Add-ons/Extension Signing: Difference between revisions

no edit summary
(→‎Latest Builds: Updated for 69.0 and 70.0b3)
No edit summary
Line 64: Line 64:
* If the add-on is a Mozilla Extension, the OU of the EE cert must be set to "Mozilla Extensions".
* If the add-on is a Mozilla Extension, the OU of the EE cert must be set to "Mozilla Extensions".
* If the add-on is a hotfix, the add-on ID must match the pref `extensions.hotfix.id` (currently `firefox-hotfix@mozilla.org`) and the public key hash of the end-entity cert must match the fingerprints set in `extensions.hotfix.certs.1.sha1Fingerprint` or `extensions.hotfix.certs.2.sha1Fingerprint`.
* If the add-on is a hotfix, the add-on ID must match the pref `extensions.hotfix.id` (currently `firefox-hotfix@mozilla.org`) and the public key hash of the end-entity cert must match the fingerprints set in `extensions.hotfix.certs.1.sha1Fingerprint` or `extensions.hotfix.certs.2.sha1Fingerprint`.
* If the add-on is signed with the staging root, in Nightly you need to set the pref `xpinstall.signatures.dev-root = true` to tell Firefox to verify it


refs:
refs:
Confirmed users
529

edits