797032 - [Firefox x64] Avast antivirus is flagging the 64-bit stub installer when downloading it - digital signature not present

Status: RESOLVED FIXED

(Firefox :: Installer, defect)

Description

[Jason Smith [:jsmith]]

Attachment: Avast Stub Installer

Steps:

1. Download the stub installer here in chrome with avast running in the background - http://ftp.mozilla.org/pub/mozilla.org/firefox/try-builds/[e-mail]-ae6f597c4a09/try-win32/ 

Expected:

Avast should not complain, as the build should be signed.

Actual:

See screenshot. Avast flags the build when it's being downloaded indicating that the build does not have digital signature. Is this build signed?

Comment 1

[Jason Smith [:jsmith]]

Have we even implemented support for signing the build? Or am I running an old build? I'm also getting an error on opening the file indicating that the file does not have a digital signature.

Comment 2

[Chris AtLee [:catlee]]

You're running an old build.

Try this:
http://stage.mozilla.org/pub/mozilla.org/firefox/nightly/latest-mozilla-central/firefox-18.0a1.en-US.win32.installer-stub.exe

Comment 3

[Jason Smith [:jsmith]]

Retesting with the build in comment 2 now.

Comment 4

[Jason Smith [:jsmith]]

Ah, looks like you are right. Closing.

Comment 5

[Jason Smith [:jsmith]]

Well...looks like I wasn't right - just got a reproduction with the newer build, although it was a bit harder to reproduce. Screenshot coming. Is there anything I could pull off the VM you need?

Comment 6

[Jason Smith [:jsmith]]

Screenshot for proof - http://screencast.com/t/kSOYNAPXKtvv

Comment 7

[Robert Strong (they/them - no direct email)]

Can I get a link to the stub installer that you used?

Comment 8

[Jason Smith [:jsmith]]

http://stage.mozilla.org/pub/mozilla.org/firefox/nightly/latest-mozilla-central/firefox-18.0a1.en-US.win64-x86_64.installer-stub.exe

Comment 9

[Robert Strong (they/them - no direct email)]

It isn't signed. Adding dependency.

Comment 10

[Brian R. Bondy [:bbondy]]

Isn't that the x64 build? I think only x86 builds are signed.

Comment 11

[Jason Smith [:jsmith]]

(In reply to Brian R. Bondy [:bbondy] from comment #10)
> Isn't that the x64 build? I think only x86 builds are signed.

Yeah, it's a x64 build. Are we supporting x64 builds for the stub installer? Or are we still sticking with x32 builds only?

Comment 12

[Robert Strong (they/them - no direct email)]

(In reply to Brian R. Bondy [:bbondy] from comment #10)
> Isn't that the x64 build? I think only x86 builds are signed.
Good catch.

Jason, the win x64 installer isn't signed by releng and we don't provide release builds of win x64.

Please test
http://stage.mozilla.org/pub/mozilla.org/firefox/nightly/latest-mozilla-central/firefox-18.0a1.en-US.win32.installer.exe

Comment 13

[Chris AtLee [:catlee]]

Correct, we don't sign x64 builds.

Comment 14

[[e-mail] (:bhearsum)]

This should be fixed now on Nightly.