1050567 - plugin-container os x firewall prompts every time

Status: RESOLVED DUPLICATE of bug 1046306

(Core Graveyard :: Plug-ins, defect)

Description

[Andy Cunningham]

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:31.0) Gecko/20100101 Firefox/31.0 (Beta/Release)
Build ID: 20140716183446

Steps to reproduce:

Accessed a site (bluejeans.com) that uses plugin-container for video conferencing


Actual results:

Firefox prompts the user to allow/deny plugin-container through the Mac OS X firewall. This occurs every time the conference is initiated, regardless of whether plugin-container is allowed through the firewall (either via the GUI or by using the socketfilterfw command). 


Expected results:

Plugins that use plugin-container should be allowed through the firewall once it is added. Signing plugin-container using the codesign command and our own code signing certificate resolves the issue; we are prompted once more, but the prompts do not reappear.

Comment 1

[[e-mail] (:bhearsum)]

We're making a ton of changes for 10.9.5/10.10, and this will be one of them.

Comment 2

[Andy Cunningham]

(In reply to Ben Hearsum [:bhearsum] from comment #1)
> We're making a ton of changes for 10.9.5/10.10, and this will be one of them.
> 
> *** This bug has been marked as a duplicate of bug 1046306 ***

As long as plugin-container is included in the items that will be signed in 10.9.5/10.10, then I am a happy camper. Can you verify that this will be the case?

Comment 3

[Stephen A Pohl [:spohl]]

(In reply to Andy Cunningham from comment #2)
> As long as plugin-container is included in the items that will be signed in
> 10.9.5/10.10, then I am a happy camper. Can you verify that this will be the
> case?

It will. Signing the Firefox bundle without signing the plugin-container bundle will no longer be possible.

Comment 4

[Stephen A Pohl [:spohl]]

The v2 signing work landed on m-c a few days ago. Andy, could you confirm that the issue reported here is fixed for you in today's nightly? Thanks!

Comment 5

[Stephen A Pohl [:spohl]]

No response from reporter and we have not heard about this problem since landing the v2 signing work. Clearing n-i.