.png){kind=logo}
The following table summarizes the signing tools known to be compatible with Signum, the interface each uses, and the platforms on which that configuration is supported.
For interface overview, see Interoperability.
|
Tool |
Interface |
Platform |
|---|---|---|
|
Microsoft SignTool |
KSP |
Windows |
|
Microsoft HLK |
KSP |
Windows |
|
Microsoft Set-Authenticode |
KSP |
Windows |
|
Microsoft ClickOnce |
KSP |
Windows |
|
Jarsigner (KSP) |
KSP |
Windows |
|
Jarsigner (PKCS#11) |
PKCS#11 |
Windows, Linux, macOS |
|
OpenSSL |
PKCS#11 |
Linux, macOS |
|
Jsign |
KSP / PKCS#11 |
Windows, Linux, macOS |
|
rpmsign |
PKCS#11 (via GPG) |
Linux |
|
dpkg-sig / debsign |
PKCS#11 (via GPG) |
Linux |
|
GPG commit signing |
PKCS#11 |
Linux |
|
macOS codesign |
CryptoTokenKit |
macOS |
|
macOS productsign, pkgbuild |
CryptoTokenKit |
macOS |
|
Xcode (archive signing) |
CryptoTokenKit |
macOS |
|
VBA signing for Office macros |
KSP |
Windows |
|
Adobe PDF signing |
KSP / PKCS#11 |
Windows, Linux, macOS |
|
Container signing (Cosign) |
PKCS#11 |
Linux |
GPG-based tools use PKCS#11 indirectly through the gnupg-pkcs11-scd smart card daemon. For more information, see the guides for RPM signing, Debian package signing, and Git commit signing.
For step-by-step configuration instructions for each of these tools, see Integration & Signing Guides.