Hi everyone,

Please tell me if I'm not posting on the right forum and where I can
find the right place.

I'm writing a script that has to be signed since it needs access to
the brother's (firefox 3.0.13) DOM. As far as I know, I need a
certificate to sign the script so I generated one with certutils and
then used signtools in order to generate a jar containing my script. I
used the doc at 
http://www.mozilla.org/projects/security/components/jssec.html#signedscript
to make it work.

certutil -N -d sFolder
signtool -G certname -d sFolder -p password
signtool -d sFolder -k certname -p password -X -Z myOutputJar.jar
(generated cert was imported to firefox)

When I call it using jar:file:///...myjar.jar!/secure.html the browser
opens it, asks for privileges, etc, no problem... BUT  jar:HTTP://
localhost/...myjar.jar!/secure.html doesn't. Sometimes after
refreshing several times it DOES but that's very unpredictable.

Do you think there is a problem with my certificate (security issue)?
Or is there another configuration to do on the server to make it work
(and thus where can I find some help concerning it)?

I tried to follow the method in http://certs.mozdev.org/cadraft.html
to generate a root certificate but it didn't work.

Thanks for your help
Adrian
_______________________________________________
dev-security mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security

Reply via email to