10 Replies Latest reply: Sep 13, 2013 1:46 AM by Maxim3 RSS

    The extention does not contain valid signature...".

    Maxim3 Community Member

      Hi

       

      I made .ZPX file. But during unpacking it shows an alert "The extention does not contain valid signature...". What can be reason and how to fix it?

        • 1. Re: The extention does not contain valid signature...".
          fgregor Adobe Employee

          Hi Maxim3,

           

          Can you give us a little more about how you created this file and where you're seeing that error message? (Extension Manager?)

           

          Have you uploaded your ZXP to Adobe Exchange?

           

          Best wishes,

          Fraser

          • 2. Re: The extention does not contain valid signature...".
            Maxim3 Community Member

            Hi Fraser

            Thank for your quick responce

             

            One year ago, with help of your forum I made a .zpx file. (I compiled mxi by ucf.jar). And it worked properly.

            Now I had to make some update and add some new files into this archive

            Because old code-certificate was expired I made a new free self-signed certificate (because my product if also free, your doc says what I can sign a free product with a free self-signed certificate)

             

            ucf.jar compiled a .zpx file successfuly

             

            I launch this file with Adobe Extension Manager and this says "The extension 'name..' does not contain valid signature. The extension will not be installed"

            • 3. Re: The extention does not contain valid signature...".
              fgregor Adobe Employee

              Hi Maxim3,

               

              It is difficult to tell what is wrong with your ZXP without inspecting what's inside it, but here are a few things which could cause this kind of error in Extension Manager

               

              • Adding files to the ZXP after it has already been signed
              • Adding a whole folder to a ZXP, rather than the contents of a folder (since Extension Manager won't find your MXI in the root level of your ZXP)
              • Adding files which contain double-byte characters (e.g. Traditional Chinese)

               

              The command should have looked something like this:

               

              java -jar ucf.jar -package  -storetype PKCS12 -keystore cert.p12 -storepass password outputfile.zxp -C "/inputfolder" .

               

              [note the dot (.) at the end of the command]

               

              Probably the easiest way to package a ZXP is using Adobe Exchange Packager:

               

              https://www.adobeexchange.com/api/Packager.exe

              https://www.adobeexchange.com/api/Packager.dmg

               

              ...as you can use this to create self-signed certificates, and it guides you through the process of packaging and signing.

               

              Fraser

              • 4. Re: The extention does not contain valid signature...".
                Maxim3 Community Member

                It looks, I solve this problem

                 

                The reason was what one file (from 4800 used) contained the "&" symbol in name. Now It is fixed and works

                 

                But I've met some another problem

                 

                Now It shows an alert "You are about to install the extention 'XXX'. The published can not be verified. Are you sure you want to install this Extension? "

                 

                It is because I singned extension with free self-signed sertificate? Or my sertificate was made wrong?

                 

                Screen shot 2013-09-12 at 11.03.03 PM.png

                • 5. Re: The extention does not contain valid signature...".
                  fgregor Adobe Employee

                  Hi Maxim3,

                   

                  Glad you managed to fix the signature problem with UCF.jar.

                   

                  Yes - you are seeing that alert because you signed the extension with a self-signed certificate. If your extension is uploaded to Adobe Exchange, it will be countersigned/encrypted in such a way that Extension Manager will be able to identify it as an "Adobe Exchange" product and not show this warning - so users installing your product from Adobe Exchange would not see this warning.

                   

                  Thanks,

                  Fraser

                  • 6. Re: The extention does not contain valid signature...".
                    Maxim3 Community Member

                    I would like to avoid of this alert show. Can I sign package with help of self-signed certificatewith some additional options or I should used only a payed certificate?

                     

                    (I made self-signed certificate with help of Adobe Extension Packager)

                    • 7. Re: The extention does not contain valid signature...".
                      fgregor Adobe Employee

                      If you are not uploading your extension to Adobe Exchange and you need to avoid this warning dialog, I think you will need to use a paid certificate from a trusted certificate authority. There is no option for UCF.jar which can remove the warning, unfortunately.

                       

                      This is the Adobe Exchange forum - perhaps the Extension Manager forum would have more information about what you're trying to do?

                      • 8. Re: The extention does not contain valid signature...".
                        Maxim3 Community Member

                        Exstension, Exchange - it is difficult to see a difference if to tauch this one time per year. Friendly speak, I thought what Adobe Exstension is one sub product of Adobe Exchange program because I got it from here

                        https://www.adobeexchange.com/producer

                         

                        Maybe you could give a link on properly forum, because https://www.adobeexchange.com/producer has not any links on help/support/forum?

                         

                        BR

                         

                        Maxim

                        • 9. Re: The extention does not contain valid signature...".
                          fgregor Adobe Employee

                          Hi Maxim,

                           

                          Thanks for the suggestion of updating the "Help" link at the bottom of the page at adobeexchange.com to the specific forum - I've added this to our list

                           

                          Adobe Exchange is the marketplace/store for distributing and selling your extensions - Extension Manager is the tool which installs the extensions on end users' machines.

                           

                          I mentioned the Extension Manager forum (http://forums.adobe.com/community/creativesuites/extensionmanager?view=discussions) because people there (such as members of the Extension Manager team) may know more about suppressing the warning dialog you are seeing. As far as I know, the only way to do this without using a paid certificate is by submitting it to Adobe Exchange.

                           

                          Kind regards,

                          Fraser

                          • 10. Re: The extention does not contain valid signature...".
                            Maxim3 Community Member

                            Thanks Fraser for your support. I'll try to explore this problem in properly forums's brunch

                             

                            Best regards

                             

                            Maxim