All extensions disabled due to expiration of intermediate signing cert

Re:All extensions disabled due to expiration of intermediate... by gpm on Saturday May 04, 2019 @03:03PM (#19828500)

So, I don't have any good ideas why. Can you give me more information about what exactly happens? Can't promise anything but details might help.

I.e. something like

- I open the browser console

- I click the .xpi link

- The following appears in the browser console immediately after clicking the link:

    WebExtensions: new intermediate certificate added api.js:15
    WebExtensions: signatures re-verified api.js:23

- My addons do not come back

- If I try to install an addon from addons.mozilla.org I get <this message about the addon signature verification failing> in the browser console.

[ Parent | on HN ]

Re:All extensions disabled due to expiration of intermediate... by arrivance on Saturday May 04, 2019 @03:22PM (#19828634)

Thanks for the response!

So,

I click the link. I click "Add", and Mozilla says addon could not be downloaded due to connection failure. Nothing appears in browser console.

Downloading an addon gives me "Download failed. Please check your connection." on the Addons site. In console, I get:

  Events to handle the installation initialized. BigInteger.js:27
  [GA: OFF] sendEvent {"hitType":"event","eventCategory":"AMO Addon Installs Download Failed","eventAction":"addon","eventLabel":"uBlock Origin"} BigInteger.js:27
  Error:

In the studies, I have https://i.imgur.com/fqrd5Jo.png. I enabled it, and have tried setting both first run, and the update interval is set to 21 (to try and force it to update it quickly).

[ Parent | on HN ]

Re:All extensions disabled due to expiration of intermediate... by gpm on Saturday May 04, 2019 @03:28PM (#19828669)

Hmm, what happens if you right click and save-link-as on the .xpi link? Or if you download it via curl or wget or something?

Edit: That studies image looks like it has already been installed, which is weird if your extensions aren't back...

[ Parent | on HN ]

Re:All extensions disabled due to expiration of intermediate... by arrivance on Saturday May 04, 2019 @03:39PM (#19828756)

OK, so... I right clicked, saved-as and then ran the XPI... and that worked. So thank you for that suggestion.

As for the studies image, that's only half of the fix according to the blog post [1], mine is only verification-timestamp, not signing-intermediate-bug.

[1]: https://blog.mozilla.org/addons/2019/05/04/update-regarding-...

[ Parent | on HN ]

Re:All extensions disabled due to expiration of intermediate... by gpm on Saturday May 04, 2019 @03:44PM (#19828803)

Glad to hear it worked.

You're right about the image, that's weird, I can't think of any reason why the verification-timestamp one would be necessary.

[ Parent | on HN ]