你如何签署你的 Firefox 扩展? [英] How do you sign your Firefox extensions?

问题描述

我已经为 Firefox 开发了几个扩展程序，但我很恼火的是很难为扩展程序签名.当扩展程序未签名时，它会在安装时显示作者未验证"，对我来说这看起来是错误的.

I have developed a couple of extensions for Firefox, and am annoyed that it is so hard to get the extension signed. When an extension isn't signed, it says "Author not verified" when it is installed, and to me that just looks wrong.

我有一个简单的构建脚本，可以从源代码构建我的 .xpi 文件，并且我有 PKZip 的许可副本(根据许多教程，构建 Firefox 所需的签名 xpi 文件需要它)，但我没有'没有找到一种方法来获得真正有效的免费/便宜的证书或一组可以解决问题的说明.

I have a simple build script that builds my .xpi file from sources, and I have a licenced copy of PKZip (which according to a number of tutorials is required to build a signed xpi file that Firefox requires), but I haven't found a way to get a free/cheap certificate that actually works or a set of instructions that do the trick.

由于我的扩展是免费的，我不想花 400 美元购买商业证书，但我不介意花 50 美元左右来完成它.我有 Linux 和 Windows 机器，虽然我的构建脚本目前使用的是 Windows，而且使用起来最方便.

Since my extensions are free, I don't want to spend $400 on a commercial certificate, but I don't mind spending $50 or so to get it done. I have both Linux and Windows machines, although my build script currently uses Windows and that would be most convenient to use.

你是怎么解决这个问题的?我需要做什么才能在构建扩展程序时自动且安全地对其进行签名?

How have you solved this? What do I need to do to automatically and securely sign my extensions when they are built?

我很欣赏 Google 的点击，但他们提供的步骤对于如何真正获得有效的证书还不够完整.我得到的感觉让我想起了这个经典:

I appreciate the Google hits, but the steps they provide aren't complete enough on how to actually get a certificate that works. The feeling I get reminds me of this classic:

推荐答案

我已经使用 comodo 证书来签署 XPI.这是当时最便宜的选择.

I've used the comodo certificate to sign XPIs. It was the cheapest option at the time.

我在 XPI 格式t 和 的操作方法使用 java 命令行工具签名.

我的工具 XPISigner 简化了流程相当大，并且可以集成到构建系统中.

My tool XPISigner simplifies the process considerably and is integratable into build systems.

我已删除该工具，因为它不再适用于 FF4 或更高版本.源代码可在 http://code.google.com/p/xpisigner/ 上获得，如果任何人都想修复.

I've removed the tool as it no longer works with FF4 or higher. Source is available on http://code.google.com/p/xpisigner/ if anyone feels like fixing.

这篇关于你如何签署你的 Firefox 扩展?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！