Sign Java files with Jarsigner using KSP library
Jarsigner is a command-line tool provided as part of the Java Development Kit (JDK). It is used to digitally sign Java Archive (JAR) files and other related artifacts.
Jarsigner and keytool can be used with the DigiCert® KeyLocker KSP instead of PKCS11. However, we recommend Jarsigner signing with PKCS11.
Follow these instructions to sign directly using Jarsigner and securely reference your private key stored in DigiCert® KeyLocker. Alternatively, integrate Jarsigner with Signing Manager Controller (SMCTL) for simplified signing.
Prerequisites
Windows operating system
Download and configure Windows clients installer
注意
This signing method may not be compatible with other distributions of OpenJDK.
Sign
To sign a .jar file using the DigiCert® KeyLocker KSP:
Command:
jarsigner -keystore NONE -storetype Windows-My -signedjar <signed_file>.jar -sigalg SHA256withRSA -digestalg SHA-256 <jarfile> <keypair alias> -tsa http://timestamp.digicert.com Command sample:
jarsigner -keystore NONE -storetype Windows-My -signedjar example-signed.jar -sigalg SHA256withRSA -digestalg SHA-256 example.jar kp1 -tsa http://timestamp.digicert.com