Closed Bug 1556682 Opened 7 years ago Closed 7 years ago

Ecosia extension can't be installed in versions in older Firefox versions

Categories

(Toolkit :: Add-ons Manager, defect)

Product:
Toolkit
Component:
Add-ons Manager
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED WORKSFORME

People

(Reporter: c.j.apperloo, Unassigned)

Details

(Whiteboard: webext?)

Attachments

(1 file)

Screenshot 2019-06-21 at 11.45.08.png
652.32 KB, image/png
Details

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3806.1 Safari/537.36

Steps to reproduce:

GIVEN: Use an older Firefox version (older than 67)

-Go to ecosia.org
-Dowbnload the extension by clicking on the install CTa on the right side "Add ecosia rto Firefox"
-Give permission to install software on your computer by clicking on "allow"

You will see that it is not allowed to download this extension:
T'his extension downloaded from this site could not be installed because it appears to be corrupt"

Actual results:

You will see that it is not allowed to download this extension:
T'his extension downloaded from this site could not be installed because it appears to be corrupt"

Expected results:

-I should have downloaded the extension
-Added the extension
-Given permission to use the search engine Ecosia instead of Google
-And be able to search the Ecosia extension while browsing the web

Did you install the appropriate hotfix add-on listed at bug 1550793, comment 37?

Component: Untriaged → Add-ons Manager
Flags: needinfo?(c.j.apperloo)
Product: Firefox → Toolkit

Can you look at the browser console and paste anything relevant here?

We are able to reproduce the issue in Firefox versions 66, 65, 64.
Here is a a paste from the console up until the point till the message "The addon downloaded from this site could not be installed because it appears to be corrupt." is shown in a test with version 66.

Is there a way to also upload a screenshot here? As we have a few users reporting this our suspicion is that the certificate fix was not applied to all firefox users using not the latest version appropriately.

Navigated to https://www.ecosia.org/
GEThttps://www.ecosia.org/
[HTTP/1.1 200 Connection established 329ms]

GEThttps://cdn.ecosia.org/indexpage/765811671f25a7677c55.css
[HTTP/2.0 304 Not Modified 25ms]

GEThttps://cdn.ecosia.org/indexpage/85ff406d06a73ad00b1f.css
[HTTP/2.0 304 Not Modified 43ms]

GEThttps://cdn.ecosia.org/indexpage/52ae3369f6bfad30d2df.js
[HTTP/2.0 304 Not Modified 37ms]

GEThttps://cdn.ecosia.org/indexpage/ec56233253fb1cef90aa.js
[HTTP/2.0 304 Not Modified 36ms]

GEThttps://cdn.ecosia.org/indexpage/img/5a18884.png
[HTTP/2.0 304 Not Modified 38ms]

GEThttps://analytics.ecosia.org/analytics.js
[HTTP/2.0 304 Not Modified 28ms]

GEThttps://cdn.ecosia.org/indexpage/77b1bc7da811717f8acd.js
[HTTP/2.0 304 Not Modified 37ms]

GEThttps://cdn.ecosia.org/indexpage/ec56233253fb1cef90aa.js
[HTTP/2.0 304 Not Modified 93ms]

GEThttps://cdn.ecosia.org/assets/images/png/apple-touch-icon.png
[HTTP/2.0 200 OK 0ms]

GEThttps://cdn.ecosia.org/assets/images/ico/favicon.ico
[HTTP/2.0 200 OK 0ms]

XHRGEThttps://api.ecosia.org/v1/notifications?language=en&limit=3
[HTTP/1.1 200 Connection established 159ms]

XHRGEThttps://api.ecosia.org/v1/trees/count
[HTTP/2.0 200 OK 267ms]

GEThttps://cdn.ecosia.org/indexpage/img/eeac7eb.jpg
[HTTP/2.0 304 Not Modified 33ms]

GEThttps://cdn.ecosia.org/indexpage/img/496600e.jpg
[HTTP/2.0 304 Not Modified 28ms]

GEThttps://ps.ecosia.org/FVh3ot2zPwDMi43LjI.js
[HTTP/2.0 304 Not Modified 26ms]

XHRPOSThttps://sp.ecosia.org/com.snowplowanalytics.snowplow/tp2
[HTTP/1.1 200 OK 66ms]

GEThttps://cdn.ecosia.org/indexpage/img/cc645db.png
[HTTP/2.0 304 Not Modified 26ms]

Navigated to https://addons.mozilla.org/firefox/downloads/latest/ecosia-the-green-search
GEThttps://addons.mozilla.org/firefox/downloads/latest/ecosia-the-green-search
[HTTP/1.1 200 Connection established 1165ms]

XHRPOSThttps://sp.ecosia.org/com.snowplowanalytics.snowplow/tp2
[HTTP/1.1 200 OK 49ms]

GEThttps://addons.mozilla.org/firefox/downloads/latest/ecosia-the-green-search/
[HTTP/1.1 302 Found 191ms]

GEThttps://addons.cdn.mozilla.net/user-media/addons/261472/ecosia_the_search_engine_that_plants_trees-4.0.4-an+fx.xpi?filehash=sha256%3Ab74bdbd58766df623bc044e265d8880da2872c37007a5c6e954560aaf130d90b
[HTTP/1.1 200 Connection established 599ms]```

(In reply to Philip from comment #3)

Here is a a paste from the console

Nothing there but network requests. Please make sure you used the Browser Console as directed at comment 2, not the web console.

Is there a way to also upload a screenshot here?

Click the Attach File link above the Description and below the Details section.

Here is a log from the Browser Console:

GEThttps://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSyC7jsptDS3am4tPx4r3nxis7IMjBc5Dovo&$httpMethod=POST&$req=ChUKE25hdmNsaWVudC1hdXRvLWZmb3gaCggFEAEiAiACKAEaCggBEAEiAiACKAEaCggDEAEiAiACKAEaCggHEAEiAiACKAEaCggJEAEiAiACKAE=
[HTTP/1.1 200 Connection established 2055ms]

POSThttp://ocsp.pki.goog/GTSGIAG3
[HTTP/1.1 200 OK 207ms]

XHRPOSThttps://incoming.telemetry.mozilla.org/submit/telemetry/e0f481a7-c074-4824-8875-cba25fc64618/health/Firefox/66.0/release/20190314174725?v=4
[HTTP/1.1 200 Connection established 897ms]

XHRPOSThttps://incoming.telemetry.mozilla.org/submit/telemetry/560f392e-a249-4f7a-ae9c-0c5bc2e48157/main/Firefox/42.0/release/20151029151421?v=4
[HTTP/1.1 200 Connection established 1195ms]

POSThttp://ocsp.digicert.com/
[HTTP/1.1 200 OK 72ms]

POSThttp://ocsp.digicert.com/
[HTTP/1.1 200 OK 166ms]

XHRGEThttp://detectportal.firefox.com/success.txt
[HTTP/1.1 200 OK 128ms]

Key event not available on some keyboard layouts: key=i modifiers=accel,alt,shift id=key_browserToolbox browser.xul
XHRGEThttps://www.google.com/complete/search?client=firefox&q=ec
XHRGEThttps://www.google.com/complete/search?client=firefox&q=eco
XHRGEThttps://www.google.com/complete/search?client=firefox&q=ecos
XHRGEThttps://www.google.com/complete/search?client=firefox&q=ecoso
XHRGEThttps://www.google.com/complete/search?client=firefox&q=ecosoa
[HTTP/1.1 200 Connection established 326ms]

POSThttp://ocsp.pki.goog/GTSGIAG3
[HTTP/1.1 200 OK 205ms]

XHRGEThttps://www.google.com/complete/search?client=firefox&q=ec
[HTTP/2.0 200 OK 85ms]

XHRGEThttps://www.google.com/complete/search?client=firefox&q=eco
XHRGEThttps://www.google.com/complete/search?client=firefox&q=ecos
XHRGEThttps://www.google.com/complete/search?client=firefox&q=ecosi
XHRGEThttps://www.google.com/complete/search?client=firefox&q=ecosia
[HTTP/2.0 200 OK 42ms]

GEThttp://ecosia.org/
[HTTP/1.1 301 Moved Permanently 172ms]

GEThttp://www.ecosia.org/
[HTTP/1.1 301 Moved Permanently 181ms]

GEThttps://www.ecosia.org/
[HTTP/1.1 200 Connection established 384ms]

POSThttp://ocsp.int-x3.letsencrypt.org/
[HTTP/1.1 200 OK 96ms]

XHRPOSThttps://tiles.services.mozilla.com/v4/links/activity-stream
[HTTP/1.1 200 Connection established 3820ms]

GEThttps://cdn.ecosia.org/indexpage/765811671f25a7677c55.css
[HTTP/1.1 200 Connection established 155ms]

GEThttps://cdn.ecosia.org/indexpage/85ff406d06a73ad00b1f.css
[HTTP/1.1 200 Connection established 159ms]

GEThttps://cdn.ecosia.org/indexpage/52ae3369f6bfad30d2df.js
[HTTP/1.1 200 Connection established 380ms]

GEThttps://cdn.ecosia.org/indexpage/ec56233253fb1cef90aa.js
[HTTP/1.1 200 Connection established 335ms]

GEThttps://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=AIzaSyC7jsptDS3am4tPx4r3nxis7IMjBc5Dovo&$httpMethod=POST&$req=ChUKE25hdmNsaWVudC1hdXRvLWZmb3gSGwoNCAUQBhgBIgMwMDEwARC11wYaAhgKhmVL9BouCAUQARoGCgQBSBsjGgYKBBTuhOcaBgoEQFRF4hoGCgRQCeYyGgYKBJP-35QgAQ==
[HTTP/2.0 200 OK 132ms]

GEThttps://cdn.ecosia.org/indexpage/img/5a18884.png
[HTTP/2.0 200 OK 178ms]

GEThttps://analytics.ecosia.org/analytics.js
[HTTP/1.1 200 Connection established 438ms]

GEThttps://cdn.ecosia.org/indexpage/77b1bc7da811717f8acd.js
[HTTP/2.0 200 OK 27ms]

GEThttps://cdn.ecosia.org/indexpage/ec56233253fb1cef90aa.js
[HTTP/2.0 200 OK 0ms]

GEThttps://cdn.ecosia.org/assets/images/png/apple-touch-icon.png
[HTTP/2.0 200 OK 27ms]

GEThttps://cdn.ecosia.org/assets/images/ico/favicon.ico
[HTTP/2.0 200 OK 33ms]

XHRGEThttps://api.ecosia.org/v1/notifications?language=en&limit=3
[HTTP/1.1 200 Connection established 442ms]

XHRGEThttps://api.ecosia.org/v1/trees/count
[HTTP/1.1 200 Connection established 360ms]

GEThttps://cdn.ecosia.org/indexpage/img/eeac7eb.jpg
[HTTP/2.0 200 OK 180ms]

GEThttps://cdn.ecosia.org/indexpage/img/496600e.jpg
[HTTP/2.0 200 OK 202ms]

GEThttps://cdn.ecosia.org/indexpage/fonts/dd1ae59.woff2
[HTTP/2.0 200 OK 204ms]

GEThttps://cdn.ecosia.org/indexpage/fonts/7c3bc1f.woff2
[HTTP/2.0 200 OK 101ms]

GEThttps://cdn.ecosia.org/indexpage/fonts/4e711b3.woff2
[HTTP/2.0 200 OK 102ms]

GEThttps://ps.ecosia.org/FVh3ot2zPwDMi43LjI.js
[HTTP/1.1 200 Connection established 482ms]

GEThttps://cdn.ecosia.org/indexpage/img/cc645db.png
[HTTP/2.0 200 OK 52ms]

XHROPTIONShttps://sp.ecosia.org/com.snowplowanalytics.snowplow/tp2
[HTTP/1.1 200 Connection established 377ms]

XHRPOSThttps://sp.ecosia.org/com.snowplowanalytics.snowplow/tp2
[HTTP/1.1 200 Connection established 636ms]

GEThttps://addons.mozilla.org/firefox/downloads/latest/ecosia-the-green-search
[HTTP/1.1 200 Connection established 986ms]

XHRPOSThttps://sp.ecosia.org/com.snowplowanalytics.snowplow/tp2
[HTTP/1.1 200 OK 49ms]

POSThttp://ocsp.digicert.com/
[HTTP/1.1 200 OK 134ms]

GEThttps://addons.mozilla.org/firefox/downloads/latest/ecosia-the-green-search/
[HTTP/1.1 302 Found 196ms]

GEThttps://addons.cdn.mozilla.net/user-media/addons/261472/ecosia_the_search_engine_that_plants_trees-4.0.4-an+fx.xpi?filehash=sha256%3Ab74bdbd58766df623bc044e265d8880da2872c37007a5c6e954560aaf130d90b
[HTTP/1.1 200 Connection established 257ms]

GEThttps://addons.cdn.mozilla.net/user-media/addons/261472/ecosia_the_search_engine_that_plants_trees-4.0.4-an+fx.xpi?filehash=sha256%3Ab74bdbd58766df623bc044e265d8880da2872c37007a5c6e954560aaf130d90b
[HTTP/1.1 200 Connection established 384ms]

1561380258816	addons.webextension.<unknown>	WARN	Loading extension 'null': Reading manifest: Error processing target: An unexpected property was found in the WebExtension manifest.
1561380258834	addons.xpi-utils	WARN	Add-on {d04b0b40-3dab-4f0b-97a6-04ec3eddbfb0} is not correctly signed.
1561380258835	addons.xpi	WARN	Download of https://addons.cdn.mozilla.net/user-media/addons/261472/ecosia_the_search_engine_that_plants_trees-4.0.4-an+fx.xpi?filehash=sha256%3Ab74bdbd58766df623bc044e265d8880da2872c37007a5c6e954560aaf130d90b failed: signature verification failed
Flags: needinfo?(c.j.apperloo)
Whiteboard: webext?

Are there any updates on this? We are still getting bug reports from users on older Firefox versions not being able to install the Ecosia addon. Thanks, Philip

Flags: needinfo?(jmathies)

The log in comment 6 includes the error "... is not correctly signed". Since the extension file from AMO is clearly signed, this suggests that the user was affected by the signature invalidation issue that was described at https://blog.mozilla.org/addons/2019/05/04/update-regarding-add-ons-in-firefox/

If the users update to the latest Firefox version, then they will not have this issue.
If they can somehow not update Firefox, then they have to install one of the following hotfixes (depending on the Firefox version):

After installing the hotfix, they should be able to install add-ons again.

Status: UNCONFIRMED → RESOLVED
Closed: 7 years ago
Flags: needinfo?(jmathies)
Resolution: --- → WORKSFORME
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: