java-Information Security (13)-Digital signature, code Signing "Java Certificate system implementation"

Overview

Basic concepts of information security

Front-facing

java-Information Security (12)-Digital signature "Java Certificate system implementation"

Process

Code signing can be done through the tool Jarsigner.
Here we signed the code for Tools.jar, with the following command:

into the D-plate.

Jarsigner-storetype Jks-keystore zlex.keystore-verbose Tools.jar www.zlex.org  

Output

Enter password phrase for KeyStore:   updating: META-inf/Www_zlex. SF   is updating: META-inf/Www_zlex. RSA    is signing: org/zlex/security/security. class     signing: org/zlex/tool/main$1. class     signing: org/zlex/tool/main$2. class     signing: org/zlex/tool/main. class     Warning: The  signer certificate expires within six months. 

Verify the Tools.jar command as follows:

Jarsigner-verify-verbose-certs Tools.jar  

Output

402 Sat June 16:25:14 CST meta-inf/MANIFEST. MF532 Sat June 16:25:14 CST meta-inf/Www_zlex. SF889 Sat June 16:25:14 CST meta-inf/Www_zlex. RSA SM590 Wed Dec 13:03:42 CST org/zlex/security/security.classX.509, cn=www.zlex.org, Ou=zlex, O=zlex, L=BJ, ST=BJ, c=CN [The certificate will be09-9-18 3:27expiry] SM705 Tue Dec 18:00:56 CST org/zlex/tool/main$1.classX.509, cn=www.zlex.org, Ou=zlex, O=zlex, L=BJ, ST=BJ, c=CN [The certificate will be09-9-18 3:27expiry] SM779 Tue Dec 18:00:56 CST org/zlex/tool/main$2.classX.509, cn=www.zlex.org, Ou=zlex, O=zlex, L=BJ, ST=BJ, c=CN [The certificate will be09-9-18 3:27expiry] SM12672 Tue Dec 18:00:56 CST org/zlex/tool/main.classX.509, cn=www.zlex.org, Ou=zlex, O=zlex, L=BJ, ST=BJ, c=CN [The certificate will be09-9-18 3:27Expires] s=verified Signature M=List entries in the list K=at least one certificate was found in the KeyStore i=at least one certificate jar was found within the identity scope that was validated. 

The purpose of code signing authentication is to verify the published software, support Sun Java. Jar (Java Applet) files (J2SE), and J2ME MIDlet Suite files.

java-Information Security (13)-Digital signature, code Signing "Java Certificate system implementation"