# 使用 Homebrew, apt, dnf, MacPorts, Nix, zypper, scoop, winget 安装 osslsigncode 查看 osslsigncode 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。 ## 安装 ```sh sudo av install brew:osslsigncode ``` 其他安装命令: ### macOS - Homebrew (100%): ```sh brew install osslsigncode ``` 证据: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install osslsigncode ``` 证据: MacPorts ports tree: devel/osslsigncode/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - Debian apt (92%): ```sh sudo apt install osslsigncode ``` 证据: Debian stable package indexes: osslsigncode from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install osslsigncode ``` 证据: Fedora Rawhide package metadata: osslsigncode from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/210a2053c8e007daf9ae39c2a21daaed9b2ddd07d63ecffa597050361e73650c-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#osslsigncode ``` 证据: nixpkgs package indexes: pkgs/by-name/os/osslsigncode/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - zypper (92%): ```sh sudo zypper install osslsigncode ``` 证据: openSUSE Tumbleweed package metadata: osslsigncode from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst ### Windows - Scoop (92%): ```sh scoop install main/osslsigncode ``` 证据: Scoop official bucket manifest trees: bucket/osslsigncode.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 - winget (92%): ```sh winget install --id MichalTrojnara.osslsigncode -e ``` 证据: Windows Package Manager source index: MichalTrojnara.osslsigncode from https://cdn.winget.microsoft.com/cache/source.msix ## 软件包事实 - **软件包键:** brew:osslsigncode - **软件包管理器:** Homebrew - **软件包管理器页面:** - **版本:** 2.14 - **来源摘要:** OpenSSL based Authenticode signing for PE/MSI/Java CAB files - **主页:** - **仓库:** - **许可证:** GPL-3.0-or-later - **源码归档:** - **最后更新:** 2026-07-21T00:23:43Z - **已生成:** 2026-08-04T22:13:35+00:00 ## 可执行文件 - osslsigncode (cli) - osslsigncode (别名) ## 依赖 - openssl@3 ## 构建依赖 - cmake ## macOS 提供的库 - curl - python ## 安装行为 - post-install 钩子: 未定义 - Bottle: 可用 于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## 版本和新鲜度 - 页面生成时间: 2026-08-04 - 管理器版本: 2.14 - 管理器更新时间: 2026-07-21 - 本地数据: OK - 上游仓库: https://github.com/mtrojnar/osslsigncode - 检测到的最新版本: 2.14 (当前) ## 项目历史与用法 osslsigncode is an OpenSSL- and cURL-based command-line implementation of Authenticode signing, timestamping, verification, removal, and extraction for Windows-oriented file formats such as PE, CAB, CAT, MSI, APPX, and selected script files. ### 项目历史 The project was created to avoid depending on Microsoft's `signtool.exe` and Windows CryptoAPI when signing Windows binaries from Unix-like build environments. Its README explains the origin plainly: binaries could be built with Wine on Linux, but signing with signtool failed because the necessary Windows APIs were not fully implemented there. The codebase records a longer authorship chain than the GitHub namespace suggests. The main C source includes copyright attribution for Per Allansson for 2005-2015 and Michal Trojnara for 2018-2023, while the maintained GitHub repository is under mtrojnar and uses CMake-based builds. ### 采用历史 osslsigncode filled a practical gap for cross-platform release engineering: sign Windows installers and executables from Linux or macOS CI systems using OpenSSL-compatible key material. Its packaging across Homebrew, Debian/Ubuntu, Fedora, MacPorts, Nix, Scoop, winget, and openSUSE reflects that it is used by build and security pipelines rather than by end-user desktop workflows. Vendor documentation from DigiCert includes osslsigncode in third-party signing-tool instructions for PKCS#11 workflows, showing that certificate authorities and signing services treat it as a supported path for Authenticode operations outside Microsoft tooling. ### 使用方式 A typical use signs a PE or MSI file with a certificate and private key, optionally adds an Authenticode or RFC 3161 timestamp, and verifies the resulting signature. The README also documents PKCS#12 containers, PKCS#11 engines and providers, Windows CNG engine use, CAB Java signing compatibility, and operations for extracting or removing signatures. The tool is especially useful in CI/CD systems that build Windows artifacts on non-Windows hosts or store signing keys in HSM, token, PKCS#11, or provider-backed systems. ### 为什么软件包爱好者会关心 osslsigncode is significant because it packages a Windows trust-format workflow in portable Unix-style form. It sits at the awkward intersection of OpenSSL, Windows Authenticode, timestamp authorities, hardware-backed keys, and reproducible release automation. ### Related projects - Microsoft signtool.exe is the proprietary reference tool that osslsigncode partially replaces. OpenSSL, cURL, PKCS#11 engines/providers, and certificate-authority timestamp services are its operational dependencies and ecosystem neighbors. ### 来源 - - - - - ## 安全说明 narrow executable package without higher-risk signals. - **Geiger 风险:** 绿色 / 低 - narrow executable package without higher-risk signals ## 源数据库详情 - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** osslsigncode - **Version Scheme:** 0 - **Revision:** 0 - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** stable ## 其他软件包管理器记录 - Debian apt - osslsigncode - 2.9-2: normalized package name match | Debian stable package indexes: osslsigncode from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Authenticode signing tool | https://github.com/mtrojnar/osslsigncode - Nix - osslsigncode: normalized package name match | nixpkgs package indexes: pkgs/by-name/os/osslsigncode/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - Ubuntu apt - osslsigncode - 2.8-2: normalized package name match | Ubuntu 24.04 LTS package indexes: osslsigncode from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Authenticode signing tool | https://github.com/mtrojnar/osslsigncode - dnf - osslsigncode - 2.13-1.fc45: normalized package name match | Fedora Rawhide package metadata: osslsigncode from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/210a2053c8e007daf9ae39c2a21daaed9b2ddd07d63ecffa597050361e73650c-primary.xml.zst | OpenSSL-based Authenticode signing for PE, CAB, CAT, MSI, APPX | https://github.com/mtrojnar/osslsigncode - zypper - osslsigncode - 2.13-1.4: normalized package name match | openSUSE Tumbleweed package metadata: osslsigncode from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Platform-independent tool for Authenticode signing of EXE/CAB files | https://github.com/mtrojnar/osslsigncode - MacPorts - osslsigncode: normalized package name match | MacPorts ports tree: devel/osslsigncode/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 - Scoop - main/osslsigncode: normalized package name match | Scoop official bucket manifest trees: bucket/osslsigncode.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 - winget - MichalTrojnara.osslsigncode: normalized package name match | Windows Package Manager source index: MichalTrojnara.osslsigncode from https://cdn.winget.microsoft.com/cache/source.msix ## 相关链接 - [Source-control packages](https://pkg.so/zh-hans/source-control-tools/) - Belongs to a source-control command family. - [Terminal utility packages](https://pkg.so/zh-hans/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Language runtime packages](https://pkg.so/zh-hans/language-runtime-packages/) - Matched language runtime, compiler, or interpreter metadata. - [Networking and protocol packages](https://pkg.so/zh-hans/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [openssl@3](https://pkg.so/zh-hans/brew/openssl-3/) - Runtime dependency declared by Homebrew. - [cmake](https://pkg.so/zh-hans/brew/cmake/) - Build dependency declared by Homebrew. - [jsign](https://pkg.so/zh-hans/brew/jsign/) - Shares pkgdb curated category or tags: authenticode, cli, code-signing, security, windows. - [easy-rsa](https://pkg.so/zh-hans/brew/easy-rsa/) - Shares pkgdb curated category or tags: cli, openssl, security. - [gnutls](https://pkg.so/zh-hans/brew/gnutls/) - Shares pkgdb curated category or tags: cli, security. - [krb5](https://pkg.so/zh-hans/brew/krb5/) - Shares pkgdb curated category or tags: cli, security. - [nettle](https://pkg.so/zh-hans/brew/nettle/) - Shares pkgdb curated category or tags: cli, security. - [libcap](https://pkg.so/zh-hans/brew/libcap/) - Shares pkgdb curated category or tags: cli, security. - [nss](https://pkg.so/zh-hans/brew/nss/) - Shares pkgdb curated category or tags: cli, security. - [pinentry](https://pkg.so/zh-hans/brew/pinentry/) - Shares pkgdb curated category or tags: cli, security. - [retdec](https://pkg.so/zh-hans/brew/retdec/) - Security-sensitive metadata or terminology overlaps. Shared terms: based, cli, code, openssl, openssl-3. - [cargo-geiger](https://pkg.so/zh-hans/brew/cargo-geiger/) - Security-sensitive metadata or terminology overlaps. Shared terms: cli, code, openssl, openssl-3, security. ## Combined YAML source View the package source record on GitHub. [combined/osslsigncode.yml](https://github.com/mxcl/pkgdb/blob/main/combined/osslsigncode.yml) ## 来源 - pkg.so package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - pkgdb category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph