Re: New signtool for signing XPI files

Daniel Veditz <[email protected]> wrote in message news:<[email protected]>...
> Steve S wrote:
> > 
> > When I drag and drop the resulting xpi file (temporarily available at
> > http://www.swiftview.com/svinstall_p.exe.xpi - download it and try it
> > yourself) onto Firefox version 1.0 preview release, it says:
> > "A website is requesting permission to install the following item" 
> > and our company name is visible.  After a slow countdown, the Install
> > Now button becomes clickable.  Clicking on it results in the message:
> > "Firefox could not download the file at
> > file://I:/www/sv_710/temp/svinstall_p.exe.xpi 
> > because: Signing could not be verified."
> > 
> > Note that my signtool is able to sign .exe files properly, so it isn't
> > broken in general.
> 
> Does your cert support Netscape object signing extensions? For reasons I
> don't understand the cert folks make you get a different cert to sign
> Netscape object files than the cert you can use for Microsoft stuff.
> 
> Signtool has a -G option to create a self-signed cert. Use that and install
> the cert into a test profile, then try signing with it. If you can get that
> to work then you're doing everything right, and it's cert type that's the
> problem.
> 
> -Dan Veditz

I am signing with a build of signtool numbered 3.10.

When I sign with my company cert it says:
signtool: PROBLEM signing data (Unknown issuer)
the tree "." was NOT SUCCESSFULLY SIGNED

When I sign with a test cert it says:
tree "." signed successfully

Do you think I need my certificate reissued?  What should I ask Thawte to do?

Regards,

Steve