Unable to install unsigned extensions

[stefanwimmer128]

Even after setting "xpinstall.signatures.required" to "false" in "about:config" I was not able to install an unsigned extension, which I used previously on LibreWolf using the same setting.

[dr460nf1r3]

Hey :) this is caused by line, which I already contemplated removing in the past.

[stefanwimmer128]

Thanks. I changed the line and compiled it myself. Now it works.

export MOZ_REQUIRE_SIGNING=

Interestingly removing the line didn't work, apparently it defaults to 1. And 0 is not a valid value.

EDIT: For all interested: AUR-Package available here and CI-Builds available here.

[stefanwimmer128]

FYI, since this is a security relevant change, I would not mind maintaining my own fork. I would not want to risk opening this potential security hole in a browser that is installed by default on all computers running Garuda Linux.

[Technetium1]

@stefanwimmer128 is that really the only way? https://bugs.gentoo.org/802285#c1 https://bugs.archlinux.org/task/63075

[stefanwimmer128]

@Technetium1 Not sure, ultimately it's up to the maintainer to decide whether it's safe to remove the extension signing requirement. I'm just offering to maintain my own fork - which I'm already doing to make manually building it easier (AUR, CI-Builds) -, in case it is not feasible to change it for all users.

[Technetium1]

Looks like the flag can be altered such that you can install unsigned extensions into the install dir though?

[stefanwimmer128]

Firedragon already includes the flag --with-unsigned-addon-scopes=app,system and it does work, but it only allows installing unsigned extensions by manually putting them in /usr/lib64/firefox/browser/extensions. What I need is to be able to install them for a single profile in about:addons using the Install Add-on From File...-Option. For that I only found the solution provided by dr460nf1r3.

But I realize this is a very specific use case, which is why I really wouldn't mind maintaining my own fork.

[dr460nf1r3]

Sounds good to me!

[dr460nf1r3]

Eh I noticed you actually did it. Nice to see! :)

[SFort]

Could we please get this in the main package, it feels very silly having to spend way more time compiling a separate build of a browser, specificly for installing a thrown together addon.

[stefanwimmer128]

Compiling is not necessary since the package is either available prebuilt as firedragon-unsigned-extensions-bin or in my own repository or can be manually downloaded from my GitLab.

[SFort]

Still, extensions are a basic function, they shouldn't need a special version of a browser. although thanks for pointing out there's a -bin package, i do need it

[stefanwimmer128]

Latest versions now allow installation of unsigned extensions by default.

[dr460nf1r3]

Yes indeed, thanks for taking care!