Questions tagged [sign]

A digital signature is a mathematical scheme for demonstrating the authenticity of a digital message or document.

A digital signature is a mathematical scheme for demonstrating the authenticity of a digital message or document. A valid digital signature gives a recipient reason to believe that the message was created by a known sender, such that the sender cannot deny having sent the message (authentication and non-repudiation) and that the message was not altered in transit (integrity).

1267 questions
10
votes
1 answer

sign file with bouncy castle in java

I want to sign a file content with certificate in java. With terminal and openssl, I can do this : openssl smime -sign -in nosign.mobileconfig -out signed.mobileconfig -signer server.crt -inkey server.key -certfile cacert.crt -outform der…
zarghol
  • 478
  • 5
  • 19
10
votes
4 answers

Signing .exe with .cer file (what is my certificate's name that signtool.exe is asking for?)

I have bought a certificate for my program. The website from which I bought it, sent me an .cer file (43-some-really-long-name-9962812767788.cer). No additional files were sent, but I'm almost 100% sure that I don't need anything more. When I click…
PolGraphic
  • 3,233
  • 11
  • 51
  • 108
10
votes
1 answer

Code signing helper apps for Apple Sandbox on OSX

I have an app I need to run at startup, and I am converting to Sandboxing. I have a helper app created, and working fine when I do not code sign my app. To codesign, it looks like I have to create provisioning profiles - one for the helper and one…
JeremyLaurenson
  • 979
  • 2
  • 11
  • 23
9
votes
5 answers

Why does adb fail with Failure [INSTALL_PARSE_FAILED_NO_CERTIFICATES]?

As seen from the result of "jarsigner -verify" my apk is indeed signed, and I still get install "Failure". Any help would be great ! carl-emil@carlemil-ThinkPad-T410:~/workspace/myapp$ ~/android-sdk-linux_15/platform-tools/adb install…
Carl-Emil Kjellstrand
  • 1,233
  • 1
  • 10
  • 17
9
votes
3 answers

Creating a strongly-named managed (/clr) C++ assembly

I have a managed C++ assembly using the /clr switch that I am trying to sign as per this question with the following post-build step: sn -Ra "$(TargetPath)" MyKey.snk However this is giving the following error: C:\Path\Assembly.dll does not…
Justin
  • 84,773
  • 49
  • 224
  • 367
9
votes
1 answer

Detect int32 overflow using 0xFFFFFFFF masking in Python?

I find using 0xFFFFFFFF masking to detect int32 overflow in Python may work for positive numbers. The expression: x & 0xFFFFFFFF == x will return True if x doesn't oveflow and x is larger than 0. However, this expression doesn't work for negative…
Hanfei Sun
  • 45,281
  • 39
  • 129
  • 237
9
votes
3 answers

SignAPK - PEM file AND PK8 file

What is PEM file & Pk8 file . Where can i find these for android apk. I need to use this to sign apk manually through SignApk.jar. java -jar SignApk.jar certificate.pem key.pk8 PlatformOne.apk pf1.apk This tool has integrated pem file & pk8 file.…
Gayan Dinuzhka
  • 331
  • 2
  • 5
  • 16
9
votes
1 answer

How can I see what attributes are signed inside a PKCS 7 file?

I have a PKCS 7 file, which contains signed data. It successfully verifies: openssl smime -verify -in data.p7s -CAfile root-certificate.pem Output: Verification successful Signed data But when I extract the signed part, I do not see that it is…
Konstantin Shemyak
  • 2,369
  • 5
  • 21
  • 41
9
votes
2 answers

Making RSA keys from a password in python

I want to be able to generate and re-generate the same RSA keys from a password (and salt) alone in python. Currently I was doing it using pycrypto, however, it does not seem to generate the same exact keys from the password alone. The reason seems…
Charlie Parker
  • 5,884
  • 57
  • 198
  • 323
9
votes
8 answers

Lua decimal sign?

I've used this in other languages, but lua seems to be lacking this rather useful function. Could one of you nice chappies provide me a lua function to get the sign of the number passed to it?
SilentCipher
9
votes
2 answers

Sign a jar file exported from Eclipse 3.5?

Is it possible to sign a jar file as you export it from Eclipse 3.5? Or a plugin to allow this to happen? I can easily export a runnable jar, and sign it myself using jarsigner, but manually doing this every change is not efficient.
Ken
  • 1,029
  • 2
  • 14
  • 22
8
votes
4 answers

Can maven sign not only produced jar, but also dependencies

I managed to create main jar, copy dependencies to a single directory, the only step left is to sign all jars. I can sign my own produced jar as a part of jar:sign, but how do i sign dependencies? Thanks
tevch
  • 625
  • 6
  • 14
8
votes
1 answer

Digitally Sign tar.gz file

I need to digitally sign a tar.gz file, and have no idea how to do it. I understand the concept, and I know how to sign a jar/zip file. But I cannot find a way that will work with a tar.gz file. Can anyone point me in the right direction, or tell me…
lanrat
  • 4,344
  • 10
  • 35
  • 41
8
votes
5 answers

How can I sign my app with "APK Signature Scheme v3 and v4"?

Here in the docs, there is the explanation about signature v3 and v4 : https://source.android.com/security/apksigning/v3 But when I try to sign my app in android studio using Build>Generate signed apk/bundle, I can just check checkboxes for v1(jar…
Nabzi
  • 1,823
  • 1
  • 16
  • 26
8
votes
2 answers

JWT signing requirements for ES256

I am trying to compile the final part of my singing by generating the signature for my JWT using ES256. According to jwt.io, I can sign it with HMAC SHA256 - here is where I get a bit confused, if my header uses ES256 - does this mean I have to…
turtlepower
  • 708
  • 1
  • 7
  • 18