DigiCert CodeSigning for Sun Java ® Code signing is a process of using digital signatures via Public Key Cryptography
to distribute code, applications, scripts, and executables. This algorithm assures recipients the code came from a trusted source and the code hasn’t been tampered with.
Anyone distributing software, applications, or executables electronically can benefit from DigiCert Code Signing Certificates.
In life and in business, all good relationships are built on trust. DigiCert Code Signing Certificates will help you develop your relationship with your
customers by providing them the peace of mind that your code is signed.
DigiCert is among the top 10 Certificate Authorities in the world. Our root certificates are embedded in all modern browser and certificate stores,
so you can be reassured that your code signing certificate will be trusted by everyone out there. We take pride in exceptional service and have been noted
for excellent customer support. In fact, we encourage you to click Live Help or give us a call at 1-800-896-7973 to speak with one of our qualified code signing certificate experts.
Assure users running your Java applets that the code they’re running is safe to download and run with DigiCert Sun Java Code Signing Certificates.
Digitally sign .jar files and Java applications for use with client's computers, web browsers, and mobile devices with broad ranging trusted ubiquity.
With most applications and content being distributed electronically now, it’s important to rid the warnings and error messages typically accompanied
with unsigned code. Our code signing certificates confirm the legitimacy of the code and ensure your customers it hasn’t been tampered with, thus providing
them with confidence to do business with you.
Sign your JAR files and applications to protect your reputation. No more "Publisher authenticity can not be verified" warnings. Sign up today
to provide your customers with the reassurance they deserve.
Getting a certificate setup in Java is a simple process that involves creating a Keystore and a Certificate Signing Request (CSR),
and then installing your DigiCert generated certificate files back to the Keystore file from which the request was generated. Creating your
keystore and certificate request for Java code signing certificates is pretty straightforward.
Creating your Java keystore and CSR should be easy to do with the linked instructions. For users who might be familiar with using SSL
certificates in a Java environment, the process will be identical. Essentially you will create a java keystore file, and then from that keystore you will
create a certificate signing request (CSR). You will send the CSR to DigiCert when you place your order, but hold on to the keystore (and make sure
to remember the keystore password, you will need it to install your returned certificate as well as every time you want to use your cert to sign code).
Once you have received your signed certificate file back from DigiCert, you can install it into the keystore that you generated with the above instructions.
Type the following command to install the certificate file:
keytool -import -trustcacerts -alias server -file your_domain_name.p7b -keystore your_site_name.jks
If the certificate is installed correctly, you will receive a message stating "Certificate reply was installed in keystore"
If it asks if you want to trust the certificate. Choose y or yes.
Congratulations, your certificate is now setup and ready to start signing code.
Once you have your keystore setup, with the CA signed certificate files installed correctly to the keystore that you created, you are ready to start signing code.
Jarsigner can be used to sign and verify the signature on .jar files.
- To sign your file, go ahead and run the following command and the command prompt:
jarsigner -keystore c:\path o\your\keystore.jks -storepass YourPassword c:\path o\your ile.jar YourAlias
In the above example, you should replace YourPassword with the password assigned when your keystore was generated, and YourAlias
with the appropriate alias assigned when you generated your CSR.
- When successfully run, this command will not provide any output to indicate success. You will want to run the jarsigner -verify
command to verify that the .jar was signed successfully
jarsigner -verify -verbose -certs c:\path o\your ile.jar
You should get an output including a line "s = signature was verified", if you get that output, your code has been successfully signed and is ready to use.
| 
