I am signing my install.rdf and update.rdf with Mccoy.exe, then I am signing my xpi with AMO. After uploading my xpi from AMO site to my site and the Mccoy signed update.rdf to my server, I am getting such an error when I want to update my add-on from my application.
addons.xpi WARN Download of http://127.0.0.1/my_addon.xpi failed: Downloaded file hash (3c719ea0fa2bb654395d39617c41e7c2300d8b5f) did not match provided hash (14db89d3c563fec3a3868072083a86d448a5ce17)
What is the problem?
The AMO signature changes the file. If you need to use an XPI hash, you need to use the file after it’s been signed by AMO.