Table of Contents
Advertisement
•
CA server software running on your corporate intranet or extranet. Netscape
Certificate Management System provides a complete management solution for
creating, deploying, and managing certificates, including CAs that issue
object-signing certificates.
You must also have a certificate for the CA that issues your signing certificate
before you can sign files. If the certificate authority's certificate isn't already
installed in your copy of Communicator, you typically install it by clicking the
appropriate link on the certificate authority's web site, for example on the page
from which you initiated enrollment for your signing certificate. This is the case for
some test certificates, as well as certificates issued by Netscape Certificate
Management System: you must download the the CA certificate in addition to
obtaining your own signing certificate. CA certificates for several certificate
authorities are preinstalled in the Communicator certificate database.
When you receive an object-signing certificate for your own use, it is automatically
installed in your copy of the Communicator client software. Communicator
supports the public-key cryptography standard known as PKCS #12, which
governs key portability. You can, for example, move an object-signing certificate
and its associated private key from one computer to another on a credit-card-sized
device called a smart card. For motr information, see "Using Netscape Signing Tool
with Smart Cards" on page 104.
Using Netscape Signing Tool
This section describes how to use Netscape Signing Tool to create digital signatures
for files in a directory and to associate the signatures with the files according to the
JAR format. Netscape Signing Tool also provides an option that automatically
creates a JAR file containing the directory; this option was not implemented in
pre-1.0 versions. For maximum flexibility, and for compatibility with scripts that
used earlier versions of Netscape Signing Tool, you can still use a ZIP utility to
create the JAR file.
•
Getting Ready to Use Netscape Signing Tool
•
Signing a File
•
Using Netscape Signing Tool with a ZIP Utility
•
Tips and Techniques
For a complete list of Netscape Signing Tool command-line options, see "SignTool
Syntax and Options" on page 95.
Using Netscape Signing Tool
Chapter 13
Netscape Signing Tool
89
Advertisement
Table of Contents
