For information on issues and solutions commonly encountered by developers, see Chapter 8, "Answers to Common Questions."

Note This document describes versions 1.0 and 1.1 only. For information about version .60 (zigbert on the command line)--for example, if you need to maintain scripts based on version .60--see Signing Software with Netscape Signing Tool .60. For new projects, Netscape recommends using version 1.1.

This chapter reviews basic concepts that you need to understand before you begin using version 1.1 of the Netscape Signing Tool to sign files or JavaScript scripts. If you are already familiar with object-signing concepts, go straight to Chapter 2, "Using the Netscape Signing Tool."

What Is the Netscape Signing Tool?

What's New in Version 1.1

JAR Format and JAR Archives

What Signing a File Means

Public-Key Cryptography and Certificates

This chapter describes how to use version 1.1 of the Netscape Signing Tool to create digital signatures for files in a directory and to associate the signatures with the files according to the JAR format. Netscape Signing Tool 1.1 also provides an option that automatically creates a JAR file containing the directory; this option was not implemented in pre-1.0 versions. For maximum flexibility, and for compatibility with scripts that used earlier versions of the Netscape Signing Tool, you can still use a ZIP utility to create the JAR file.

Getting Ready to Use the Netscape Signing Tool

Setting Up Your Certificate

Listing Available Certificates

Signing a File

Using the Netscape Signing Tool with a ZIP Utility

Tips and Techniques

This chapter summarizes the syntax and options for Netscape Signing Tool 1.1.

Command Syntax

Command Options

Command File Syntax

Command File Keywords and Example

Netscape Signing Tool versions 1.0 and 1.1 allow you to create object-signing certificates for testing purposes. This chapter describes how to create and use such test certificates.

Generating the Keys and Certificate

Importing Your Test Certificate Into Communicator

This chapter describes how to use the Netscape Signing Tool to sign inline JavaScript scripts and package the digital signature and related information in a JAR file.

Modifying the HTML Page

Signing Scripts

This chapter describes how to use smart cards from within the Netscape Signing Tool to digitally sign files.

What Is a Smart Card?

Setting Up a Smart Card

Using the -M Option to List Smart Cards

Using the Netscape Signing Tool and a Smart Card to Sign Files

This chapter describes how to use the Netscape Signing Tool in FIPS-140-1 validated mode. FIPS 140-1 is a U.S. government standard for implementations of cryptographic modules--that is, hardware or software that encrypts and decrypts data or performs other cryptographic operations (such as creating or verifying digital signatures). Many products sold to the U.S. government must comply with one or more of the FIPS standards.

Using FIPS-140 Mode

Verifying FIPS Mode

This chapter answers the most common technical questions regarding the Netscape Signing Tool.

Last Updated: 06/19/98 13:23:44

Any sample code included above is provided for your use on an "AS IS" basis, under the Netscape License Agreement - Terms of Use