Cookie-autodelete: Firefox AddOn/Extension disabled due to expired Mozilla certificate (60 ESR "could not be verified" / disabled / install fails ("corrupt"))
ETA 2019-05-04 15:42: It turns out this is a known Mozilla bug, affecting most/all Firefox extensions. https://bugzilla.mozilla.org/show_bug.cgi?id=1548973 contains their progress on working on it. It might be several hours before things are fixed up. https://discourse.mozilla.org/t/certificate-issue-causing-add-ons-to-be-disabled-or-fail-to-install/39047 is the Mozilla announcement channel for progress working on the issue.
Describe the Bug/Feature
Thanks very much for writing Cookie Auto Delete. It's been a must use extension for me every since the FireFox 57 event horizon.
This afternoon (2019-05-04 NZST), Firefox suddenly reported that it had disabled the Cookie Auto Delete extension (while I was using Firefox), because it "could not be verified for use in Firefox". I believe at the time the browser was running I had 3.0 installed, but it now shows as having 3.0.2 installed (and disabled). My guess is possibly it tried to auto-update to 3.0.2 in the background, which failed, and then it got disabled.
I've subsequently tried to add Cookie AutoDelete again, which failed with the message "Download failed. Please check your connection." This failed both via my direct Internet connection (which is otherwise working) and via a web proxy on my colo host (which is also otherwise working).
I also attempted to access the download URL directly, which gave the error report "The add-on downloaded form this site could not be installed because it appears to be corrupt.".
Screenshot in which the bug can be seen
Steps for anyone to reproduce the bug
It appears either (a) there's an issue with https://addons.firefox.com/ at present, eg, leading to incomplete files, (b) the signing of the add-on (probably 3.0.2) is broken, or (c) perhaps the download mirrors are out of sync. My guess is this will affect other Firefox users attempting to upgrade/download now (but possibly not all of them).
Currently all my attempts to re-enable/re-install are failing.
Your settings
- OS/version: macOS 10.4.4 ("Mojave")
- Browser/version: Firefox 60.6.1esr
- Cookie AutoDelete version: 3.0.2 (I believe 3.0 when the problem first triggered, but 3.02 install fails, so my guess is it's an auto-ugprade to 3.0.2 issue)
In case it helps, this is the download file that I'm getting at present; the zip file itself does not appear to be corrupt, so my guess is it's a signing issue:
ewen@mcneill:/var/tmp$ wget 'https://addons.mozilla.org/firefox/downloads/file/1906813/cookie_autodelete-3.0.2-an+fx.xpi?src=dp-btn-primary'
--2019-05-04 13:35:05-- https://addons.mozilla.org/firefox/downloads/file/1906813/cookie_autodelete-3.0.2-an+fx.xpi?src=dp-btn-primary
Resolving addons.mozilla.org (addons.mozilla.org)... 34.209.31.216, 34.208.191.228, 52.34.226.199, ...
Connecting to addons.mozilla.org (addons.mozilla.org)|34.209.31.216|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://addons.cdn.mozilla.net/user-media/addons/784287/cookie_autodelete-3.0.2-an+fx.xpi?filehash=sha256%3Aec1abb6ae918a1ad63d3e878cf402dc02dde1e4470b0f4b32a3de29bc8eb003a [following]
--2019-05-04 13:35:08-- https://addons.cdn.mozilla.net/user-media/addons/784287/cookie_autodelete-3.0.2-an+fx.xpi?filehash=sha256%3Aec1abb6ae918a1ad63d3e878cf402dc02dde1e4470b0f4b32a3de29bc8eb003a
Resolving addons.cdn.mozilla.net (addons.cdn.mozilla.net)... 13.35.143.59
Connecting to addons.cdn.mozilla.net (addons.cdn.mozilla.net)|13.35.143.59|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 317653 (310K) [application/x-xpinstall]
Saving to: 'cookie_autodelete-3.0.2-an+fx.xpi?src=dp-btn-primary'
cookie_autodelete-3 100%[===================>] 310.21K --.-KB/s in 0.1s
2019-05-04 13:35:11 (2.55 MB/s) - 'cookie_autodelete-3.0.2-an+fx.xpi?src=dp-btn-primary' saved [317653/317653]
ewen@mcneill:/var/tmp$ md5sum cookie_autodelete-3.0.2-an+fx.xpi\?src\=dp-btn-primary
b96a5131579080c4e0585d33fbe4ebd8 cookie_autodelete-3.0.2-an+fx.xpi?src=dp-btn-primary
ewen@mcneill:/var/tmp$ sha1sum cookie_autodelete-3.0.2-an+fx.xpi\?src\=dp-btn-primary
f961066c7f0b9b054a853189facbbd4260ba7864 cookie_autodelete-3.0.2-an+fx.xpi?src=dp-btn-primary
ewen@mcneill:/var/tmp$ unzip -t cookie_autodelete*
Archive: cookie_autodelete-3.0.2-an+fx.xpi?src=dp-btn-primary
testing: LICENSE OK
testing: manifest.json OK
testing: popup/popup.css OK
testing: popup/popup.html OK
testing: icons/icon_32.png OK
testing: icons/close-circle.png OK
testing: icons/settings.png OK
testing: icons/icon_yellow_48.png OK
testing: icons/icon_128.png OK
testing: icons/icon_24.png OK
testing: icons/icon_red_48.png OK
testing: icons/icon_48.png OK
testing: _locales/uk/messages.json OK
testing: _locales/zh-CN/messages.json OK
testing: _locales/fr/messages.json OK
testing: _locales/ca/messages.json OK
testing: _locales/pl/messages.json OK
testing: _locales/ko/messages.json OK
testing: _locales/zh-TW/messages.json OK
testing: _locales/nl/messages.json OK
testing: _locales/cs/messages.json OK
testing: _locales/tr/messages.json OK
testing: _locales/sv-SE/messages.json OK
testing: _locales/ro/messages.json OK
testing: _locales/el/messages.json OK
testing: _locales/de/messages.json OK
testing: _locales/bg/messages.json OK
testing: _locales/da/messages.json OK
testing: _locales/pt-BR/messages.json OK
testing: _locales/sr/messages.json OK
testing: _locales/pt-PT/messages.json OK
testing: _locales/he/messages.json OK
testing: _locales/it/messages.json OK
testing: _locales/es-ES/messages.json OK
testing: _locales/hu/messages.json OK
testing: _locales/id/messages.json OK
testing: _locales/no/messages.json OK
testing: _locales/en/messages.json OK
testing: _locales/ar/messages.json OK
testing: _locales/ja/messages.json OK
testing: _locales/ru/messages.json OK
testing: _locales/af/messages.json OK
testing: _locales/fi/messages.json OK
testing: _locales/vi/messages.json OK
testing: settings/settings.css OK
testing: settings/settings.html OK
testing: settings/side-menu.css OK
testing: bundles/common-popup-setting.bundle.js OK
testing: bundles/setting.bundle.js OK
testing: bundles/common-background-popup-setting.bundle.js OK
testing: bundles/background.bundle.js OK
testing: bundles/popup.bundle.js OK
testing: global_files/browserDetect.js OK
testing: global_files/popper.min.js OK
testing: global_files/bootstrap.min.js OK
testing: global_files/bootstrap.min.css OK
testing: global_files/browser-polyfill.js OK
testing: global_files/redux-webext.js OK
testing: global_files/jquery-3.2.1.slim.min.js OK
testing: META-INF/cose.manifest OK
testing: META-INF/cose.sig OK
testing: META-INF/manifest.mf OK
testing: META-INF/mozilla.sf OK
testing: META-INF/mozilla.rsa OK
No errors detected in compressed data of cookie_autodelete-3.0.2-an+fx.xpi?src=dp-btn-primary.
ewen@mcneill:/var/tmp$
ewenmcneill
👍1
All 10 comments
Also in case it helps, this is the signing manifest file that I'm seeing (and I'm getting the same zip file downloading from three different locations -- but same country, so probably same CDN node). Relevant files identified from https://wiki.mozilla.org/Add-ons/Extension_Signing.
It looks to me like the SHA1 / SHA256's of the META-INF/manifest.mf match:
ewen@mcneill:/var/tmp$ unzip -p cookie_autodelete* META-INF/manifest.mf | openssl dgst -binary -sha1 | base64; unzip -p cookie_autodelete* META-INF/mozilla.sf | awk '/SHA1/ { print $2; }'
Z8AcA5VG8XiVwF/mNVRkJqnX6vk=
Z8AcA5VG8XiVwF/mNVRkJqnX6vk=
ewen@mcneill:/var/tmp$ (unzip -p cookie_autodelete* META-INF/manifest.mf | openssl dgst -binary -sha1 | base64; unzip -p cookie_autodelete* META-INF/mozilla.sf | awk '/SHA1/ { print $2; }') | uniq -c
2 Z8AcA5VG8XiVwF/mNVRkJqnX6vk=
ewen@mcneill:/var/tmp$
ewen@mcneill:/var/tmp$ (unzip -p cookie_autodelete* META-INF/manifest.mf | openssl dgst -binary -sha256 | base64; unzip -p cookie_autodelete* META-INF/mozilla.sf | awk '/SHA256/ { print $2; }')
0rdmIqWBQcv1KirmD5t+LgQktjZDrCEPWJUl3EsBdVU=
0rdmIqWBQcv1KirmD5t+LgQktjZDrCEPWJUl3EsBdVU=
ewen@mcneill:/var/tmp$ (unzip -p cookie_autodelete* META-INF/manifest.mf | openssl dgst -binary -sha256 | base64; unzip -p cookie_autodelete* META-INF/mozilla.sf | awk '/SHA256/ { print $2; }') | uniq -c
2 0rdmIqWBQcv1KirmD5t+LgQktjZDrCEPWJUl3EsBdVU=
ewen@mcneill:/var/tmp$
and I've been able to exactly recreate manifest.mf as well, so those checksums are correct:
ewen@mcneill:/var/tmp/cookie$ (echo "Manifest-Version: 1.0"; for FILE in $(awk '/Name:/ { print $2;}' META-INF/manifest.mf); do echo ""; echo "Name: ${FILE}"; echo "Digest-Algorithms: SHA1 SHA256"; echo -n "SHA1-Digest: "; openssl dgst -binary -sha1 "${FILE}" | base64; echo -n "SHA256-Digest: "; openssl dgst -binary -sha256 "${FILE}" | base64; done; echo "") >/tmp/manifest-recreated
ewen@mcneill:/var/tmp/cookie$ diff META-INF/manifest.mf /tmp/manifest-recreated
ewen@mcneill:/var/tmp/cookie$
but that's only part of the verification algorithm.
Unfortunately I can't figure out what the right CA File is to check the RSA signature (the example appears to be this test certificate, but unsurprisingly it doesn't look like the production data is signed with a "test.addons" key). Which means I can't check the RSA signature / check for revocation of that certificate.
So my guess for the cause is the RSA signature.... but I can't prove that.
Ewen
ewen@mcneill:/var/tmp$ unzip cookie* 'META-INF/*'
Archive: cookie_autodelete-3.0.2-an+fx.xpi?src=dp-btn-primary
inflating: META-INF/cose.manifest
inflating: META-INF/cose.sig
inflating: META-INF/manifest.mf
inflating: META-INF/mozilla.sf
inflating: META-INF/mozilla.rsa
ewen@mcneill:/var/tmp$
ewen@mcneill:/var/tmp$ unzip -p cookie_autodelete* META-INF/mozilla.sf
Signature-Version: 1.0
SHA1-Digest-Manifest: Z8AcA5VG8XiVwF/mNVRkJqnX6vk=
SHA256-Digest-Manifest: 0rdmIqWBQcv1KirmD5t+LgQktjZDrCEPWJUl3EsBdVU=
ewen@mcneill:/var/tmp$ unzip -p cookie_autodelete* META-INF/manifest.mf
Manifest-Version: 1.0
Name: LICENSE
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: ZAsm2RBAq3Gfn45GffCzG2BkUO4=
SHA256-Digest: y5vWTOXGxZp/2dOnJOatvgSZSf818jzRXj9W/2aoNxg=
Name: manifest.json
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: 4eLo6E+ehT6Mxlyj8C+eK109pWw=
SHA256-Digest: tOb2LOgdFbJAEONtEdsf3eBPWp8d5Rz4rzQmaR1zwMk=
Name: popup/popup.css
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: dAAwNeNEDTbxmHvlreg+zTmr/w8=
SHA256-Digest: 7sAiuwW+UupMXM3YzWN4mccuAy8QGLeFRb4zb+40mDM=
Name: popup/popup.html
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: s33EcYqKJ5C3UfqDdvcqqC32hB4=
SHA256-Digest: fzs1Fq7yJgFyzQkW7ACtxsQIsIm/RU6z7UXGfN/8KI0=
Name: icons/icon_32.png
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: ZbZpeftLsPR3VAWK7HyUYyz3LXU=
SHA256-Digest: YbKmvLvFt87r8SdTshxgOW6slLj2qb9WxulKZbJLvnM=
Name: icons/close-circle.png
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: rGLu/D83ooKBKOvEGHhXmLRIa4U=
SHA256-Digest: +GTshXX7hSZVSBzPtjPJmk1SV/aOY6DTUZeN5uApSuQ=
Name: icons/settings.png
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: TH3JIBneCSIfVMEGpETTEA+0Yt8=
SHA256-Digest: mnRkyGG/hPoB7fljiuqPTYBOLCl/I3zT+WAKgGjqaY4=
Name: icons/icon_yellow_48.png
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: kOOI55vY191gQ7oTQkdsBK+msLA=
SHA256-Digest: DNmLiLPMHA0wUq7UmxXth9GzLCYamSkw7AS3B0Fxceo=
Name: icons/icon_128.png
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: FHbK2HUe6b1MZdtwB3a+kBmRfvA=
SHA256-Digest: FGDi3aLf93PDQTZ68vheIv+ZD6LeB23QCiXiXpjXk0g=
Name: icons/icon_24.png
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: X4FMhfMl5zgmoEWdDQPwq6GpYWo=
SHA256-Digest: NJbV9wcyWvM0oP5QGqtnfSV5YwS2j316j05SvetM+kQ=
Name: icons/icon_red_48.png
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: 7BKnLt2o6NcTcMnvSzqmTCswTqI=
SHA256-Digest: bLUqMuncPpbioHV30s4KlmlzumyyQcz+eVf3fv3Nh8I=
Name: icons/icon_48.png
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: LtYzbAtH1JKa3XHjDmO4xF88XWo=
SHA256-Digest: bICDWJr5vj+g80YSLVCQvr6UG9oihoA4WXo7xsvptiM=
Name: _locales/uk/messages.json
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: Wk+dU+UT2tSRVfsTQiexraNH0QU=
SHA256-Digest: oJT//531HBeoCyxEGIPpcG8SqYsH4DZ/vZLAIbW9vfs=
Name: _locales/zh-CN/messages.json
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: aYJ5BFLbd/oXdKg8uN1WUhVLsuw=
SHA256-Digest: /Dxb5quH8DMI4eWk6/yogaHdzIVh7RE3TuNi1hNxqTo=
Name: _locales/fr/messages.json
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: SGpgchaZqhbOGdczLFCOOMlLPSU=
SHA256-Digest: 4KfjOiiU7qUmr9Ig7Xh0D6/0r2omAxY9FL9/ezAPQK8=
Name: _locales/ca/messages.json
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: vK60a8f4Rwn5h0fn+xJVJUF0png=
SHA256-Digest: TCKZz0QjFtE1PXsxnaSnNkJu3g6IZAgHQP9gUUTYvnU=
Name: _locales/pl/messages.json
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: 4me0C7ssJorke+VYpUDsjxShuYw=
SHA256-Digest: 8v9WnI+6udi2HEwt/cnuwZK9lFzg5dXubla1WE1KB44=
Name: _locales/ko/messages.json
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: vK60a8f4Rwn5h0fn+xJVJUF0png=
SHA256-Digest: TCKZz0QjFtE1PXsxnaSnNkJu3g6IZAgHQP9gUUTYvnU=
Name: _locales/zh-TW/messages.json
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: sJKFRSd/WXgYoz6fGw3ticavt4c=
SHA256-Digest: ez7LBqzjJf6zYbyjYQmET2d40gJB6J5i9wC9xZwg5Ck=
Name: _locales/nl/messages.json
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: nPkkLqbPMqhwp2Bds2PazNUrEnY=
SHA256-Digest: DIRxtfm2GDM91/4nnL1KkRDdWSBgQz44t1awnDGAfjg=
Name: _locales/cs/messages.json
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: vK60a8f4Rwn5h0fn+xJVJUF0png=
SHA256-Digest: TCKZz0QjFtE1PXsxnaSnNkJu3g6IZAgHQP9gUUTYvnU=
Name: _locales/tr/messages.json
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: 5k6WZhHWvrfhEPkZLQ5QxS64+74=
SHA256-Digest: R1lDtn5NtxTbRW0t8naR9iz/9n6Ku4GoegUseW+ZlDg=
Name: _locales/sv-SE/messages.json
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: egT/8O2kfUgQdg3xW+7VoVIdLOA=
SHA256-Digest: CWYrpfNFxSDnwOYyrcLurNBUO+fYQjoWj/AOtdOhaq0=
Name: _locales/ro/messages.json
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: CABcS5u1h3pblmdcl8BQ8WAWIzA=
SHA256-Digest: /giT8+qEpaDSMJs/PTfnemDVHNkGHJoPaXu7Pv4okv0=
Name: _locales/el/messages.json
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: mJ/9S1ckscfQnccANy5qwqff2DM=
SHA256-Digest: HwwnrsZWBmf4VcDttdRRoFAhXBUWsWn8DiAR/oKtlZY=
Name: _locales/de/messages.json
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: QBBdCVmVQKNeC0isADqJ8acAK/E=
SHA256-Digest: W6X5NDPUKbLqlHGs6TDYne7V2h/aE/G53VHMT86LOcA=
Name: _locales/bg/messages.json
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: XAWHMefyNywNQYRsg3+K7HpeCEQ=
SHA256-Digest: 53kGa/piVVbXZCtczbwCwCmSNR3efrU8Ee+c4MeEfX8=
Name: _locales/da/messages.json
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: OfYkqrSf//suCTcM899yPw4UEiE=
SHA256-Digest: GLQ1mQVPgOByoeGHul6AZjl5+1puFW6TnDWkDyCLCaA=
Name: _locales/pt-BR/messages.json
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: GoVu4GjiOkqxEAEPJ9EvJ56nFGg=
SHA256-Digest: xKyFI7sGBAx9IpcFCvv0sKKrpFfSYMF7iqmpQbyHwXk=
Name: _locales/sr/messages.json
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: Z4fy5mlxlYp/8+azKHexGvbKe/o=
SHA256-Digest: YiVokrdLlsQyAw9fxR9LP7Zzcu5trfh3Me/wHNdSRVI=
Name: _locales/pt-PT/messages.json
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: mS/S9e29QF61/WDlB+HIVnHbMYk=
SHA256-Digest: FLt7RX4iOBmdjsKaLnUWLkz0Tv0VmQUz127FmmExHdI=
Name: _locales/he/messages.json
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: vK60a8f4Rwn5h0fn+xJVJUF0png=
SHA256-Digest: TCKZz0QjFtE1PXsxnaSnNkJu3g6IZAgHQP9gUUTYvnU=
Name: _locales/it/messages.json
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: RbLHHXBysEnxWy6aJH6NZskvjdA=
SHA256-Digest: 3HLnvlesVC+F20KbpuNODvdBMNBFkTEya9+StKVseLs=
Name: _locales/es-ES/messages.json
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: 8I6ZRgGlPwqzkxNwzu0Gi2KWbyE=
SHA256-Digest: Tfx57B7G9PIsW3HxMRD4jNqKq/XJm2NuE3c+h5iE6QY=
Name: _locales/hu/messages.json
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: LJV2tm7hneH5p38zpTaep5fcMY8=
SHA256-Digest: sgCBifoX62n/HQZp0vSYB5lfrA3iHKfzFuDJNEBWkqE=
Name: _locales/id/messages.json
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: wVg1vn8048H+3wKo3QRPEG9RO/c=
SHA256-Digest: XjTuvGJ7vpk2CqiJAu6iXpaRf+qXDTCUY135ZH2JD0c=
Name: _locales/no/messages.json
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: P+c+7RPziFrlMBr/ibsADlPsiO4=
SHA256-Digest: A+xnIENO6Ikwn1vvPePWVYeSiInHP7qUFM0FRC7iTNk=
Name: _locales/en/messages.json
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: fW/yBv5PYS0lMccEgf4MabygMXs=
SHA256-Digest: A4TUMp95OTZFbBcFTRp1wN+TSH1vZ5F00+GuQj3B6nc=
Name: _locales/ar/messages.json
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: yVY7sf4Cy4Qv6aFGT1DxLoOzzcM=
SHA256-Digest: Mw2W0rF3bayUiUD7dy6Skk2Lbq+oTqJnGko848GrzGo=
Name: _locales/ja/messages.json
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: SdOtXlQuAboBTNHIlk7DONHemeI=
SHA256-Digest: 0XRJMRHfdWWfhpC9dIfCOF7BbbhVzj5n8p6Hmh+CZ4g=
Name: _locales/ru/messages.json
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: 3RaspKTxT3Eg0OOdeZTALf9pIVk=
SHA256-Digest: AvPA58FdxyJbDxU9Kc42m1fbWdjmJIViKqw4lOrZ3Xk=
Name: _locales/af/messages.json
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: moJes6NV2BBBxDU2wimUmNYezvI=
SHA256-Digest: lcN3vI64oy+7JWYzjDAwkqY7ENaFw07dVxldtsf1U6Q=
Name: _locales/fi/messages.json
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: Y31WenKll3Ug3cfAth3Qk9WtaAE=
SHA256-Digest: JhxsK+TrL053PqyeA+k4cpRiTJ3laoOLlZei7f52bYc=
Name: _locales/vi/messages.json
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: vK60a8f4Rwn5h0fn+xJVJUF0png=
SHA256-Digest: TCKZz0QjFtE1PXsxnaSnNkJu3g6IZAgHQP9gUUTYvnU=
Name: settings/settings.css
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: uWmHFt5mINOfM6X5tvCfUXCl33I=
SHA256-Digest: sRJheVHIgPYuQUMkuRzZThwW/DU2n0mBaPwlDqYYMEM=
Name: settings/settings.html
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: qMmxNFvVwCGc3EuwsgnlSev6OU0=
SHA256-Digest: 1xcGiFCgi9SJD6IwT+K6gDHHmAEoj+HOoZReN8RoBT8=
Name: settings/side-menu.css
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: 1FYdolQP8h7lEzZ5mOXtXKBdErk=
SHA256-Digest: 5Zpr5Y80xaHPy0ITv7I1iJRZY3KvWPx3Clwhf5q6Oz0=
Name: bundles/common-popup-setting.bundle.js
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: 6kbx7ArUASrFRV+FTmbp9gBmSN0=
SHA256-Digest: MLZuzu2MzG2zkQ0eI3FCY7ouxrdrtsORxEaiF2LtuQo=
Name: bundles/setting.bundle.js
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: 545Mh/vguXvmBYIIoQj7Rp8IoUg=
SHA256-Digest: fL34w5j3+7nssiELF+9A3Em1xsRB9C/LVUTxH4dZU+k=
Name: bundles/common-background-popup-setting.bundle.js
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: 02xinqeW3zortR789k4z97m3imI=
SHA256-Digest: bgboACG0oH5EUa7/rKxn6DuUO403wWwIhK4hBVY6dn0=
Name: bundles/background.bundle.js
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: dDMNG3Zvne4uQAdAOjHxaka4w3U=
SHA256-Digest: yDJgHMOAcoP8s8Drf/MLFnRnurDCJmURltDp0XCUDnU=
Name: bundles/popup.bundle.js
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: 2rjc8NHHx0CUBC4brTUfyh6JhuM=
SHA256-Digest: BxiajoJiNdw4zFS53IgTyJuEbT5JVEa8ZBpsDSWhQNI=
Name: global_files/browserDetect.js
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: rKKIWlUqjePMkZ+2716b6CPmF08=
SHA256-Digest: +5q5r4yVVDDCLmoS7Co6k9XvdQ9Nex05/BC3+E49SiE=
Name: global_files/popper.min.js
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: 2FA2RcF/mFaGin3vPcBQXhmpXsc=
SHA256-Digest: 98vAGjEDGN79TjHkYWVD4s87rvWkdWLHPs5MC3FvFX4=
Name: global_files/bootstrap.min.js
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: XvLBW0fXKQaYxzdna6nDBWtF8ug=
SHA256-Digest: C8oQVJ33cKtnkARnmeWp6SDChkU+u7KvsNMFUzkkUzk=
Name: global_files/bootstrap.min.css
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: jlLdgYVi2wugdku6Fyy5HOJI2LA=
SHA256-Digest: NJWeQ+bs82iAeoT5Ktmqbi3NXwxcHlfaVejzJI2dklU=
Name: global_files/browser-polyfill.js
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: KqL2PWpFVTsUW5JGWq3r8J2VcT0=
SHA256-Digest: 3WYPooaIiDJgZaGfEwD22X9TFfR3rbQJ9NDAEUYvK3g=
Name: global_files/redux-webext.js
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: yiKZXib8/BxnBYjYdNL/jmyARZ8=
SHA256-Digest: dblwWTvbIPVsJjVCKvvjRnZm0eVUIiIL/FztsK3xIYo=
Name: global_files/jquery-3.2.1.slim.min.js
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: nonRUVvEw3G4b0yxAC/Y43fBgp8=
SHA256-Digest: k2WSCIexGzOj3Euiig+TlR8gA0EmPjuc79OEeY5L45g=
Name: META-INF/cose.manifest
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: TH3z11E36cgGTrMkKNPeF1UgjH4=
SHA256-Digest: qI1j9E69UnI7kKhb0FNB0tPNgARqmWWsS6GuZUyOG+Y=
Name: META-INF/cose.sig
Digest-Algorithms: SHA1 SHA256
SHA1-Digest: CXXZefuvrezRvtyYEFnrkdQPlz0=
SHA256-Digest: RFpIQboH767LiADG3/H5VCfRtc6ASRZadv1RALRkWmQ=
ewen@mcneill:/var/tmp$
I think I've found the problem: one of the CA certificates in the addons signing chain seems to have expired: Not After : May 4 00:09:46 2019 GMT. That's about 2.5 hours ago.
Ewen
wen@mcneill:/var/tmp/cookie$ openssl pkcs7 -inform DER -text -print_certs < META-INF/mozilla.rsa | egrep 'Subject:|Issuer:|Not'
Issuer: C=US, O=Mozilla Corporation, OU=Mozilla AMO Production Signing Service, CN=signingca1.addons.mozilla.org/[email protected]
Not Before: Apr 28 21:55:09 2019 GMT
Not After : Apr 27 21:55:09 2020 GMT
Subject: C=US, ST=CA, L=Mountain View, O=Addons, OU=Production, [email protected]
Issuer: C=US, O=Mozilla Corporation, OU=Mozilla AMO Production Signing Service, CN=root-ca-production-amo
Not Before: May 4 00:09:46 2017 GMT
Not After : May 4 00:09:46 2019 GMT
Subject: C=US, O=Mozilla Corporation, OU=Mozilla AMO Production Signing Service, CN=signingca1.addons.mozilla.org/[email protected]
ewen@mcneill:/var/tmp/cookie$
From https://www.di-mgt.com.au/how-mozilla-signs-addons.html, and https://wiki.mozilla.org/Add-ons/Firefox57#Testing_signed_extensions, I've been able to extract this out of the certificates from the RSA file, which is where I found the dates.
Ewen
ewen@mcneill:/var/tmp/cookie$ openssl pkcs7 -inform DER -text -print_certs < META-INF/mozilla.rsa
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:99:c2:0d:69:d7:6d:e3
Signature Algorithm: sha384WithRSAEncryption
Issuer: C=US, O=Mozilla Corporation, OU=Mozilla AMO Production Signing Service, CN=signingca1.addons.mozilla.org/[email protected]
Validity
Not Before: Apr 28 21:55:09 2019 GMT
Not After : Apr 27 21:55:09 2020 GMT
Subject: C=US, ST=CA, L=Mountain View, O=Addons, OU=Production, [email protected]
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (4096 bit)
Modulus:
00:c4:04:07:57:6f:80:44:45:b3:e3:f6:d9:5e:7e:
98:34:b6:ab:a9:46:a5:dd:44:84:77:ea:e3:e0:ec:
8a:19:bf:b9:7e:e6:c3:08:f4:1f:95:48:de:da:00:
31:a1:ad:ac:77:b0:4b:10:7c:9f:79:aa:bf:bd:b0:
2d:54:7a:69:ab:9a:47:1c:c2:fe:f1:3f:e1:c2:d2:
77:cb:0f:98:86:a3:88:59:6f:82:9d:20:70:03:7e:
5c:bc:0b:4a:22:71:24:45:f4:ae:33:25:98:f4:e8:
1f:ef:d4:33:81:a2:17:af:51:cf:5f:38:76:4b:b4:
b7:0b:3c:13:6b:f3:24:a6:7a:e7:45:7d:09:e4:0a:
cb:f0:cf:bf:51:52:85:91:e7:76:8a:a2:49:0e:b0:
4e:04:c8:ac:38:2e:e2:43:8f:52:5f:d8:7d:bb:78:
04:93:40:5f:33:2c:10:6b:c0:ad:08:6e:41:6c:d0:
71:53:5a:66:5e:49:6b:69:ab:3d:df:c4:2f:41:9a:
5e:8b:87:43:7a:33:dc:86:83:9b:87:fd:5d:54:b5:
dc:08:3a:4d:c3:6d:27:3d:e9:dd:cd:d2:87:20:2b:
b7:45:1f:86:14:06:2a:95:d8:90:ea:d6:9c:84:d7:
44:f9:f2:89:b9:b6:e5:8e:c4:71:5e:f9:98:71:e9:
60:ad:0f:1e:d5:3a:f6:09:ef:4d:20:9d:1f:8c:46:
b3:1d:13:37:a2:c6:68:06:7a:dc:94:5a:09:dc:f7:
34:03:49:2f:41:84:0c:86:b1:1c:4a:7d:90:18:39:
75:b4:11:40:11:1b:f8:0a:ab:84:c1:d4:a5:77:17:
ac:4f:1a:20:bf:b0:58:34:0b:f7:b5:f1:f6:70:c2:
70:d1:80:04:4c:8c:eb:11:98:f6:cd:b9:33:10:71:
99:29:32:d5:c8:c6:29:73:6f:80:4d:2a:2b:01:e6:
a5:5b:94:75:79:89:d8:1e:71:59:47:5c:fd:7e:d2:
84:d2:78:a6:2c:5e:95:5b:6a:2c:57:dc:4c:f9:08:
f4:81:87:d2:31:62:35:38:2f:1a:97:e7:ec:7f:89:
e7:fa:8b:20:9d:93:cb:cd:ab:bc:e4:af:1b:8f:23:
6a:26:71:93:be:26:23:6c:20:25:8a:bb:8d:07:ab:
7c:5d:7b:d9:11:04:ba:db:c6:31:dd:a6:a5:3a:e2:
eb:d4:94:c8:d5:d0:07:d3:eb:f9:48:15:1f:55:83:
ad:9a:de:1d:cf:f5:59:bf:80:cc:c7:b4:fa:78:5f:
16:eb:cc:db:62:40:f6:63:c0:0a:03:73:e6:61:ff:
59:c9:c0:4c:61:df:6c:23:82:b5:46:f7:c4:10:df:
65:98:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Extended Key Usage:
Code Signing
X509v3 Authority Key Identifier:
keyid:16:3E:FB:1C:FF:0C:2B:93:F8:9B:15:D7:2D:A3:C2:E6:78:61:DC:ED
X509v3 Subject Alternative Name:
DNS:7171731ae96e51fe9a675a15f2208836.c658e3c3a970e3373dfcd3687e4a0385.addons.mozilla.org
Signature Algorithm: sha384WithRSAEncryption
84:0e:bb:6d:2e:c2:74:83:14:df:2c:5e:da:1c:64:81:d2:fe:
3d:02:30:57:95:85:43:49:b3:07:66:bd:a1:22:4a:c7:f3:38:
76:33:97:0e:02:b9:86:c8:fb:82:92:f2:9b:13:c3:f9:cb:7d:
50:1f:02:28:0e:cb:34:ee:70:55:83:4f:b4:81:57:c9:47:80:
4e:01:fa:b7:0c:3f:32:22:e8:0b:3f:12:4b:56:c0:96:60:a5:
c1:e1:54:cc:32:af:d8:61:fa:97:91:56:cf:8e:d2:c4:45:4b:
c1:28:6d:b9:ce:e9:21:84:46:f6:f7:43:a0:4f:73:f8:64:c9:
b2:e1:71:4c:18:1b:9d:12:f7:b6:a3:0e:fe:b6:8c:6d:a5:5c:
00:3a:46:77:7a:8b:1b:68:f3:ef:ba:9e:f0:b9:3e:df:77:4f:
c9:08:77:a0:73:89:41:07:f0:a2:6e:66:5e:e4:e2:4c:08:81:
e2:db:25:40:86:58:86:da:fe:8d:99:cb:de:1e:db:fd:21:fd:
b2:36:f8:07:11:0c:0d:dd:2d:84:21:b5:d6:16:d7:eb:09:f4:
26:43:8b:84:cf:d9:58:f1:17:84:a4:99:16:0d:75:10:35:ef:
b9:af:d6:c1:d2:eb:22:ef:88:89:bc:8d:7b:e3:b4:c0:71:58:
d8:0c:69:cd:f3:b3:ae:62:f8:ea:30:3a:17:5a:08:80:5e:c8:
bd:d0:b4:8f:cc:62:49:2e:5d:3e:c4:37:5b:ce:85:70:06:82:
14:2e:c6:e1:2f:d9:df:8f:d2:b0:90:07:a7:21:b6:de:91:78:
5a:d3:19:36:78:9c:ea:0c:28:6e:a9:47:a1:57:83:21:85:41:
b3:b6:79:27:9c:79:49:ed:74:19:19:20:a7:94:e1:ca:39:3e:
25:6f:f7:30:b4:a4:1e:c6:c3:a4:26:f6:e2:96:f5:8c:57:24:
1a:d0:13:86:69:f2:7d:f7:ae:70:84:bd:5d:5a:41:85:46:bb:
d8:aa:1f:4f:38:29:6a:ae:81:e3:b0:79:3f:02:4c:58:70:c4:
41:c4:49:ef:79:91:69:03:bd:9f:5d:55:c3:55:df:c7:87:97:
49:21:87:07:df:d7:30:b6:4f:5b:f5:f5:b6:48:a0:bc:3e:4c:
ba:74:8b:7f:11:a8:e8:29:73:2e:40:2a:48:69:17:7c:08:75:
0e:68:a9:1d:58:f9:b0:0e:25:9c:9c:81:80:fd:2b:48:61:31:
05:a4:16:5e:f3:af:5f:47:bc:92:9c:23:a8:0b:d3:25:8c:47:
24:12:2e:7f:ae:7a:46:cf:85:36:a9:fb:b6:2b:71:59:e3:b6:
43:b9:ee:48:72:5a:a0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1048580 (0x100004)
Signature Algorithm: sha384WithRSAEncryption
Issuer: C=US, O=Mozilla Corporation, OU=Mozilla AMO Production Signing Service, CN=root-ca-production-amo
Validity
Not Before: May 4 00:09:46 2017 GMT
Not After : May 4 00:09:46 2019 GMT
Subject: C=US, O=Mozilla Corporation, OU=Mozilla AMO Production Signing Service, CN=signingca1.addons.mozilla.org/[email protected]
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (4096 bit)
Modulus:
00:bf:aa:5b:a2:88:8f:b0:3b:aa:86:03:8b:c7:ed:
c1:ef:5a:f5:e9:76:3b:bd:26:7b:db:c2:7a:db:62:
6c:61:b5:4a:5f:4b:af:0b:6d:d8:c6:1a:db:fb:44:
fe:85:d5:78:47:4f:83:14:de:fe:06:b8:cb:a5:1f:
41:38:59:f6:a5:9b:c7:af:b1:bd:ed:04:94:4c:24:
f2:02:25:7e:54:08:b8:ba:54:9e:89:da:f8:a9:5d:
25:81:7f:cc:5b:70:e0:7e:3d:8e:4a:93:a2:fe:11:
98:96:69:ea:62:33:6d:c2:75:a6:63:34:e2:42:00:
1e:b0:14:79:46:7b:ec:d4:93:ce:f0:86:92:da:ec:
6a:ed:ac:78:d3:6f:cb:bd:4d:24:be:9b:08:e1:be:
07:cf:f0:82:d9:ad:68:73:6f:91:ff:c9:b8:26:0f:
b8:d8:68:91:88:0d:8f:d6:0e:6a:b5:81:57:b4:dd:
f4:a1:c4:3d:3d:32:5d:4f:ec:7d:fc:a3:99:1b:14:
b9:db:6e:aa:6a:0b:a9:fc:49:f5:08:df:53:22:24:
05:c0:37:67:ba:ac:03:8c:f0:49:a8:70:06:34:10:
2e:4a:52:8a:17:29:1b:18:bc:7c:e1:c3:01:e4:c0:
86:db:7b:a4:29:4d:49:48:aa:fc:35:30:f9:50:3e:
ce:d9:bb:f3:01:9d:59:b2:19:34:aa:27:1b:58:a2:
49:6b:d0:c6:84:5e:72:4d:63:78:37:14:37:f5:47:
43:a9:a7:6f:c1:11:8f:55:87:71:5c:f4:fa:ba:a9:
62:21:1a:83:32:59:db:9e:a1:26:1a:f8:65:11:a8:
36:ec:b9:89:e4:ed:99:32:b3:12:be:c9:1a:05:26:
ee:31:dd:35:01:98:c2:8c:d7:88:d0:28:b8:31:be:
e2:33:59:59:fa:aa:0e:9c:c3:bc:9e:fc:36:0d:b9:
f7:3e:0d:23:d2:4d:26:a4:4a:c5:89:f4:83:f1:88:
05:3b:c4:9f:86:08:cc:da:67:5d:18:dd:51:8e:c9:
b1:8b:b8:fc:43:95:27:7a:28:02:c0:a0:c7:25:f6:
08:41:da:6b:df:07:43:77:c2:fe:ae:5a:76:ca:bb:
18:a1:ab:fa:83:a6:cf:85:8e:58:8d:be:be:c2:eb:
a9:88:54:7f:bd:ae:4c:87:23:2e:86:80:85:25:c2:
be:c4:f3:c4:2a:c3:e4:90:78:d7:a9:87:a3:48:63:
ce:4f:2f:8a:74:63:c2:a2:bc:a3:f8:27:dd:bc:b6:
9a:75:f3:02:ee:1c:d6:c8:1b:e6:1a:52:4e:56:50:
36:7a:ff:6e:b6:d6:98:b5:f5:46:50:f2:28:87:c4:
df:d7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints:
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Extended Key Usage: critical
Code Signing
X509v3 Subject Key Identifier:
16:3E:FB:1C:FF:0C:2B:93:F8:9B:15:D7:2D:A3:C2:E6:78:61:DC:ED
X509v3 Authority Key Identifier:
keyid:B3:BC:EA:58:74:AB:E1:6E:78:2A:B2:AB:9C:23:1E:A8:63:2C:97:B7
DirName:/C=US/O=Mozilla Corporation/OU=Mozilla AMO Production Signing Service/CN=root-ca-production-amo
serial:01
Netscape CA Revocation Url:
http://addons.mozilla.org/ca/crl.pem
X509v3 Name Constraints:
Excluded:
DNS:.content-signature.mozilla.org
DNS:content-signature.mozilla.org
Signature Algorithm: sha384WithRSAEncryption
3d:ec:c7:4e:c9:65:39:8c:12:7f:9a:1e:94:ff:01:94:29:5a:
a1:ab:b0:2c:0f:41:7a:72:de:96:01:0d:1b:e1:b5:b8:38:cf:
3d:cf:cc:3d:a5:8b:2d:c9:03:cb:06:34:e5:f0:b9:9e:cf:4b:
2d:16:ae:4f:e3:6f:58:b8:a7:07:28:63:ad:88:24:87:5f:88:
8c:08:ca:dd:42:c4:67:67:ec:e6:2f:d1:a7:7f:75:87:68:71:
7d:bc:88:1f:0a:d6:a2:35:ea:b8:ad:1f:89:cb:84:7e:c8:a6:
4e:39:34:14:67:35:3a:65:16:51:eb:62:15:ca:a0:b4:53:f3:
e9:71:0f:0a:23:da:f7:bc:82:9d:46:35:e1:89:f3:cc:3e:2e:
a8:b1:9c:b6:2c:a0:cd:00:07:16:da:18:29:14:68:ad:d1:13:
2c:bc:16:4e:58:5c:ae:7c:47:18:8f:8a:c1:56:37:f8:8c:2d:
63:be:22:f1:6f:33:ba:1b:23:9b:09:b5:d8:81:20:17:94:1c:
da:38:d9:5a:1a:6a:ed:6a:a3:19:b7:8c:62:20:e0:ad:30:9c:
ff:99:51:de:77:a8:c4:3f:45:1f:67:2d:c8:2d:dc:66:43:d7:
6b:c2:bd:21:d5:6f:53:31:f2:3f:b9:f4:e3:22:f9:bd:55:9d:
aa:77:15:0a:c1:4a:87:78:cf:ba:37:0b:b1:ab:1e:b5:b7:c9:
f8:9d:24:95:25:64:1d:cf:2b:9a:2b:0d:90:6e:01:70:3f:b7:
ae:e6:13:f7:e3:ea:fc:01:75:31:c7:c0:6e:8d:11:ae:c8:95:
17:f1:38:8b:c7:c7:30:00:cd:4f:a5:08:36:0b:6b:b0:7a:9c:
c6:d0:a1:95:c6:ee:c9:82:7a:7f:33:88:ef:fb:09:24:0d:36:
be:8d:9d:3d:94:f1:0f:b2:96:11:2a:a4:21:73:a1:96:14:d4:
83:f0:52:63:98:55:0f:4c:c7:06:53:f2:af:03:1c:a6:2f:ac:
ca:29:d4:34:1e:7b:c8:c3:e9:c2:79:aa:32:c7:ce:98:b6:6d:
b3:b3:38:48:06:ad:b5:38:51:ca:a1:fe:11:a7:20:6d:3c:b2:
c1:c2:9c:02:4c:2d:9a:c0:a4:fe:ff:ff:f3:1b:34:1f:e4:5c:
dc:ac:b2:38:dc:06:29:2b:32:67:7f:18:7a:17:81:97:22:c1:
7b:44:b9:d4:b7:89:e4:45:46:56:31:7a:b5:e5:27:e3:46:fe:
dc:04:48:bd:19:be:83:67:41:e1:f0:3c:a5:51:8d:ac:6d:b2:
4d:83:81:a4:6e:6f:24:4c:76:81:5a:0e:5c:b2:a4:c9:d2:0a:
e2:bb:d8:26:2d:d4:de:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
ewen@mcneill:/var/tmp/cookie$
Since it looks like this is a problem with Firefox's addon signing process using certificates which have now expired, I've also filed a Mozilla bug: https://bugzilla.mozilla.org/show_bug.cgi?id=1549000
Ewen
ewenmcneill
on 4 May 2019
Apparently a known bug, affecting many extensions: https://bugzilla.mozilla.org/show_bug.cgi?id=1548973
Ewen
ewenmcneill
on 4 May 2019
not a computer guy at all. I just was searching on why all of a sudden all of my firefox add-ons (I think they said "Legacy") were disabled and deleted. I'm on the most current version, but deleted it and downloaded it again and get the same errors as people state above. "check your connection' All the add-ons are there in firefox to download, you just can't. Ad Guard ad blocker, Cookies Autodelete, YouTube ad blocker and HD quality toggle for youtube and probably some others I've forgotten about. Any help would be appreciated. - thanks!
laurent7465
on 4 May 2019
@laurent7465 The simple answer seems to be that Mozilla managed to let one of the important signing certificates expire (about 3.5 hours ago now), which means pretty much all Firefox addons / extensions are being reported as "unverified" / "corrupt" / etc.
The Mozilla bug:
https://bugzilla.mozilla.org/show_bug.cgi?id=1548973
is where they're tracking this issue, and already a bunch of Mozilla bugs have been marked as duplicates of that, so I think it affects most/all of them.
Presumably Mozilla will make a new certificate and update everything, but it might take several hours (and maybe require extension / add on creators to upload new versions). Once the new certificate is made and new signed versions are available, it should be possible to install the latest version of each extension/addon to make it work again.
Hope that helps,
Ewen
PS: See also https://github.com/mozilla/addons/issues/978 for how wide spread the issue is.
ewenmcneill
on 4 May 2019
👍3
+1 for stating this is one of the best -must use- cookies management extensions available. This expired certificate effects Firefox on all platforms ( Ubuntu and Android ).
lrvl
on 4 May 2019
👍2
Sounds like a nightmare over at FireFox. Thanks for the help ewenmcneil. - Laurent
laurent7465
on 4 May 2019
Mozilla update on FireFox addons problem: https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/
Since this is a Mozilla Firefox wide issue, not a Cookie AutoDelete issue, and Mozilla have at least got a work around out (see Mozilla update above) and a permanent fix coming (new Firefox minor release updates, hopefully tomorrow), I'm closing this ticket given that everyone who needed to be able to find out about the issue hopefully already knows from all the news about the Mozilla Firefox issues.
Thanks again for Cookie AutoDelete. I'm very pleased to have been able to re-install/re-enable it; using Firefox would not be anywhere near as pleasant without Cookie AutoDelete!
Ewen
ewenmcneill
on 5 May 2019
Thanks Ewen for the help. Sorry for the late reply. Have a gr8 weekend.
-Laurent
"Remember that blessings may come in the form of tragedy, speak gratitude
into the darkness and feel the echo beating in your heart." - Noah Centineo
On Fri, May 3, 2019 at 8:41 PM Ewen McNeill notifications@github.com
wrote:
@laurent7465 https://github.com/laurent7465 The simple answer seems to
be that Mozilla managed to let one of the important signing certificates
expire (about 3.5 hours ago now), which means pretty much all Firefox
addons / extensions are being reported as "unverified" / "corrupt" / etc.The Mozilla bug:
https://bugzilla.mozilla.org/show_bug.cgi?id=1548973
is where they're tracking this issue, and already a bunch of Mozilla bugs
have been marked as duplicates of that, so I think it effects most/all of
them.Presumably Mozilla will make a new certificate and update everything, but
it might take several hours (and maybe require extension / add on creators
to upload new versions). Once the new certificate is made and new signed
versions are available, it should be possible to install the latest version
of each extension/addon to make it work again.Hope that helps,
Ewen
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
https://github.com/Cookie-AutoDelete/Cookie-AutoDelete/issues/525#issuecomment-489290365,
or mute the thread
https://github.com/notifications/unsubscribe-auth/AL7NSMB2EIGPT46XML5VTSLPTUAVZANCNFSM4HKX3JMA
.
laurent7465
on 11 May 2019
Was this page helpful?
0 / 5 - 0 ratings
Related issues
nkestrel
·
6Comments
MarkRH
·
5Comments
erotavlasme
·
3Comments
mooms06
·
7Comments
tedomedo
·
3Comments
Most helpful comment
@laurent7465 The simple answer seems to be that Mozilla managed to let one of the important signing certificates expire (about 3.5 hours ago now), which means pretty much all Firefox addons / extensions are being reported as "unverified" / "corrupt" / etc.
The Mozilla bug:
https://bugzilla.mozilla.org/show_bug.cgi?id=1548973
is where they're tracking this issue, and already a bunch of Mozilla bugs have been marked as duplicates of that, so I think it affects most/all of them.
Presumably Mozilla will make a new certificate and update everything, but it might take several hours (and maybe require extension / add on creators to upload new versions). Once the new certificate is made and new signed versions are available, it should be possible to install the latest version of each extension/addon to make it work again.
Hope that helps,
Ewen
PS: See also https://github.com/mozilla/addons/issues/978 for how wide spread the issue is.