From 2fae1075adba1dbbb67b292f0cb1e33b5c46ad89 Mon Sep 17 00:00:00 2001 From: Ivan Wallis Date: Tue, 28 Jan 2025 18:59:38 -0800 Subject: [PATCH 1/3] doc: pkcs11 info Signed-off-by: Ivan Wallis --- docs/index.html | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/docs/index.html b/docs/index.html index 31264b53..18d1ca1b 100644 --- a/docs/index.html +++ b/docs/index.html @@ -60,7 +60,7 @@

Features

  • Keystores supported:
    • PKCS#12, JKS and JCEKS files
      • -
    • PKCS#11 hardware tokens (YubiKey, Nitrokey, SafeNet eToken, etc)
      • +
    • PKCS#11 hardware tokens (YubiKey, Nitrokey, SafeNet eToken, Venafi CodeSign Protect, etc)
    • Cloud key management systems:
      • AWS KMS
        • @@ -697,6 +697,15 @@

        Signing with a PIV card

        If multiple devices are connected, the keystore parameter can be used to specify the name of the one to use.

        +

        Signing with PKCS#11

        + +

        A SunPKCS11 configuration file is required. +The alias represents the name of the certificate used for signing in the keystore. + +

        + jsign --storetype PKCS11 --storepass NONE --keystore pkcs11.conf --alias SIGNATURE application.exe
+
        +

        Signing with AWS Key Management Service

        AWS Key Management Service (KMS) stores only the private key, From bab050e70ed79063f8380d9f3888a878b587e11e Mon Sep 17 00:00:00 2001 From: Ivan Wallis Date: Tue, 28 Jan 2025 19:20:25 -0800 Subject: [PATCH 2/3] update alias --- docs/index.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/index.html b/docs/index.html index 18d1ca1b..e19ee2b4 100644 --- a/docs/index.html +++ b/docs/index.html @@ -703,7 +703,7 @@

        Signing with PKCS#11

        The alias represents the name of the certificate used for signing in the keystore. 
        - jsign --storetype PKCS11 --storepass NONE --keystore pkcs11.conf --alias SIGNATURE application.exe
+ jsign --storetype PKCS11 --storepass NONE --keystore pkcs11.conf --alias My-Signing-Cert application.exe

        Signing with AWS Key Management Service

        From 8a44e40da15f581b26f6050b20ff82e12eaeee8a Mon Sep 17 00:00:00 2001 From: Ivan Wallis Date: Fri, 31 Jan 2025 11:29:50 -0800 Subject: [PATCH 3/3] removed reference to Venafi --- docs/index.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/index.html b/docs/index.html index e19ee2b4..45568493 100644 --- a/docs/index.html +++ b/docs/index.html @@ -60,7 +60,7 @@

        Features

      • Keystores supported: