signtool
on the command line) to digitally sign software, including binary files intended for distribution via SmartUpdate, Java class files, and JavaScript scripts. Version 1.1 includes all the capabilities of, and is fully compatible with, previous versions of the Netscape Signing Tool (.50, .60, and 1.0).
For information on issues and solutions commonly encountered by developers, see Chapter 8, "Answers to Common Questions."
Note This document describes versions 1.0 and 1.1 only. For information about versions 1.2 and 1.3, see Netscape Signing Tool.
This chapter reviews basic concepts that you need to understand before you begin using version 1.1 of the Netscape Signing Tool to sign files or JavaScript scripts. If you are already familiar with object-signing concepts, go straight to Chapter 2, "Using the Netscape Signing Tool."
This chapter describes how to use version 1.1 of the Netscape Signing Tool to create digital signatures for files in a directory and to associate the signatures with the files according to the JAR format. Netscape Signing Tool 1.1 also provides an option that automatically creates a JAR file containing the directory; this option was not implemented in pre-1.0 versions. For maximum flexibility, and for compatibility with scripts that used earlier versions of the Netscape Signing Tool, you can still use a ZIP utility to create the JAR file.
This chapter summarizes the syntax and options for Netscape Signing Tool 1.1.
Netscape Signing Tool versions 1.0 and 1.1 allow you to create object-signing certificates for testing purposes. This chapter describes how to create and use such test certificates.
This chapter describes how to use the Netscape Signing Tool to sign inline JavaScript scripts and package the digital signature and related information in a JAR file.
This chapter describes how to use smart cards from within the Netscape Signing Tool to digitally sign files.
This chapter describes how to use the Netscape Signing Tool in FIPS-140-1 validated mode. FIPS 140-1 is a U.S. government standard for implementations of cryptographic modules--that is, hardware or software that encrypts and decrypts data or performs other cryptographic operations (such as creating or verifying digital signatures). Many products sold to the U.S. government must comply with one or more of the FIPS standards.
This chapter answers the most common technical questions regarding the Netscape Signing Tool.
Last Updated: 06/19/98 13:23:44