Signing Applets - Links

Contents

Examples of signed pages

These are signed Java applets I know of that are publicly available on the Web. If you know of other examples please let me know.

I wrote a set of signed applets for The Analytical Engine Online, a Computer Science textbook and web site. Each applet allows the user to save/load their work to/from their local hard disk, and are signed for both Internet Explorer and Communicator/Navigator. (Before you ask, I can't give out the source code for these.)

Tools

The signtool code signing tool's download page: <http://developer.netscape.com/software/signedobj/jarpack.html>. signtool for Windows 95 (as of 3/7/03) is at <http://developer.netscape.com/software/signedobj/signtool13/signtool13WIN95.zip>.

Signing Software with Netscape Signing Tool 1.1 (as of 3/7/03): <http://developer.netscape.com/docs/manuals/signedobj/signtool/index.htm>

The Microsoft Java SDK 2.02, which contains cabarc.exe, signcode.exe, chktrust.exe, signer.dll and javasign.dll (as of 9/3/99): <http://www.microsoft.com/java/download.htm>

*** WARNING ***

As part of the battles between Microsoft and Sun, Microsoft has stopped making their Java SDK available. For more details see my note on the first page of this document.

Vendors

VeriSign, at <http://www.verisign.com/>, is a full-service on-line vendor of software signing IDs. They also provide their customers with a timestamping service at <http://timestamp.verisign.com/scripts/timstamp.dll> (this URL can only be used by signcode as shown above). Now that they've stopped issuing $20 Class 2 certificates they're a bit pricey ($400 times two if you want to support both Navigator and Explorer). Other useful VeriSign pages:

Thawte Certification, at <http://www.thawte.com/>, is a recently established CA. Their (latest) claim to fame is that you only need one $200 (as of 9/3/99) certificate for both Netscape Object Signing and Microsoft Authenticode. For more info on this, see <http://www.thawte.com/certs/developer/diffapps.html>. They have a number of other useful pages:

SECUDE is a new certificate authority; when last I checked they didn't seem to provide certificates for signing software: <http://www.secude.com/trustfactory/>

Belsign is a new CA which apparently can generate software signing certificates for Navigator; they're at <http://www.belsign.com/> (I don't know anything more about them).

Other CAs:

Microsoft has a number of useful web pages:

Netscape also has a number of good pages:

And of course, there's always Sun:

Articles and FAQs

For a good overview of this process, along with information on Netscape's Capabilities API, see Joe Bowbeer's article Signing Applets for Internet Explorer and Netscape Navigator: <http://ourworld.compuserve.com/homepages/jozart/article/index.html>. (Note: this article was in the June 1997 issue of JavaUniverse, which has since gone the way of all flesh. The author has reposted it on his own site.)

Other articles:

 

 
  
    Copyright © 2012 Daniel Griscom Site design myriadweb.com  
Home Page Home Page Home Page