encrypting/password protect a .crx file

661 views
Skip to first unread message

dashman

unread,
Jan 20, 2012, 11:56:06 AM1/20/12
to Chromium-extensions
i'm writing a commercial extension and would like to
protect it.

i know minifying the javascript is an option - but that
can easily be unminified given enough time.

any suggestions?

Łukasz Łoboda

unread,
Jan 20, 2012, 12:27:30 PM1/20/12
to dashman, Chromium-extensions
there is no effective method to do that, even average JS programmer with strong determination can get your code no matter what kind of mess you will leave in your code. Best protection effects you will get when logic of your extension will take place inside your server somewhere on the web.

Regards

2012/1/20 dashman <erjd...@gmail.com>

--
You received this message because you are subscribed to the Google Groups "Chromium-extensions" group.
To post to this group, send email to chromium-...@chromium.org.
To unsubscribe from this group, send email to chromium-extens...@chromium.org.
For more options, visit this group at http://groups.google.com/a/chromium.org/group/chromium-extensions/?hl=en.


Adolfo Rodriguez

unread,
May 14, 2013, 1:16:49 AM5/14/13
to chromium-...@chromium.org, dashman, lukasz....@gmail.com
year an a half after....

* is still impossible to protect code of extensions? is not any option to sign the crx file or something like that. Is it possible to protect small at least small parts of the code containing the sensitive stuff?

* supposing that a payed service is created, this would mean that there is not way to prevent any user editing the code and bypassing the payment verification source code. Is that correct? Whic is the approach to integrate a payment mechanism in an extension?

* I need to package several extensions so I would like to do it programmatically. However, I had some issues working with 
chrome.exe --pack-extension=c:\myext --pack-extension-key=c:\myext.pe
is there any small java jar or classes (from Chromium core) which allows packaging an extension programmatically? (I guess that chrome.exe should invoke some Java code in Chromium)

Share your ideas please. Thank.

Adolfo Rodriguez

unread,
May 15, 2013, 12:00:37 AM5/15/13
to chromium-...@chromium.org, dashman, lukasz....@gmail.com
As far as I can see there is not a Java tool to package Chrome extensions.


only a ruby and a bash programs. But on the other hand, I tried to package programmatically as said here 

chrome.exe --pack-extension=c:\myext --pack-extension-key=c:\myext.pem (copied from previous linked page)

but running this the command in Win7 just does nothing.

I also:
* killed all my Chrome windows since there was a bug as said here
* tried / and \ as file separators,
* ended the path to the directory (?) with and without / 
* tried in the chrome folder just in case any other file is needed (in 'Path' env var)

and still nothing happens. Nothing created, no messages. I am running Chrome Version 26.0.1410.64 beta-m on Win7.

Does anyone know the trick?

Thanks

Adolfo Rodriguez

unread,
May 21, 2013, 10:59:40 PM5/21/13
to chromium-...@chromium.org, dashman, lukasz....@gmail.com
happily I upgraded today to release Version 27.0.1453.93 beta-m and packaging extensions with chrome.exe is working in this release 

Adolfo Rodriguez

unread,
May 22, 2013, 4:35:40 PM5/22/13
to chromium-...@chromium.org, dashman, lukasz....@gmail.com
For the syntax (which is now working for me in Version 27.0.1453.93 beta-m),

chrome.exe --pack-extension=c:\myext --pack-extension-key=c:\myext.pem

does anyone know how to specify the output directory? I intend to programmatically generate several crx in bulk by only changing a config file from one to the other.

None of arguments here looks specific for this purpose


Thanks 
Reply all
Reply to author
Forward
0 new messages