    <em:name>Tab Sidebar</em:name>
    <em:description>Displays previews of your tabs in your sidebar.</em:description>
<name>Console²</name>
    <em:updateURL>http://www.oxymoronical.com/web/firefox/TabSidebar/update.rdf</em:updateURL>
<version>0.3.8</version>
    <em:targetApplication>
      <RDF:Description>
<description>The next generation error console.</description>
        <em:id>{ec8030f7-c20a-464f-9b0e-13a3a9e97384}</em:id>
<iconURL>chrome://console2/skin/import/Error.png</iconURL>
        <em:minVersion>1.5</em:minVersion>
<homepageURL>http://console2.mozdev.org/index.html</homepageURL>
        <em:maxVersion>3.0a5pre</em:maxVersion>
<updateURL>http://console2.mozdev.org/update.xml</updateURL>
      </RDF:Description>
    </em:targetApplication>
<creator>zeniko</creator>
    <em:publicKey>MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC8tygA/cOMS/cyFn3Lf30Dskkd
<contributor>Philip Chee</contributor>
                  Q0i6NlLfKVxTYUmLge/tEb3QMHlBdM9D0mMpzybq7rFI7aFscUFEcDo9WVd5ieyZ
<contributor>All contributors to the Toolkit 1.8 JavaScript Console</contributor>
                  cPotUd1WyUXZHXKluMfkE4asnXedLcICqrXEUJDxeWHSA36FrMW4uASxbl42/Ibi
<targetApplication><!-- Firefox -->
                  e/liyRgPpmzDged+jQIDAQAB</em:publicKey>
<RDF:Description>
<id>{ec8030f7-c20a-464f-9b0e-13a3a9e97384}</id>
<minVersion>1.5</minVersion>
<maxVersion>3.0.*</maxVersion>
</RDF:Description>
</targetApplication>
<targetApplication><!-- Thunderbird -->
<RDF:Description>
<id>{3550f703-e582-4d05-9a08-453d09bdfdc6}</id>
<minVersion>1.5</minVersion>
<maxVersion>3.0.*</maxVersion>
</RDF:Description>
</targetApplication>
<targetApplication><!-- SeaMonkey -->
<RDF:Description>
<id>{92650c4d-4b8e-4d2a-b7eb-24ecf4f6b63a}</id>
<minVersion>1.0</minVersion>
<maxVersion>2.0.*</maxVersion>
</RDF:Description>
</targetApplication>
<targetApplication><!-- Flock -->
<RDF:Description>
<id>{a463f10c-3994-11da-9945-000d60ca027b}</id>
<minVersion>0.5</minVersion>
<maxVersion>0.*</maxVersion>
</RDF:Description>
</targetApplication>
 
<targetApplication><!-- Sunbird -->
<RDF:Description>
<id>{718e30fb-e89b-41dd-9da7-e25a45638b28}</id>
<minVersion>0.3.1</minVersion>
<maxVersion>0.6.*</maxVersion>
</RDF:Description>
</targetApplication>
 
<targetApplication><!-- eMusic DLM -->
<RDF:Description>
<id>dlm@emusic.com</id>
<minVersion>4.0a1</minVersion>
<maxVersion>4.0.0.*</maxVersion>
</RDF:Description>
</targetApplication>
 
<targetApplication><!-- Netscape Navigator-->
<RDF:Description>
<id>{3db10fab-e461-4c80-8b97-957ad5f8ea47}</id>
<minVersion>9.0a</minVersion>
<maxVersion>9.0.*</maxVersion>
</RDF:Description>
</targetApplication>
<em:publicKey>MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC8tygA/cOMS/cyFn3Lf30Dskkd
              Q0i6NlLfKVxTYUmLge/tEb3QMHlBdM9D0mMpzybq7rFI7aFscUFEcDo9WVd5ieyZ
              cPotUd1WyUXZHXKluMfkE4asnXedLcICqrXEUJDxeWHSA36FrMW4uASxbl42/Ibi
              e/liyRgPpmzDged+jQIDAQAB</em:publicKey>
   </RDF:Description>
   </RDF:Description>
</RDF:RDF>
</RDF:RDF>
Line 36: Line 93:
The update signature is generated from a string of text that is pulled out of the update manifest. It is important that this string remains the same for a given update manifest no matter how the manifest was serialized. This is partly because our rdf code generally changes the format of the serialized data.
The update signature is generated from a string of text that is pulled out of the update manifest. It is important that this string remains the same for a given update manifest no matter how the manifest was serialized. This is partly because our rdf code generally changes the format of the serialized data.


To ensure this the following form is used for the text string:
In order to make this signing forwards compatible as much as possible the string must essentially be a serialisation of all the data in the RDF relevant to the extension that is in use now or may be used in future versions. The simplest method for this is to serialise the data as an RDF fragment using certain rules to ensure that the serialisation remains the same as all. We serialise from the update resource for the given extension using the following rules:
 
When serialising a resource that is an RDF container (Seq, Bag, Alt), output as that container type and if the resource is not anonymous, include it's uri in the container tag. Include one &lt;li&gt; for every item in the container in order containing the serialisation of the contained resource. Following those output the other properties as detailed for a non-container resource.
 
When serialising a resource that is not an RDF container output as a Description including the uri of the resource if it is not anonymous. Inside the element output each property of the em namespace in order of property uri. Where a property has multiple targets, serialise each one and output in sorted order.
 
When a property points to a literal value output as a simple element with property name and containing the literal.
 
When a property points to a resource output as an element with property name and containing the serialisation of the resource.


  <updatestring> ::= <id> <versionlist>
There is one main issue with this serialisation. It cannot handle the situation where resources are referenced from multiple places or recursively. Resolving both of these would require coming up with a method of generating anonymous uri's that were not random in nature. Neither of these issues are possible with the current update RDF schema.
  <versionlist> ::= <version> | <version> <versionlist>
  <version> ::= ":" <versionnumber> <targetapplist>
  <targetapplist> ::= <targetapp> | <targetapp> <targetapplist>
  <targetapp> ::= "(" <id> ":" <minVersion> ":" <maxVersion> ":" <updateLink> <opt-updateHash> ")"
  <opt-updateHash> ::= "" | ":" <updateHash>


Note that the strings in the targetapplist are sorted in alphabetical order before being concatenated. This is because the update manifest format does not include any ordering information about the target application arcs (correctly) so we must introduce some mechanism that leaves the order the same each time.
Given the following example update RDF:


The string includes the add-on's id, the version of every listed update and all the target application information as well as the url of the updated xpi and if present the hash for that xpi.
<pre>
<RDF xmlns="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:em="http://www.mozilla.org/2004/em-rdf#">


This is an example of the generated string:
<Description about="urn:mozilla:extension:{1280606b-2510-4fe0-97ef-9b5a22eafe80}">
<em:updates>
<Seq>
<li resource="urn:mozilla:extension:{1280606b-2510-4fe0-97ef-9b5a22eafe80}:0.3.8"/>
<li resource="urn:mozilla:extension:{1280606b-2510-4fe0-97ef-9b5a22eafe80}:0.3.7"/>
</Seq>
</em:updates>
</Description>
 
<Description about="urn:mozilla:extension:{1280606b-2510-4fe0-97ef-9b5a22eafe80}:0.3.8">
<em:version>0.3.7</em:version>
<em:targetApplication><!-- Firefox -->
<Description>
<em:id>{ec8030f7-c20a-464f-9b0e-13a3a9e97384}</em:id>
<em:minVersion>1.5</em:minVersion>
<em:maxVersion>3.0.*</em:maxVersion>
<em:updateLink>http://downloads.mozdev.org/console2/console2-0.3.8.xpi</em:updateLink>
</Description>
</em:targetApplication>
<em:targetApplication><!-- Thunderbird -->
<Description>
<em:id>{3550f703-e582-4d05-9a08-453d09bdfdc6}</em:id>
<em:minVersion>1.5</em:minVersion>
<em:maxVersion>3.0.*</em:maxVersion>
<em:updateLink>http://downloads.mozdev.org/console2/console2-0.3.8.xpi</em:updateLink>
</Description>
</em:targetApplication>
<em:targetApplication><!-- SeaMonkey -->
<Description>
<em:id>{92650c4d-4b8e-4d2a-b7eb-24ecf4f6b63a}</em:id>
<em:minVersion>1.0</em:minVersion>
<em:maxVersion>1.5.*</em:maxVersion>
<em:updateLink>http://downloads.mozdev.org/console2/console2-0.3.8.xpi</em:updateLink>
</Description>
</em:targetApplication>
<em:targetApplication><!-- Flock -->
<Description>
<em:id>{a463f10c-3994-11da-9945-000d60ca027b}</em:id>
<em:minVersion>0.5</em:minVersion>
<em:maxVersion>0.9.*</em:maxVersion>
<em:updateLink>http://downloads.mozdev.org/console2/console2-0.3.8.xpi</em:updateLink>
</Description>
</em:targetApplication>
<em:targetApplication><!-- Sunbird -->
<Description>
<em:id>{718e30fb-e89b-41dd-9da7-e25a45638b28}</em:id>
<em:minVersion>0.3.1</em:minVersion>
<em:maxVersion>0.7.*</em:maxVersion>
<em:updateLink>http://downloads.mozdev.org/console2/console2-0.3.8.xpi</em:updateLink>
</Description>
</em:targetApplication>
<em:targetApplication><!-- eMusic DLM -->
<Description>
<em:id>dlm@emusic.com</em:id>
<em:minVersion>4.0a1</em:minVersion>
<em:maxVersion>4.0.0.*</em:maxVersion>
<em:updateLink>http://downloads.mozdev.org/console2/console2-0.3.8.xpi</em:updateLink>
</Description>
</em:targetApplication>
 
<em:targetApplication><!-- Netscape -->
<Description>
<em:id>{3db10fab-e461-4c80-8b97-957ad5f8ea47}</em:id>
<em:minVersion>9.0a</em:minVersion>
<em:maxVersion>9.0.*</em:maxVersion>
<em:updateLink>http://downloads.mozdev.org/console2/console2-0.3.8.xpi</em:updateLink>
</Description>
</em:targetApplication>
</Description>
 
<Description about="urn:mozilla:extension:{1280606b-2510-4fe0-97ef-9b5a22eafe80}:0.3.7">
<em:version>0.3.7</em:version>
<em:targetApplication><!-- Firefox -->
<Description>
<em:id>{ec8030f7-c20a-464f-9b0e-13a3a9e97384}</em:id>
<em:minVersion>1.5</em:minVersion>
<em:maxVersion>3.0.*</em:maxVersion>
<em:updateLink>http://downloads.mozdev.org/console2/console2-0.3.7.xpi</em:updateLink>
</Description>
</em:targetApplication>
<em:targetApplication><!-- Thunderbird -->
<Description>
<em:id>{3550f703-e582-4d05-9a08-453d09bdfdc6}</em:id>
<em:minVersion>1.5</em:minVersion>
<em:maxVersion>3.0.*</em:maxVersion>
<em:updateLink>http://downloads.mozdev.org/console2/console2-0.3.7.xpi</em:updateLink>
</Description>
</em:targetApplication>
<em:targetApplication><!-- SeaMonkey -->
<Description>
<em:id>{92650c4d-4b8e-4d2a-b7eb-24ecf4f6b63a}</em:id>
<em:minVersion>1.0</em:minVersion>
<em:maxVersion>1.5.*</em:maxVersion>
<em:updateLink>http://downloads.mozdev.org/console2/console2-0.3.7.xpi</em:updateLink>
</Description>
</em:targetApplication>
<em:targetApplication><!-- Flock -->
<Description>
<em:id>{a463f10c-3994-11da-9945-000d60ca027b}</em:id>
<em:minVersion>0.5</em:minVersion>
<em:maxVersion>0.8.*</em:maxVersion>
<em:updateLink>http://downloads.mozdev.org/console2/console2-0.3.7.xpi</em:updateLink>
</Description>
</em:targetApplication>
<em:targetApplication><!-- Sunbird -->
<Description>
<em:id>{718e30fb-e89b-41dd-9da7-e25a45638b28}</em:id>
<em:minVersion>0.3.1</em:minVersion>
<em:maxVersion>0.6.*</em:maxVersion>
<em:updateLink>http://downloads.mozdev.org/console2/console2-0.3.7.xpi</em:updateLink>
</Description>
</em:targetApplication>
<em:targetApplication><!-- eMusic DLM -->
<Description>
<em:id>dlm@emusic.com</em:id>
<em:minVersion>4.0a1</em:minVersion>
<em:maxVersion>4.0.0.*</em:maxVersion>
<em:updateLink>http://downloads.mozdev.org/console2/console2-0.3.7.xpi</em:updateLink>
</Description>
</em:targetApplication>
</Description>
 
</RDF>
</pre>
 
We serialise as the following:


<pre>
<pre>
{dd0cc141-203e-4217-9218-0822d517d4ed}:2.0({ec8030f7-c20a-464f-9b0e-13a3a9e97384}:2:2.0.0.*:http://www.example.com/addon.xpi)
<RDF:Description about="urn:mozilla:extension:{1280606b-2510-4fe0-97ef-9b5a22eafe80}">
  <em:updates>
    <RDF:Seq>
      <RDF:li>
        <RDF:Description about="urn:mozilla:extension:{1280606b-2510-4fe0-97ef-9b5a22eafe80}:0.3.8">
          <em:targetApplication>
            <RDF:Description>
              <em:id>dlm@emusic.com</em:id>
              <em:maxVersion>4.0.0.*</em:maxVersion>
              <em:minVersion>4.0a1</em:minVersion>
              <em:updateLink>http://downloads.mozdev.org/console2/console2-0.3.8.xpi</em:updateLink>
            </RDF:Description>
          </em:targetApplication>
          <em:targetApplication>
            <RDF:Description>
              <em:id>{3550f703-e582-4d05-9a08-453d09bdfdc6}</em:id>
              <em:maxVersion>3.0.*</em:maxVersion>
              <em:minVersion>1.5</em:minVersion>
              <em:updateLink>http://downloads.mozdev.org/console2/console2-0.3.8.xpi</em:updateLink>
            </RDF:Description>
          </em:targetApplication>
          <em:targetApplication>
            <RDF:Description>
              <em:id>{3db10fab-e461-4c80-8b97-957ad5f8ea47}</em:id>
              <em:maxVersion>9.0.*</em:maxVersion>
              <em:minVersion>9.0a</em:minVersion>
              <em:updateLink>http://downloads.mozdev.org/console2/console2-0.3.8.xpi</em:updateLink>
            </RDF:Description>
          </em:targetApplication>
          <em:targetApplication>
            <RDF:Description>
              <em:id>{718e30fb-e89b-41dd-9da7-e25a45638b28}</em:id>
              <em:maxVersion>0.7.*</em:maxVersion>
              <em:minVersion>0.3.1</em:minVersion>
              <em:updateLink>http://downloads.mozdev.org/console2/console2-0.3.8.xpi</em:updateLink>
            </RDF:Description>
          </em:targetApplication>
          <em:targetApplication>
            <RDF:Description>
              <em:id>{92650c4d-4b8e-4d2a-b7eb-24ecf4f6b63a}</em:id>
              <em:maxVersion>1.5.*</em:maxVersion>
              <em:minVersion>1.0</em:minVersion>
              <em:updateLink>http://downloads.mozdev.org/console2/console2-0.3.8.xpi</em:updateLink>
            </RDF:Description>
          </em:targetApplication>
          <em:targetApplication>
            <RDF:Description>
              <em:id>{a463f10c-3994-11da-9945-000d60ca027b}</em:id>
              <em:maxVersion>0.9.*</em:maxVersion>
              <em:minVersion>0.5</em:minVersion>
              <em:updateLink>http://downloads.mozdev.org/console2/console2-0.3.8.xpi</em:updateLink>
            </RDF:Description>
          </em:targetApplication>
          <em:targetApplication>
            <RDF:Description>
              <em:id>{ec8030f7-c20a-464f-9b0e-13a3a9e97384}</em:id>
              <em:maxVersion>3.0.*</em:maxVersion>
              <em:minVersion>1.5</em:minVersion>
              <em:updateLink>http://downloads.mozdev.org/console2/console2-0.3.8.xpi</em:updateLink>
            </RDF:Description>
          </em:targetApplication>
          <em:version>0.3.7</em:version>
        </RDF:Description>
      </RDF:li>
      <RDF:li>
        <RDF:Description about="urn:mozilla:extension:{1280606b-2510-4fe0-97ef-9b5a22eafe80}:0.3.7">
          <em:targetApplication>
            <RDF:Description>
              <em:id>dlm@emusic.com</em:id>
              <em:maxVersion>4.0.0.*</em:maxVersion>
              <em:minVersion>4.0a1</em:minVersion>
              <em:updateLink>http://downloads.mozdev.org/console2/console2-0.3.7.xpi</em:updateLink>
            </RDF:Description>
          </em:targetApplication>
          <em:targetApplication>
            <RDF:Description>
              <em:id>{3550f703-e582-4d05-9a08-453d09bdfdc6}</em:id>
              <em:maxVersion>3.0.*</em:maxVersion>
              <em:minVersion>1.5</em:minVersion>
              <em:updateLink>http://downloads.mozdev.org/console2/console2-0.3.7.xpi</em:updateLink>
            </RDF:Description>
          </em:targetApplication>
          <em:targetApplication>
            <RDF:Description>
              <em:id>{718e30fb-e89b-41dd-9da7-e25a45638b28}</em:id>
              <em:maxVersion>0.6.*</em:maxVersion>
              <em:minVersion>0.3.1</em:minVersion>
              <em:updateLink>http://downloads.mozdev.org/console2/console2-0.3.7.xpi</em:updateLink>
            </RDF:Description>
          </em:targetApplication>
          <em:targetApplication>
            <RDF:Description>
              <em:id>{92650c4d-4b8e-4d2a-b7eb-24ecf4f6b63a}</em:id>
              <em:maxVersion>1.5.*</em:maxVersion>
              <em:minVersion>1.0</em:minVersion>
              <em:updateLink>http://downloads.mozdev.org/console2/console2-0.3.7.xpi</em:updateLink>
            </RDF:Description>
          </em:targetApplication>
          <em:targetApplication>
            <RDF:Description>
              <em:id>{a463f10c-3994-11da-9945-000d60ca027b}</em:id>
              <em:maxVersion>0.8.*</em:maxVersion>
              <em:minVersion>0.5</em:minVersion>
              <em:updateLink>http://downloads.mozdev.org/console2/console2-0.3.7.xpi</em:updateLink>
            </RDF:Description>
          </em:targetApplication>
          <em:targetApplication>
            <RDF:Description>
              <em:id>{ec8030f7-c20a-464f-9b0e-13a3a9e97384}</em:id>
              <em:maxVersion>3.0.*</em:maxVersion>
              <em:minVersion>1.5</em:minVersion>
              <em:updateLink>http://downloads.mozdev.org/console2/console2-0.3.7.xpi</em:updateLink>
            </RDF:Description>
          </em:targetApplication>
          <em:version>0.3.7</em:version>
        </RDF:Description>
      </RDF:li>
    </RDF:Seq>
  </em:updates>
</RDF:Description>
</pre>
</pre>


This is then signed using the author's private key. The signature is base64 encoded and added as an em:signature resource to the add-on's update manifest. Following is an example update manifest with an included signature:
This is then signed using the author's private key. The signature is base64 encoded and added as an em:signature resource to the add-on's update manifest. Following is the example update manifest with an included signature. Note the vast difference between the original hand written rdf and what mozilla's rdf serialiser generates. Despite this the rdf remains the same and so the above method of generating the string to sign yields the same result.


<pre>
<pre>
<?xml version="1.0"?>
<?xml version="1.0"?>
<RDF:RDF xmlns:em="http://www.mozilla.org/2004/em-rdf#"
<RDF:RDF xmlns:em="http://www.mozilla.org/2004/em-rdf#"
        xmlns:NC="http://home.netscape.com/NC-rdf#"
         xmlns:RDF="http://www.w3.org/1999/02/22-rdf-syntax-ns#">
         xmlns:RDF="http://www.w3.org/1999/02/22-rdf-syntax-ns#">
   <RDF:Description RDF:about="urn:mozilla:extension:TabSidebar@blueprintit.co.uk">
  <RDF:Description RDF:about="rdf:#$F6q1N"
     <em:updates>
                  em:id="{ec8030f7-c20a-464f-9b0e-13a3a9e97384}"
      <RDF:Seq>
                  em:minVersion="1.5"
        <RDF:li RDF:resource="urn:mozilla:extension:TabSidebar@blueprintit.co.uk:1.1.5"/>
                  em:maxVersion="3.0.*"
      </RDF:Seq>
                  em:updateLink="http://downloads.mozdev.org/console2/console2-0.3.8.xpi" />
     </em:updates>
  <RDF:Description RDF:about="rdf:#$77q1N"
     <em:signature>J9bFaHr+u1PiJ777xlV2ApUTNkgbVXh/NfjdBXDlkZ8CjSsHXhFmuYD6AJqr/nYk
                  em:id="dlm@emusic.com"
                  1qkLryqEEdYo3NrLotpc5Kgy2r1J0wghNUDCNnjwjzh9LJT38KCnoqv2djb5VOmN
                  em:minVersion="4.0a1"
                  1HYLHwn3+qD+DdGBUy8VV3EeRzxiGL+wjXn0o4T5Ok4=</em:signature>
                  em:maxVersion="4.0.0.*"
                  em:updateLink="http://downloads.mozdev.org/console2/console2-0.3.8.xpi" />
  <RDF:Description RDF:about="rdf:#$w7q1N"
                  em:id="{92650c4d-4b8e-4d2a-b7eb-24ecf4f6b63a}"
                  em:minVersion="1.0"
                  em:maxVersion="1.5.*"
                  em:updateLink="http://downloads.mozdev.org/console2/console2-0.3.7.xpi" />
   <RDF:Description RDF:about="urn:mozilla:extension:{1280606b-2510-4fe0-97ef-9b5a22eafe80}:0.3.7"
                  em:version="0.3.7">
     <em:targetApplication RDF:resource="rdf:#$k7q1N"/>
    <em:targetApplication RDF:resource="rdf:#$q7q1N"/>
    <em:targetApplication RDF:resource="rdf:#$w7q1N"/>
    <em:targetApplication RDF:resource="rdf:#$C7q1N"/>
    <em:targetApplication RDF:resource="rdf:#$I7q1N"/>
    <em:targetApplication RDF:resource="rdf:#$O7q1N"/>
  </RDF:Description>
  <RDF:Description RDF:about="urn:mozilla:extension:{1280606b-2510-4fe0-97ef-9b5a22eafe80}:0.3.8"
                  em:version="0.3.7">
    <em:targetApplication RDF:resource="rdf:#$F6q1N"/>
    <em:targetApplication RDF:resource="rdf:#$L6q1N"/>
    <em:targetApplication RDF:resource="rdf:#$R6q1N"/>
     <em:targetApplication RDF:resource="rdf:#$X6q1N"/>
    <em:targetApplication RDF:resource="rdf:#$17q1N"/>
     <em:targetApplication RDF:resource="rdf:#$77q1N"/>
    <em:targetApplication RDF:resource="rdf:#$d7q1N"/>
   </RDF:Description>
   </RDF:Description>
   <RDF:Description RDF:about="urn:mozilla:extension:TabSidebar@blueprintit.co.uk:1.1.5">
   <RDF:Description RDF:about="rdf:#$C7q1N"
    <em:version>1.1.5</em:version>
                  em:id="{a463f10c-3994-11da-9945-000d60ca027b}"
    <em:targetApplication>
                  em:minVersion="0.5"
      <RDF:Description>
                  em:maxVersion="0.8.*"
        <em:id>{ec8030f7-c20a-464f-9b0e-13a3a9e97384}</em:id>
                  em:updateLink="http://downloads.mozdev.org/console2/console2-0.3.7.xpi" />
        <em:minVersion>2.0b1</em:minVersion>
  <RDF:Description RDF:about="rdf:#$R6q1N"
        <em:maxVersion>2.0.0.*</em:maxVersion>
                  em:id="{92650c4d-4b8e-4d2a-b7eb-24ecf4f6b63a}"
        <em:updateLink>http://www.oxymoronical.com/site/files/845/default/3/TabSidebar-1.1.5.xpi</em:updateLink>
                  em:minVersion="1.0"
      </RDF:Description>
                  em:maxVersion="1.5.*"
     </em:targetApplication>
                  em:updateLink="http://downloads.mozdev.org/console2/console2-0.3.8.xpi" />
  <RDF:Description RDF:about="rdf:#$X6q1N"
                  em:id="{a463f10c-3994-11da-9945-000d60ca027b}"
                  em:minVersion="0.5"
                  em:maxVersion="0.9.*"
                  em:updateLink="http://downloads.mozdev.org/console2/console2-0.3.8.xpi" />
  <RDF:Description RDF:about="rdf:#$L6q1N"
                  em:id="{3550f703-e582-4d05-9a08-453d09bdfdc6}"
                  em:minVersion="1.5"
                  em:maxVersion="3.0.*"
                  em:updateLink="http://downloads.mozdev.org/console2/console2-0.3.8.xpi" />
  <RDF:Description RDF:about="rdf:#$O7q1N"
                  em:id="dlm@emusic.com"
                  em:minVersion="4.0a1"
                  em:maxVersion="4.0.0.*"
                  em:updateLink="http://downloads.mozdev.org/console2/console2-0.3.7.xpi" />
  <RDF:Description RDF:about="rdf:#$d7q1N"
                  em:id="{3db10fab-e461-4c80-8b97-957ad5f8ea47}"
                  em:minVersion="9.0a"
                  em:maxVersion="9.0.*"
                  em:updateLink="http://downloads.mozdev.org/console2/console2-0.3.8.xpi" />
  <RDF:Seq RDF:about="rdf:#$C6q1N">
    <RDF:li RDF:resource="urn:mozilla:extension:{1280606b-2510-4fe0-97ef-9b5a22eafe80}:0.3.8"/>
    <RDF:li RDF:resource="urn:mozilla:extension:{1280606b-2510-4fe0-97ef-9b5a22eafe80}:0.3.7"/>
  </RDF:Seq>
  <RDF:Description RDF:about="rdf:#$I7q1N"
                  em:id="{718e30fb-e89b-41dd-9da7-e25a45638b28}"
                  em:minVersion="0.3.1"
                  em:maxVersion="0.6.*"
                  em:updateLink="http://downloads.mozdev.org/console2/console2-0.3.7.xpi" />
  <RDF:Description RDF:about="rdf:#$17q1N"
                  em:id="{718e30fb-e89b-41dd-9da7-e25a45638b28}"
                  em:minVersion="0.3.1"
                  em:maxVersion="0.7.*"
                  em:updateLink="http://downloads.mozdev.org/console2/console2-0.3.8.xpi" />
  <RDF:Description RDF:about="rdf:#$k7q1N"
                  em:id="{ec8030f7-c20a-464f-9b0e-13a3a9e97384}"
                  em:minVersion="1.5"
                  em:maxVersion="3.0.*"
                  em:updateLink="http://downloads.mozdev.org/console2/console2-0.3.7.xpi" />
  <RDF:Description RDF:about="urn:mozilla:extension:{1280606b-2510-4fe0-97ef-9b5a22eafe80}">
     <em:updates RDF:resource="rdf:#$C6q1N"/>
    <em:signature>cDwqOLlQYeSg0Kt05tW4uF80ySlQV6d5T9yTfw6rsA8Suf8TJy2rjeBCujIDwPrG
W/OQpjm+RgWbMHU9Qqp1NLs7Eia//Y4RGGAsieVvczX4MkXZiZlwnIi+7hb7lxXR
zpIR6DXAtvZHquXr02hXEa86xnlQt/1/rzwzBYHuI9Y=</em:signature>
   </RDF:Description>
   </RDF:Description>
  <RDF:Description RDF:about="rdf:#$q7q1N"
                  em:id="{3550f703-e582-4d05-9a08-453d09bdfdc6}"
                  em:minVersion="1.5"
                  em:maxVersion="3.0.*"
                  em:updateLink="http://downloads.mozdev.org/console2/console2-0.3.7.xpi" />
</RDF:RDF>
</RDF:RDF>
</pre>
</pre>
Line 109: Line 500:
* SHA512
* SHA512


If we select SHA1 as the hashing algorithm then either key type can be chosen, indeed it would not be necessary to standardise on the key type at all.
If we select SHA1 as the hashing algorithm then either key type can be chosen, indeed it would not be necessary to standardise on the key type at all, the key type can be detected from the key specified in the install.rdf file.
Mossop
canmove, Confirmed users
1,570

edits

Retrieved from "https://wiki.mozilla.org/Special:MobileDiff/65740"