1. Home
  2. /
  3. Use cases
  4. /
  5. Code Signing (JAR, CMS, openPGP, Debian, Plain)

Code Signing (JAR, CMS, openPGP, Debian, Plain)

Code signing helps protect the integrity and authenticity of software, containers, and other software packages when it is downloaded over insecure networks or stored and executed on untrusted media.

hero-sub-2-white

Challenge

Managing access and storage of signing keys can be a struggle

As a software supplier or user, you can prevent supply chain attacks, malware, and unauthorized software tampering by only providing/allowing signed software, containers, and applications. In order to make this happen, IT and application teams must have easy access to code signing tools and keys during software development and maintenance. Meanwhile, security teams struggle to manage signing keys, who has access to them, and where they are kept. The signing keys can be found on workstations, repo readme files, and build servers.

arrow

Solution

Sign code och software securely from one flexible platform

SignServer is a high-performance, centrally managed signing key and workflow solution.  You can keep signing keys in secure files (only recommended for testing and prototyping) or with on-premises or cloud-based Hardware Security Modules (HSM).

SignServer supports code and package signing formats for Microsoft, Java, and Android as well as more generic formats such as CMS and PKCS#1. A timestamping service is always included. 

You can sign using APIs, command lines, or consoles without uploading or transferring big files. Automated workflows for continuous delivery, integrated with your DevOps and CI/CD pipelines.

Tutorials

SignServer logo thumbnail
Code signing
DevOps
Get started
2023-09-27

Create OpenPGP signatures with SignServer

{At sit et cras neque etiam cursus vulputate tempor enim. Quisque suspendisse nunc massa eleifend est ultrices. Facilisi ut a augue pellentesque quam nibh. Sit nisl.|=##=|162821}
OpenPGP
SignServer logo thumbnail
Code signing
Post-quantum
ML-DSA
SignServer logo thumbnail
DevOps
2023-06-08

Sign container images with Cosign and SignServer

{At sit et cras neque etiam cursus vulputate tempor enim. Quisque suspendisse nunc massa eleifend est ultrices. Facilisi ut a augue pellentesque quam nibh. Sit nisl.|=##=|162821}
COSIGN
SignServer logo thumbnail
DevOps
2023-06-07

Connect a Jenkins CI pipeline to SignServer

{At sit et cras neque etiam cursus vulputate tempor enim. Quisque suspendisse nunc massa eleifend est ultrices. Facilisi ut a augue pellentesque quam nibh. Sit nisl.|=##=|162821}
jenkins
SignServer logo thumbnail
Code signing
2023-06-06

Flexible Code Signing: Try Multiple Formats with SignServer

{At sit et cras neque etiam cursus vulputate tempor enim. Quisque suspendisse nunc massa eleifend est ultrices. Facilisi ut a augue pellentesque quam nibh. Sit nisl.|=##=|162821}
Signserver
SignServer logo thumbnail
Secure boot OTA
2023-06-05

Set up your ESP32 board with secure updates

{At sit et cras neque etiam cursus vulputate tempor enim. Quisque suspendisse nunc massa eleifend est ultrices. Facilisi ut a augue pellentesque quam nibh. Sit nisl.|=##=|162821}
Espressif

Get inspired

Stay up-to-date on the latest SignServer news and updates through our news feed. From product releases to the newest tutorial videos and guides, our feed provides the latest information on all things related to SignServer. Don't miss out on our upcoming events, live or online, designed to provide valuable knowledge and hands-on experiences. Join our community and stay in the know with SignServer.

Keyfactor Event
Event
Ejbca
Signserver
16 June, 2024

Tomas Gustavsson will be speaking at #CNSCon in Seattle.

Tomas Gustavsson, our Chief PKI Officer, will be speaking at #CNSCon North Am...
PKI hierarchies - 1, 2, 3 tiers ?
Installation & Deployment
Tech Update
Ejbca
Signserver
6 June, 2024

Using YubiKeys from Yubico with EJBCA

EJBCA administrator login keys on an external token for MacOS  and Windows Yu...
Screenshot 2024-06-03 at 14.48.04
Event
Ejbca
Signserver
5 June, 2024

Join us on September 26th for the Community Tech Meetup

26 September 2024, Stockholm We are incredibly proud to present this year...

Related open-source projects