in order to sign my xpi package with signtool ( under windows XP ), i used 
the .db files ( cert8.db, key3.db, secmod.db ) coming from  Firefox 
directory.
With this database where my Thawtee certificate was imported, i successfully 
sign my package with signtool. Unfortunately, when i attempt to install it, 
the error message : "The signature used in the XPI is not valid -260" 
appears.

I don't understand why signing my package whith the same database than 
firefox doesn't work and produces this error ? Why FF is unable to verify my 
certificates in spite of all informations was known ??
Something is wrong, but i'm not able to found what.

I really need to sign my package.
Here is the content, i can post more informations if it is required.

|- components\
|    |-AgentAddinFirefox.dll   ( XPCOM dll made with VS2003 )
|    |-AgentAddinFirefox.xpt
|    |-mfc71.dll
|    |-msvcp71.dll
|    |-msvcr71.dll
|-install.js
|-install.rdf


thanks for your help. 


_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to