Nelson B wrote:
> I seem to recall that -X either
> a) is used instead of -Z  (e.g. just "-X myextension.xpi"), or
> b) must come after -Z (e.g. "-Z myextension.xpi -X")

signtool is sometimes somewhat picky about the argument ordering, that's
true. However,

   signtool -d mycertdbdir -k mynick -p mypass -X -Z myext.xpi mysrcdir

*will* work, provided that signtool is v3.10 or later. After all,
signtool's usage says:

    -X                          Create XPI Compatible Archive
                                (used in conjunction with the -Z)
    -z                          omit signing time from signature
    -Z "jarfile"                create JAR file with the given name.
                                (Default compression level is 6.)


> The whole purpose of -X is to create an XPI file with the files in the
> required order.  And it does work.

Yes, it does ;-) (https://bugzilla.mozilla.org/show_bug.cgi?id=248751
*did* fix the problem, indeed.)

Ahryman40k wrote:
> I have forgetten to specify i am under windows XP.
> I zip myself the content of the directory once it has been signed,
> zigbert.rsa must be the first file in archive !

I'd bet you forgot to add META-INF/manifest.mf and
META-INF/zigbert.sf... what does "unzip -l extension.xpi" give as
output? ("jar tvf" also does the trick, if you have a JDK on your box)

Kaspar
_______________________________________________
dev-tech-crypto mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to