Quantcast
Channel: Security forum
Viewing all articles
Browse latest Browse all 12072

Signing .JAR files using OpenSSL for Windows

$
0
0

Hello

Can someone please help me with the following question.

I have a code signing certicate in my X509 store "LocalMachine\My" which I can use for signing PowerShell scripts for example

Set-AuthenticodeSignature ./MyScript.ps1 -certificate ( gci cert:\LocalMachine\My -CodeSigning)

No worries there

From the information I have re "AthentiCode" as above, the only file formats it currently supports are

  • .cab files
  • .cat files
  • .ctl files
  • .dll files
  • .exe files
  • .ocx and

Now the UNIX guys also need their .JAR files signing (they do not have the code signing cert)

So I want thinking along the following lines but need some help please

I downloaded OpenSSL for Windows and Install

What I want to do use OpenSSL from the Windows command line to sign a .jar file

I do not want to expose the code signing certificate by having is as a flat file (e.g. CodeSigningCert.pfx) on the file system, rather I would prefer  to keep it in the X509 store (whereby the private key is not exportable) and refer to the cert on the OpenSSL command line when signing the .jar file.

Is this possible? can any one please show me a few command line examples? if this is not possible is there another utility I can use to achive the above

Thanks All

AAnotherUser__


AAnotherUser__


Viewing all articles
Browse latest Browse all 12072

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>