Jsign

Jsign is a Java implementation of Microsoft Authenticode that is platform independent and provides an alternative to native tools like osslsigncode on Linux and SignTool on Windows or the Mono development tools on Unix systems.

Integrate Jsign with Sign Manager Controller (SMCTL) for simplified signing. Alternatively, you can sign directly with Jsign and reference your private key stored in DigiCert® KeyLocker.

提示

Jsign is compatible for signing on Windows, Linux, and macOS.

What can Jsign be used to sign?

Use Jsign to sign and timestamp executable files for Windows, Microsoft installers (MSI), and Scripts (PowerShell, VBScript, JScript, WSF). For more information, refer to Files supported for signing.

Install Jsign

提示

Use Jsign version 4.1 or higher to sign files larger than 100MB. To avoid errors when signing large files, use osslsigncode instead of jsign.

The installation command differs based on your operating system:

例 1. Windows

To install jsign on Windows:

Download jsign-5.0.jar from GitHub.
Move the folder to the location of your choice.

例 2. Linux (.deb)

To install jsign on Linux distributions such as: Debian or Ubuntu:

Download jsign_5.0_all.deb from GitHub.
Move the folder to the location of your choice.

Alternatively, install Jsign, use the command:

curl -fSslL https://github.com/ebourg/jsign/releases/download/3.1/jsign_3.1_all.deb -o jsign_3.1_all.deb sudo dpkg --install jsign_3.1_all.deb

例 3. Linux

To install jsign on Linux distributions such as: Redhat, Fedora, or CentOS:

Download jsign-5.0-1.noarch.rpm from GitHub.
Move the folder to the location of your choice.

Alternatively, install Jsign using, use the command:

curl -fSslL https://github.com/ebourg/jsign/releases/download/5.0/jsign-5.0-1.noarch.rpm

例 4. macOS (.jar)

To install jsign on macOS:

Download jsign-5.0.jar from GitHub.
Move the folder to the location of your choice.

Set PATH environment variables

Operating systems use the environment variable called PATH to determine where executable files are stored on your system. Use the PATH environment variable to store the file path to your signing tools to ensure that the CLI can reference these signing tools.

You can set the PATH environment variable to jsign using command line.

例 5. Windows

You can configure the signing tools using command line or environment variables.

To set the path to your signing tools via command line:

set PATH=%path%;<path to signing tool folder>

To set the path to your signing tools for your system or account:

Search for environment variables in the Windows start menu.
Select Edit environment variables for your account or Edit system environment variables.
Double click on the Path variable.
Click New.
Select Browse.
Select the path to the signing tool.
Click OK to save the path.
Click on OK to close the dialog.

例 6. Linux

To set the path to your signing tools via command line:

Launch the Terminal application.
Open the file in an editor:
```
nano ~/.profile
```
Add any exports definitions you need:
```
export PATH=<Path to Jsign>
```
Click CTRL+X to exit.
Click Y to save.
Click Enter to keep the same file name.
Execute the new .profile by restarting Terminal or using:
```
 source ~/.profile
```

例 7. macOS

To set the path to your signing tools via command line:

Launch the Terminal application.
Create a profile file:
```
touch ~/.zprofile
```
Open the file in an editor:
```
open ~/.zprofile
```
Add any exports definitions you need, such as:
```
export PATH=<Path to Jsign>
```
To save the new .zprofile, click File > Save (CMD + S).
Close the terminal window and reopen to use new saved variables.

Download and configure PKCS11 library

Jsign uses a configuration file to integrate with DigiCert® KeyLocker PKCS11 library.

Follow these instructions to download DigiCert® KeyLocker PKCS11 library and create the configuration file.

Configure sign4j (optional)

提示

This configuration procedure is required for signing with jsign and sign4j using SMCTL.

例 8. Sign with jsign

To integrate SMCTL with jsign:

Download the jsign.bat file.
Download the jsign.jar file.
Add the jsign.bat path to the path environment variable
Remove {path_to_sign4j_exe} in the .bat file.
Edit the jsign.jar file path in the .bat file.
Sign using SMCTL.
注意
Signing will only work if the.bat file name is saved as jsign.bat.

例 9. Sign with sign4j and jsign

To integrate SMCTL with sign4j and jsign:

Download the jsign.bat file.
Download the jsign.jar file.
Add the jsign.bat path to the path environment variable.
Edit the sign4j path in the .bat file.
Edit the jsign path in the .bat file.
Sign using SMCTL.
注意
Signing will only work if the.bat file name is saved as jsign.bat.

Sign with Jsign

You can sign with Jsign directly or via DigiCert's signing tools integrated with Jsign:

本节内容如下:

Jsign

提示

What can Jsign be used to sign?

Install Jsign

提示

Set PATH environment variables

Download and configure PKCS11 library

Configure sign4j (optional)

提示

注意

注意

Sign with Jsign

搜索结果