Alan,
Please be sure you have PSM installed. If you can visit an https
page, then you know that PSM is working. When you generate a certificate
with signtool, it puts that certificate in Netscape's key3.db/cert7.db
files by default, so you'll need to copy those files from your Netscape
profile directory to your Mozilla profile directory (the same dir where
prefs.js lives). You should only have to do that for certs you created
with signtool. For certs from a real CA, no installation or messing
around with databases should be necessary - they should just work. This
includes the signed script example on the Mozilla Security pages.
Finally, you have to put both the HTML file and the script file in the
signed jar, and refer to the page using the jar:http: (or jar:file:) syntax.
If it's still not working for you, can you give me more detail about
what you're doing? What platform are you using? Do you see any errors in
the JavaScript console after attempting to run the script?
good luck,
-Mitch
Alan Zhu wrote:
> Hi there:
>
> I just used "signtool.exe" to generate a test certificate and then to sign
> my script file with that certificate. Unforturnatily, the signed script
> still cannot enable "UniversalXPConnect" or other priviledges. What could
> be wrong? Thanks.
>
>
> Alan