Eric H. Jung wrote:
> I don't know, but the point is mozdev should have an upload tool which preps 
> XPIs for
> auto-updating when update.rdf isn't hosted at AMO (it's probably hosted at 
> mozdev, but not
> necessarily). I believe updateHash is the only install.rdf entry required for 
> this. updateKey,
> updateLink are not required. Anyone confirm?
>
>   


As I understand it for secure update to work the extension will need the 
following entry in the install.rdf file
<em:updateKey> = This is the public key, it's used to verify the 
update.rdf signature
 

 The update.rdf will need
 <em:updateHash>  = Fingerprint of the xpi file
 <em:signature>      = This is signed hash of the install.rdf file,  
this must be created using the private key




_______________________________________________
Project_owners mailing list
[email protected]
https://www.mozdev.org/mailman/listinfo/project_owners

Reply via email to