<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'><br>@Robert Strong<br><br>Yes that worked fine and I verified the MAR was signed correctly with that test cert as well! Could there be something wrong with the NSS build I made? I've tried with different versions of NSS but they all give the same error message. Are the binaries used to make the test certificates available anywhere?<br><br>@Brian Bondy<br><br>Yes thanks those are the instructions I followed :). I'll look at that test as well, thanks.<br><br><div><hr id="stopSpelling">From: bbondy@gmail.com<br>Date: Thu, 26 Mar 2015 00:04:35 -0400<br>Subject: Re: Can't sign MAR files on Windows<br>To: rstrong@mozilla.com<br>CC: alexboy94@msn.com; firefox-dev@mozilla.org<br><br><div dir="ltr">I didn't spot off hand what's wrong, but there are tests that run on Windows which does signing, so you can get ideas on how to run it here:<div><a href="https://dxr.mozilla.org/mozilla-central/source/modules/libmar/tests/unit/test_sign_verify.js#23" target="_blank">https://dxr.mozilla.org/mozilla-central/source/modules/libmar/tests/unit/test_sign_verify.js#23</a><br></div><div><br></div><div>You can also find example usage of certutil here:</div><div><a href="https://bugzilla.mozilla.org/show_bug.cgi?id=701087#c1" target="_blank">https://bugzilla.mozilla.org/show_bug.cgi?id=701087#c1</a><br></div></div><div class="ecxgmail_extra"><br><div class="ecxgmail_quote">On Wed, Mar 25, 2015 at 6:05 PM, Robert Strong <span dir="ltr"><<a href="mailto:rstrong@mozilla.com" target="_blank">rstrong@mozilla.com</a>></span> wrote:<br><blockquote class="ecxgmail_quote" style="border-left:1px #ccc solid;padding-left:1ex;"><div dir="ltr"><div><div>Hi Alex,<br><br></div>To narrow things down try signing with the test certificate in the tree as follows:<br><path_to_obj_dir>\dist\bin\signmar.exe -d <path_to_source_dir>\modules\libmar\tests\unit\data -n mycert -s <path_to_original_mar>\mar_you_created.mar <path_to_output_mar>\output.mar<br><br></div><div>Also, signmar only supports SHA1 atm.<br><a href="https://bugzilla.mozilla.org/show_bug.cgi?id=1105689" target="_blank">https://bugzilla.mozilla.org/show_bug.cgi?id=1105689</a><br><br></div>Robert<br></div><div class="ecxgmail_extra"><br><div class="ecxgmail_quote"><div><div class="h5">On Wed, Mar 25, 2015 at 1:17 PM, Alex Kontos <span dir="ltr"><<a href="mailto:alexboy94@msn.com" target="_blank">alexboy94@msn.com</a>></span> wrote:<br></div></div><blockquote class="ecxgmail_quote" style="border-left:1px #ccc solid;padding-left:1ex;"><div><div class="h5"><div style="word-wrap:break-word;">I can’t seem to sign MAR files on Windows (haven’t tested other OSs). I’m using signmar.exe generated by the build, and I get the following error:<br><br><div>ERROR: Could not initialize NSS</div><div>ERROR: Could not init config dir: C:\NSScert</div><div><br></div><div>I’ve generated my certificates using certutil as defined in this <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=701087#c1" target="_blank">bug</a>. I’ve tried using different versions of NSS as well to no amends.</div><div><br></div><div>Steps I followed:</div><div><br></div><div><ol><li>Generate MAR file (have tested MAR is valid as a build made with -disable-verify-mar accepts it)</li><li>certutil -N -d /c/NSScert</li><li>certutil -A -n test_cert -t "u,u,u" -i testcert.der -d /c/NSScert</li><li>certutil -L -d /c/NSScert (just to check, there is a valid output)</li><li>Attempt to sign MAR:</li><li>signmar -d /c/NSScert -n test_cert -s update.mar output_update.mar</li></ol><div>Which brings us to the error defined above.</div><div><br></div></div><div><br></div><div>The build is Visual Studio 2013 64-Bit, no changes at all, just default Firefox build. Is there a specific way I’m supposed to sign MAR files?</div></div><br></div></div>_______________________________________________<br>
firefox-dev mailing list<br>
<a href="mailto:firefox-dev@mozilla.org" target="_blank">firefox-dev@mozilla.org</a><br>
<a href="https://mail.mozilla.org/listinfo/firefox-dev" target="_blank">https://mail.mozilla.org/listinfo/firefox-dev</a><br>
<br></blockquote></div><br></div>
<br>_______________________________________________<br>
firefox-dev mailing list<br>
<a href="mailto:firefox-dev@mozilla.org">firefox-dev@mozilla.org</a><br>
<a href="https://mail.mozilla.org/listinfo/firefox-dev" target="_blank">https://mail.mozilla.org/listinfo/firefox-dev</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="ecxgmail_signature">Thanks,<br>Brian R. Bondy</div>
</div>
<br>_______________________________________________
firefox-dev mailing list
firefox-dev@mozilla.org
https://mail.mozilla.org/listinfo/firefox-dev</div> </div></body>
</html>