macOS
Homebrew已验证 · 100%
brew install osslsigncodelocal Homebrew formula metadata
MacPorts已验证 · 94%
sudo port install osslsigncodeMacPorts ports tree · devel/osslsigncode/Portfile · 来源: api.github.com
安装
其他安装命令
Linux
Debian apt已验证 · 92%
sudo apt install osslsigncodeDebian stable package indexes · osslsigncode · 来源: deb.debian.org
Fedora dnf已验证 · 92%
sudo dnf install osslsigncodeFedora Rawhide package metadata · osslsigncode · 来源: dl.fedoraproject.org
Nix已验证 · 92%
nix profile install nixpkgs#osslsigncodenixpkgs package indexes · pkgs/by-name/os/osslsigncode/package.nix · 来源: api.github.com
openSUSE zypper已验证 · 92%
sudo zypper install osslsigncodeopenSUSE Tumbleweed package metadata · osslsigncode · 来源: download.opensuse.org
Windows
Scoop已验证 · 92%
scoop install main/osslsigncodeScoop official bucket manifest trees · bucket/osslsigncode.json · 来源: api.github.com
Windows Package Manager已验证 · 92%
winget install --id MichalTrojnara.osslsigncode -eWindows Package Manager source index · MichalTrojnara.osslsigncode · 来源: cdn.winget.microsoft.com
概览
软件包摘要
OpenSSL based Authenticode signing for PE/MSI/Java CAB files
历史
项目历史与用法
osslsigncode is an OpenSSL- and cURL-based command-line implementation of Authenticode signing, timestamping, verification, removal, and extraction for Windows-oriented file formats such as PE, CAB, CAT, MSI, APPX, and selected script files.
项目历史
The project was created to avoid depending on Microsoft's `signtool.exe` and Windows CryptoAPI when signing Windows binaries from Unix-like build environments. Its README explains the origin plainly: binaries could be built with Wine on Linux, but signing with signtool failed because the necessary Windows APIs were not fully implemented there.
The codebase records a longer authorship chain than the GitHub namespace suggests. The main C source includes copyright attribution for Per Allansson for 2005-2015 and Michal Trojnara for 2018-2023, while the maintained GitHub repository is under mtrojnar and uses CMake-based builds.
采用历史
osslsigncode filled a practical gap for cross-platform release engineering: sign Windows installers and executables from Linux or macOS CI systems using OpenSSL-compatible key material. Its packaging across Homebrew, Debian/Ubuntu, Fedora, MacPorts, Nix, Scoop, winget, and openSUSE reflects that it is used by build and security pipelines rather than by end-user desktop workflows.
Vendor documentation from DigiCert includes osslsigncode in third-party signing-tool instructions for PKCS#11 workflows, showing that certificate authorities and signing services treat it as a supported path for Authenticode operations outside Microsoft tooling.
使用方式
A typical use signs a PE or MSI file with a certificate and private key, optionally adds an Authenticode or RFC 3161 timestamp, and verifies the resulting signature. The README also documents PKCS#12 containers, PKCS#11 engines and providers, Windows CNG engine use, CAB Java signing compatibility, and operations for extracting or removing signatures.
The tool is especially useful in CI/CD systems that build Windows artifacts on non-Windows hosts or store signing keys in HSM, token, PKCS#11, or provider-backed systems.
为什么软件包爱好者会关心
osslsigncode is significant because it packages a Windows trust-format workflow in portable Unix-style form. It sits at the awkward intersection of OpenSSL, Windows Authenticode, timestamp authorities, hardware-backed keys, and reproducible release automation.
Related projects
- Microsoft signtool.exe is the proprietary reference tool that osslsigncode partially replaces. OpenSSL, cURL, PKCS#11 engines/providers, and certificate-authority timestamp services are its operational dependencies and ecosystem neighbors.
来源
- https://docs.digicert.com/en/software-trust-manager/code-signing/sign-with-third-party-signing-tools/windows-applications/sign-authenticode-files-with-osslsigncode-using-openssl-pkcs11-engine.html
- https://formulae.brew.sh/formula/osslsigncode
- https://github.com/mtrojnar/osslsigncode
- https://github.com/mtrojnar/osslsigncode/blob/master/osslsigncode.c
- https://github.com/mtrojnar/osslsigncode/blob/master/osslsigncode.md
安全态势
风险级别：绿色
narrow executable package without higher-risk signals.
风险分类器
绿色 风险 · 低 置信度 · appliance
原因
- narrow executable package without higher-risk signals
信号
- metadata:no-higher-risk-signals
安装行为
- formula 元数据中未记录 Homebrew post-install 钩子。
- Homebrew bottle 元数据适用于 6 个平台目标。
- 安装时包含 1 个运行时依赖。
- 构建元数据列出 1 个构建依赖。
建议审查
在无人值守的代理使用前，请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。
可执行文件
已安装的可执行文件
| 命令 | 类型 | 暴露范围 | 备注 |
|---|---|---|---|
osslsigncode | cli | 全局可执行文件 |
新鲜度
版本和新鲜度
这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。
页面生成时间2026-07-26
管理器版本2.14
管理器更新时间2026-07-21
本地数据OK
上游当前
检测到的最新版本2.14
https://github.com/mtrojnar/osslsigncode
- OK没有生成新鲜度警告。
安装元数据
软件包元数据
| 软件包键 | brew:osslsigncode |
|---|---|
| 版本 | 2.14 |
| 软件包管理器 | Homebrew |
| 软件包管理器页面 | https://formulae.brew.sh/formula/osslsigncode |
| 主页 | https://github.com/mtrojnar/osslsigncode |
| 仓库 | https://github.com/mtrojnar/osslsigncode |
| 上游文档 | https://github.com/mtrojnar/osslsigncode#readme |
| 许可证 | GPL-3.0-or-later |
| 源码归档 | https://github.com/mtrojnar/osslsigncode/archive/refs/tags/2.14.tar.gz |
| 最后更新 | 2026-07-21T00:23:43Z |
| Pulse | updated |
| 依赖 | openssl@3 |
| 构建依赖 | cmake |
| macOS 提供的库 | curl, python |
| Bottle | 可用 (于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | 未定义 |
| 服务 | 未声明 |
注册表事实
源数据库详情
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | osslsigncode |
| Version Scheme | 0 |
| Revision | 0 |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
源数据库匹配
其他软件包管理器记录
匹配项来自外部软件包管理器索引，并与本地 Automic Vault 软件包链接分开显示。
Debian apt95%
osslsigncode 2.9-2
Authenticode signing tool
https://github.com/mtrojnar/osslsigncode
sudo apt install osslsigncode- Section: otherosfs
- Architecture: amd64
- 3 依赖
- normalized package name match
- 匹配方式：Osslsigncode
Nix95%
osslsigncode
nix profile install nixpkgs#osslsigncode- normalized package name match
- 匹配方式：Osslsigncode
Ubuntu apt95%
osslsigncode 2.8-2
Authenticode signing tool
https://github.com/mtrojnar/osslsigncode
sudo apt install osslsigncode- Section: universe/otherosfs
- Architecture: amd64
- 4 依赖
- normalized package name match
- 匹配方式：Osslsigncode
dnf95%
osslsigncode 2.13-1.fc45
OpenSSL-based Authenticode signing for PE, CAB, CAT, MSI, APPX
https://github.com/mtrojnar/osslsigncode
sudo dnf install osslsigncode- License: GPL-3.0-or-later
- Category: Unspecified
- Architecture: x86_64
- Source Package: osslsigncode
- 5 依赖
- 1 提供
- normalized package name match
- 匹配方式：Osslsigncode
zypper95%
osslsigncode 2.13-1.2
Platform-independent tool for Authenticode signing of EXE/CAB files
https://github.com/mtrojnar/osslsigncode
sudo zypper install osslsigncode- License: GPL-3.0-only
- Category: Productivity/Security
- Architecture: x86_64
- Source Package: osslsigncode
- 4 依赖
- 1 提供
- normalized package name match
- 匹配方式：Osslsigncode
MacPorts95%
osslsigncode
sudo port install osslsigncode- normalized package name match
- 匹配方式：Osslsigncode
Scoop95%
main/osslsigncode
scoop install main/osslsigncode- normalized package name match
- 匹配方式：Osslsigncode
winget95%
MichalTrojnara.osslsigncode
winget install --id MichalTrojnara.osslsigncode -e- normalized package name match
- 匹配方式：Osslsigncode
来源线索
由仓库数据生成
此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。
Combined YAML source
View the package source record on GitHub.
使用的来源
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment