search

ebourg / jsign

Java implementation of Microsoft Authenticode for signing Windows executables, installers & scripts
https://ebourg.github.io/jsign
Apache License 2.0
261 stars 110 forks source link

SignServer support #252

Open Vampire opened 6 days ago

Vampire commented 6 days ago

In the list of supported Cloud key management systems, I miss the possibility to use an on-premise SignServer instance. While an on-premise SignServer instance is not exactly a "Cloud key management system", it would be really nice if Jsign could support using an own SignServer instance. Would it be feasible that such support is added? If it is already possible and just not documented, maybe it would make sense to add the support for on-premise SignServer instances to the documentation.

Actually, it seems SignServer also provides a Cloud offering, so supporting it would match the "Cloud key management system" category and just needs a way to use an own URL, but it seems this is already supported using --keystore option it seems from the other cloud support options.

ebourg commented 6 days ago

I open to adding SignServer support to Jsign. I did try to install it and see how it works but I couldn't figure out how to use it and eventually gave up. If someone wants to implement this I'll review and integrate the PR.

Vampire commented 6 days ago

I guess you need to use one of https://docs.keyfactor.com/signserver/latest/rest-interface https://docs.keyfactor.com/signserver/latest/client-ws-interface or https://docs.keyfactor.com/signserver/latest/client-http-interface