How do I view code signing certificates?
Given that code signing certificate expirations are a problem for add-ons:
- As a user, how do I view the list of code signing certificates my browser trusts for add-ons, with their expiration dates and trust chain?
- As a user, how do I view the signing certificate chain for each of my installed extensions?
- As an extension developer, what do I need to do when a certificate that was used to sign my extension expires?
(If, for any of the above questions, the simple answer is “there is no UI in Firefox to do this”, then I want to know the complicated answer, namely, in which files/databases/etc these are stored, in which data formats, and which existing third-party tools can be used to view them.)
Given that code signing certificate expirations are a problem for add-ons:
* As a user, how do I view the list of code signing certificates my browser trusts for add-ons, with their expiration dates and trust chain?
* As a user, how do I view the signing certificate chain for each of my installed extensions?
* As an extension developer, what do I need to do when a certificate that was used to sign my extension expires?
(If, for any of the above questions, the simple answer is “there is no UI in Firefox to do this”, then I want to know the complicated answer, namely, in which files/databases/etc these are stored, in which data formats, and which existing third-party tools can be used to view them.)
Alle antwurden (2)
Hi yurikhan, I don't know whether the Certificate Manager on the Preferences page lists the relevant certificate.
Perhaps the question would be better address to the Add-ons team over on their forum, at least to identify which certificate we would be looking for:
https://discourse.mozilla.org/c/add-ons
I think there would be at most a few certificates because the signing process runs through the Mozilla Add-ons site submission process, the developers do not apply their own certificates.
The certificate of a signed extension is in the Mozilla.rsa file in the META-INF folder.
Example of the certificate extension:
-----BEGIN PKCS7----- MIIRDwYJKoZIhvcNAQcCoIIRADCCEPwCAQExCTAHBgUrDgMCGjALBgkqhkiG9w0B BwGggg2gMIIGazCCBFOgAwIBAgIIFZtud46IP3gwDQYJKoZIhvcNAQEMBQAwgacx CzAJBgNVBAYTAlVTMRwwGgYDVQQKExNNb3ppbGxhIENvcnBvcmF0aW9uMS8wLQYD VQQLEyZNb3ppbGxhIEFNTyBQcm9kdWN0aW9uIFNpZ25pbmcgU2VydmljZTEmMCQG A1UEAxMdc2lnbmluZ2NhMS5hZGRvbnMubW96aWxsYS5vcmcxITAfBgkqhkiG9w0B CQEWEmZveHNlY0Btb3ppbGxhLmNvbTAeFw0xOTA1MDQwODQ1NTVaFw0yMDA1MDMw ODQ1NTVaMIGVMQswCQYDVQQGEwJVUzELMAkGA1UECBMCQ0ExFjAUBgNVBAcTDU1v dW50YWluIFZpZXcxDzANBgNVBAoTBkFkZG9uczEbMBkGA1UECxMSTW96aWxsYSBF eHRlbnNpb25zMTMwMQYDVQQDDCpob3RmaXgtdXBkYXRlLXhwaS1pbnRlcm1lZGlh dGVAbW96aWxsYS5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC2 6p2/LKgFL9Zj927vxHxEdl95lxAjnTBJT5JqF8SKYj9UWgaFLYc2xUqpast2VF/c j8bcu1z7UsgBZPHFwbc598yuOEmpOD3bs7qhuZBWAqq6iSlN5+CLD+RKwrS9xl94 NwjTOnAEVAVXjeW7jqyuulYXmIgMSRnLyY/c7chVAoL4sGrah4mVJ/sJI/dmV3n8 +ekKGqgtrwYrEBIqm7mySaWVfLhPL9Gf1hoy7KH4w0eH7NP6pRE86Tp2nteUkKD2 IdjnYXG/xJasvfBx4YcWTZ6tQ/5JRh1ILxahUtMR2YGTRRFORHssayeo01Nn7BHW Xq1uWv/Af+fbbr+vyywlwrP00s5G1fxDb/bCWzy4dKmKSTDD3O3qifuDVVkEFKNR V+gaxzaZ8Lr36jGeimT5khqPygzcSdeghuQI+1FOeugU31DBoNEPDY6ObCuEbcs4 AbMrvdni1rjf8p4KsCyqCKeoCSy8QOC0weS/3hyevNLmbsQ6F0/zqNcvAL4UELLV BBDHuLfTkcLbWQZONop0jNKZ0i437uOi/KGzKnI7yZO/rO0737HoTP+RVnbRwn23 MFk9OhOpLZ/4uHf2beS2hJ4f4LPjptKCxraw5vPdDMHGbtxN+uUjTh7iOTHgrjWr NBSfDIxLXVggIh0vcA/TtMj2gBBRIUx0eyThdxBc8QIDAQABo4GqMIGnMA4GA1Ud DwEB/wQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDAzAfBgNVHSMEGDAWgBQWPvsc /wwrk/ibFdcto8LmeGHc7TBfBgNVHREEWDBWglQ0NTNmMDMzNDc2YmI3NmJjMzU0 MmMyM2MxNzE2MjFiNS5mNmJjYTdhNTMwMGE0MzQ0Mzk1MjFlNWE4ODY5Y2EzZi5h ZGRvbnMubW96aWxsYS5vcmcwDQYJKoZIhvcNAQEMBQADggIBAKdDNZuKHFU1SMpY FtU8RdCg1+xEOIocwurq+xS3HahO4tr6aVRFG3YItxn2u37dOjdKrpVYdzXiTRyn 3wMTzX29Y667EkYV6iTzO6hq8ZiXKC5QNZR/paSj8yw3uj3+ZW3dm9P/yIraPAE1 hCtGFZGupdGhZex9H/Jcdbxmt3Ybbs24POZFQ3fobAJIP2tS7mDBJZoNHOmNaVu5 dl+PGelOB30UcjPEkILRrxKnQ2kCEdmUeHnZI/B2GHRZjj7aee9+aYIay1zm1wuM U8Fxr7wGbLD0CuN8S7pIUprBgA0rqFMyKep6n36myiFegMFFm3vJCyJQByJg/H9B 9wJfGl0+ufEtILMKfY4V6cIxvp8ywI7lZhCChgmdd/OhWOZ8JBhynnTdMAVgmmnd 1Y1J/YG2V+EtQYiJildFc/AJPHkO+Ue/G3JycnKJ0IIEDoCfBlunuwrZingIIUoj emzI3CvnrlqQKe9/y3qDq+3X0NP33ou9XfTT3egED+guQCvkt7OH/+ADFR8jMbJC gLiu+gYPO46xAW0js1Efa4uh0Vuk9PyWbArfNlewWoBuoO0qX9qgyt+a0PYZpa0F 9ZZA+prrDE9/OCEw9CWLTb0pJJPjvrg70E99GVBUkrzeJsPrB+HFqMoieUueQowO 0XnPOvkD6pe4TMUgyCJqeoJJ2IuHMIIHLTCCBRWgAwIBAgIDEAAIMA0GCSqGSIb3 DQEBDAUAMH0xCzAJBgNVBAYTAlVTMRwwGgYDVQQKExNNb3ppbGxhIENvcnBvcmF0 aW9uMS8wLQYDVQQLEyZNb3ppbGxhIEFNTyBQcm9kdWN0aW9uIFNpZ25pbmcgU2Vy dmljZTEfMB0GA1UEAxMWcm9vdC1jYS1wcm9kdWN0aW9uLWFtbzAeFw0xNTA0MDQw MDAwMDBaFw0yNTA0MDQwMDAwMDBaMIGnMQswCQYDVQQGEwJVUzEcMBoGA1UEChMT TW96aWxsYSBDb3Jwb3JhdGlvbjEvMC0GA1UECxMmTW96aWxsYSBBTU8gUHJvZHVj dGlvbiBTaWduaW5nIFNlcnZpY2UxJjAkBgNVBAMTHXNpZ25pbmdjYTEuYWRkb25z Lm1vemlsbGEub3JnMSEwHwYJKoZIhvcNAQkBFhJmb3hzZWNAbW96aWxsYS5jb20w ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC/qluiiI+wO6qGA4vH7cHv WvXpdju9JnvbwnrbYmxhtUpfS68LbdjGGtv7RP6F1XhHT4MU3v4GuMulH0E4Wfal m8evsb3tBJRMJPICJX5UCLi6VJ6J2vipXSWBf8xbcOB+PY5Kk6L+EZiWaepiM23C daZjNOJCAB6wFHlGe+zUk87whpLa7GrtrHjTb8u9TSS+mwjhvgfP8ILZrWhzb5H/ ybgmD7jYaJGIDY/WDmq1gVe03fShxD09Ml1P7H38o5kbFLnbbqpqC6n8SfUI31Mi JAXAN2e6rAOM8EmocAY0EC5KUooXKRsYvHzhwwHkwIbbe6QpTUlIqvw1MPlQPs7Z u/MBnVmyGTSqJxtYoklr0MaEXnJNY3g3FDf1R0Opp2/BEY9Vh3Fc9Pq6qWIhGoMy WdueoSYa+GURqDbsuYnk7ZkysxK+yRoFJu4x3TUBmMKM14jQKLgxvuIzWVn6qg6c w7ye/DYNufc+DSPSTSakSsWJ9IPxiAU7xJ+GCMzaZ10Y3VGOybGLuPxDlSd6KALA oMcl9ghB2mvfB0N3wv6uWnbKuxihq/qDps+FjliNvr7C66mIVH+9rkyHIy6GgIUl wr7E88Qqw+SQeNeph6NIY85PL4p0Y8KivKP4J928tpp18wLuHNbIG+YaUk5WUDZ6 /2621pi19UZQ8iiHxN/XKQIDAQABo4IBiTCCAYUwDAYDVR0TBAUwAwEB/zAOBgNV HQ8BAf8EBAMCAQYwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwMwHQYDVR0OBBYEFBY+ +xz/DCuT+JsV1y2jwuZ4YdztMIGoBgNVHSMEgaAwgZ2AFLO86lh0q+FueCqyq5wj HqhjLJe3oYGBpH8wfTELMAkGA1UEBhMCVVMxHDAaBgNVBAoTE01vemlsbGEgQ29y cG9yYXRpb24xLzAtBgNVBAsTJk1vemlsbGEgQU1PIFByb2R1Y3Rpb24gU2lnbmlu ZyBTZXJ2aWNlMR8wHQYDVQQDExZyb290LWNhLXByb2R1Y3Rpb24tYW1vggEBMDMG CWCGSAGG+EIBBAQmFiRodHRwOi8vYWRkb25zLm1vemlsbGEub3JnL2NhL2NybC5w ZW0wTgYDVR0eBEcwRaFDMCCCHi5jb250ZW50LXNpZ25hdHVyZS5tb3ppbGxhLm9y ZzAfgh1jb250ZW50LXNpZ25hdHVyZS5tb3ppbGxhLm9yZzANBgkqhkiG9w0BAQwF AAOCAgEAX1PNli/zErw3tK3S9Bv803RV4tHkrMa5xztxzlWja0VAUJKEQx7f1yM8 vmcQJ9g5RE8WFc43IePwzbAoum5F4BTM7tqM//+e476F1YUgB7SnkDTVpBOnV5vR Lz1Si4iJ/U0HUvMUvNJEweXvKg/DNbXuCreSvTEAawmRIxqNYoaigQD8x4hCzGcV tIi5Xk2aMCJW2K/6JqkN50pnLBNkPx6FeiYMJCP8z0FIz3fv53FHgu3oeDhi2u3V dONjK3aaFWTlKNiGeDU0/lr0suWfQLsNyphTMbYKyTqQYHxXYJno9PuNi7e1903P vM47fKB5bFmSLyzB1hB1YIVLj0/YqD4nz3lADDB91gMBB7vR2h5bRjFqLOxuOutN NcNRnv7UPqtVCtLF2jVb4/AmdJU78jpfDs+BgY/t2bnGBVFBuwqS2Kult/2kth4Y MrL5DrURIM8oXWVQRBKxzr843yDmHo8+2rqxLnZcmWoe8yQ41srZ4IB+V3w2TIAd 4gxZAB0Xa6KfnR4D8RgE5sgmgQoK7Y/hdvd9Ahu0WEZI8Eg+mDeCeojWcyjF+dt6 c2oERiTmFTIFUoojEjJwLyIqHKt+eApEYpF7imaWcumFN1jR+iUjE4ZSUoVxGtZ/ Jdnkf8VVQMhiBA+i7r5PsfrHq+lqTTGOg+GzYx7OmoeJAT0zo4cxggM5MIIDNQIB ATCBtDCBpzELMAkGA1UEBhMCVVMxHDAaBgNVBAoTE01vemlsbGEgQ29ycG9yYXRp b24xLzAtBgNVBAsTJk1vemlsbGEgQU1PIFByb2R1Y3Rpb24gU2lnbmluZyBTZXJ2 aWNlMSYwJAYDVQQDEx1zaWduaW5nY2ExLmFkZG9ucy5tb3ppbGxhLm9yZzEhMB8G CSqGSIb3DQEJARYSZm94c2VjQG1vemlsbGEuY29tAggVm253jog/eDAHBgUrDgMC GqBdMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTE5 MDUwNDA4NDYwNVowIwYJKoZIhvcNAQkEMRYEFLsCuSJSPDNTJt9gHkD1MYsw1RTI MAsGCSqGSIb3DQEBBQSCAgBoAAdgU47iNMGRUMeeE1C/n2Yxbc0bNp/okffcIhEp iJyOgaHbpZ8EfaSnwkRmLf668WdNwEVs4VjTR72xzmnX9rTH7OvW7uQMMO18d5je lImmMlbq3JqL7i/U5HBfd6LAOdH819jZBDzRR6vtKcXx+XpXstZosSlhKeTf0+Mx PyQjH8QcUzE/BLvPCtWtBfqLTITpKlj+UhXMhrO9B7fw0enRUtlpr4wuQx30h75Z 2fBnVLf6qVHYv/ufrUcVHunE5ENyJnO6+UkHzW67QqcFtcJfK6mutlapG5GUIXCY SifSkJTPXVASrV+kGZ2Jrs9rK14EiWqZs9HDL2Xmw1dcFRKmzuR0swZGDqsErD3Z iJ4C3IVawkzz06FBX8jGHGeijhjPXlJbKka6dAvXoHe/oxBXAERA0fEgQo3bQX/K sy1MUSlHH4GBH4uf85EJte+Du7kzdlHVnx9xNFYL3+Nfbs4M9H6B40jifoW82sP4 cMU3BgXljTTYTwQyBVqlIdZMFFZYmCiLMpZka+1E2R9Q+EgeiRCUBUw4IWdXGMj0 UJYWkHwCQtJoKsOqq8xlPF+srb/Pqqq+ab1mw4qwzC+1rnAkxa5+UPb8hKWEohjl 0CBftBDl4NXr5BFGUP+9snSqIY9qCXHI2ygAwNHiGKUGIb390NhMA5hshy/nc5t4 zqEA -----END PKCS7-----