# Installer osslsigncode avec Homebrew, apt, dnf, MacPorts, Nix, zypper, scoop, winget Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de osslsigncode pour les workflows d'agents IA. ## installation ```sh sudo av install brew:osslsigncode ``` Commandes d'installation supplémentaires: ### macOS - Homebrew (100%): ```sh brew install osslsigncode ``` Preuve: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install osslsigncode ``` Preuve: MacPorts ports tree: devel/osslsigncode/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - Debian apt (92%): ```sh sudo apt install osslsigncode ``` Preuve: Debian stable package indexes: osslsigncode from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install osslsigncode ``` Preuve: Fedora Rawhide package metadata: osslsigncode from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#osslsigncode ``` Preuve: nixpkgs package indexes: pkgs/by-name/os/osslsigncode/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - zypper (92%): ```sh sudo zypper install osslsigncode ``` Preuve: openSUSE Tumbleweed package metadata: osslsigncode from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst ### Windows - Scoop (92%): ```sh scoop install main/osslsigncode ``` Preuve: Scoop official bucket manifest trees: bucket/osslsigncode.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 - winget (92%): ```sh winget install --id MichalTrojnara.osslsigncode -e ``` Preuve: Windows Package Manager source index: MichalTrojnara.osslsigncode from https://cdn.winget.microsoft.com/cache/source.msix ## Faits du paquet - **Clé du paquet:** brew:osslsigncode - **Gestionnaire de paquets:** Homebrew - **Version:** 2.14 - **Résumé source:** OpenSSL based Authenticode signing for PE/MSI/Java CAB files - **Page d'accueil:** - **Dépôt:** - **Dernière mise à jour:** 2026-07-21T00:23:43Z - **Généré:** 2026-08-03T19:37:03+00:00 ## exécutables - osslsigncode (alias) ## Comportement d'installation - Bouteille: non disponible ## Version et fraîcheur - page générée: 2026-08-03 - version du gestionnaire: 2.14 ## Historique du projet et usages osslsigncode is an OpenSSL- and cURL-based command-line implementation of Authenticode signing, timestamping, verification, removal, and extraction for Windows-oriented file formats such as PE, CAB, CAT, MSI, APPX, and selected script files. ### Historique du projet The project was created to avoid depending on Microsoft's `signtool.exe` and Windows CryptoAPI when signing Windows binaries from Unix-like build environments. Its README explains the origin plainly: binaries could be built with Wine on Linux, but signing with signtool failed because the necessary Windows APIs were not fully implemented there. The codebase records a longer authorship chain than the GitHub namespace suggests. The main C source includes copyright attribution for Per Allansson for 2005-2015 and Michal Trojnara for 2018-2023, while the maintained GitHub repository is under mtrojnar and uses CMake-based builds. ### Historique d'adoption osslsigncode filled a practical gap for cross-platform release engineering: sign Windows installers and executables from Linux or macOS CI systems using OpenSSL-compatible key material. Its packaging across Homebrew, Debian/Ubuntu, Fedora, MacPorts, Nix, Scoop, winget, and openSUSE reflects that it is used by build and security pipelines rather than by end-user desktop workflows. Vendor documentation from DigiCert includes osslsigncode in third-party signing-tool instructions for PKCS#11 workflows, showing that certificate authorities and signing services treat it as a supported path for Authenticode operations outside Microsoft tooling. ### Modes d'utilisation A typical use signs a PE or MSI file with a certificate and private key, optionally adds an Authenticode or RFC 3161 timestamp, and verifies the resulting signature. The README also documents PKCS#12 containers, PKCS#11 engines and providers, Windows CNG engine use, CAB Java signing compatibility, and operations for extracting or removing signatures. The tool is especially useful in CI/CD systems that build Windows artifacts on non-Windows hosts or store signing keys in HSM, token, PKCS#11, or provider-backed systems. ### Pourquoi les passionnés de paquets s'y intéressent osslsigncode is significant because it packages a Windows trust-format workflow in portable Unix-style form. It sits at the awkward intersection of OpenSSL, Windows Authenticode, timestamp authorities, hardware-backed keys, and reproducible release automation. ### Related projects - Microsoft signtool.exe is the proprietary reference tool that osslsigncode partially replaces. OpenSSL, cURL, PKCS#11 engines/providers, and certificate-authority timestamp services are its operational dependencies and ecosystem neighbors. ### Sources - - - - - ## Notes de sécurité narrow executable package without higher-risk signals. - **Risque Geiger:** vert / faible - narrow executable package without higher-risk signals ## Autres enregistrements de gestionnaires de paquets - Debian apt - osslsigncode - 2.9-2: normalized package name match | Debian stable package indexes: osslsigncode from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Authenticode signing tool | https://github.com/mtrojnar/osslsigncode - Nix - osslsigncode: normalized package name match | nixpkgs package indexes: pkgs/by-name/os/osslsigncode/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - Ubuntu apt - osslsigncode - 2.8-2: normalized package name match | Ubuntu 24.04 LTS package indexes: osslsigncode from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Authenticode signing tool | https://github.com/mtrojnar/osslsigncode - dnf - osslsigncode - 2.13-1.fc45: normalized package name match | Fedora Rawhide package metadata: osslsigncode from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | OpenSSL-based Authenticode signing for PE, CAB, CAT, MSI, APPX | https://github.com/mtrojnar/osslsigncode - zypper - osslsigncode - 2.13-1.4: normalized package name match | openSUSE Tumbleweed package metadata: osslsigncode from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Platform-independent tool for Authenticode signing of EXE/CAB files | https://github.com/mtrojnar/osslsigncode - MacPorts - osslsigncode: normalized package name match | MacPorts ports tree: devel/osslsigncode/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 - Scoop - main/osslsigncode: normalized package name match | Scoop official bucket manifest trees: bucket/osslsigncode.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 - winget - MichalTrojnara.osslsigncode: normalized package name match | Windows Package Manager source index: MichalTrojnara.osslsigncode from https://cdn.winget.microsoft.com/cache/source.msix ## Combined YAML source View the package source record on GitHub. [combined/osslsigncode.yml](https://github.com/mxcl/pkgdb/blob/main/combined/osslsigncode.yml) ## Sources - pkg.so package database - Geiger risk classifier - curated package history - pkgdb category and tag curation - external package-manager database matches - cross-ecosystem install command graph