Verifying Signed Oracle Instant Client Zip Files

Starting with Oracle Database Client 19c (19.22), you can verify the code-signing for Oracle Instant Client zips to ensure the integrity of the packages before you deploy them in your environments.

Use the Java utility jarsigner to verify the integrity of your Oracle Instant Client zip files. To verify the integrity of the Oracle Instant Client installation zip files before you extract the installation files:

1. Go to the directory where you have downloaded the zip file.
2. Run the jarsigner command with the -verify option to quickly check your installation zip file:

   For example, to check the Oracle Instant Client Basic package zip file for Windows:

   jarsigner -verify instantclient-basic-windows.x64-23.4.0.24.05.zip
   jar verified.
   

   If you want detailed certificate information, then use the -verify option along with the -verbose:summary and -certs options. For example:

   jarsigner -verify -verbose:summary -certs instantclient-basic-windows.x64-23.4.0.24.05.zip

For more jarsigner options, type jarsigner -h or review the jarsigner reference documentation.