pkg.soopen package index

brew / 排名 2754

使用 Homebrew, apt, dnf, MacPorts, Nix, zypper, scoop, winget 安装 osslsigncode

查看 osslsigncode 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

安装命令安全说明

安装

其他安装命令

macOS

Homebrew已验证 · 100%
brew install osslsigncode

local Homebrew formula metadata

MacPorts已验证 · 94%
sudo port install osslsigncode

MacPorts ports tree · devel/osslsigncode/Portfile · 来源: api.github.com

Linux

Debian apt已验证 · 92%
sudo apt install osslsigncode

Debian stable package indexes · osslsigncode · 来源: deb.debian.org

Fedora dnf已验证 · 92%
sudo dnf install osslsigncode

Fedora Rawhide package metadata · osslsigncode · 来源: dl.fedoraproject.org

Nix已验证 · 92%
nix profile install nixpkgs#osslsigncode

nixpkgs package indexes · pkgs/by-name/os/osslsigncode/package.nix · 来源: api.github.com

openSUSE zypper已验证 · 92%
sudo zypper install osslsigncode

openSUSE Tumbleweed package metadata · osslsigncode · 来源: download.opensuse.org

Windows

Scoop已验证 · 92%
scoop install main/osslsigncode

Scoop official bucket manifest trees · bucket/osslsigncode.json · 来源: api.github.com

Windows Package Manager已验证 · 92%
winget install --id MichalTrojnara.osslsigncode -e

Windows Package Manager source index · MichalTrojnara.osslsigncode · 来源: cdn.winget.microsoft.com

概览

软件包摘要

OpenSSL based Authenticode signing for PE/MSI/Java CAB files

命令和别名

  • osslsigncode

历史

项目历史与用法

osslsigncode is an OpenSSL- and cURL-based command-line implementation of Authenticode signing, timestamping, verification, removal, and extraction for Windows-oriented file formats such as PE, CAB, CAT, MSI, APPX, and selected script files.

项目历史

The project was created to avoid depending on Microsoft's `signtool.exe` and Windows CryptoAPI when signing Windows binaries from Unix-like build environments. Its README explains the origin plainly: binaries could be built with Wine on Linux, but signing with signtool failed because the necessary Windows APIs were not fully implemented there.

The codebase records a longer authorship chain than the GitHub namespace suggests. The main C source includes copyright attribution for Per Allansson for 2005-2015 and Michal Trojnara for 2018-2023, while the maintained GitHub repository is under mtrojnar and uses CMake-based builds.

采用历史

osslsigncode filled a practical gap for cross-platform release engineering: sign Windows installers and executables from Linux or macOS CI systems using OpenSSL-compatible key material. Its packaging across Homebrew, Debian/Ubuntu, Fedora, MacPorts, Nix, Scoop, winget, and openSUSE reflects that it is used by build and security pipelines rather than by end-user desktop workflows.

Vendor documentation from DigiCert includes osslsigncode in third-party signing-tool instructions for PKCS#11 workflows, showing that certificate authorities and signing services treat it as a supported path for Authenticode operations outside Microsoft tooling.

使用方式

A typical use signs a PE or MSI file with a certificate and private key, optionally adds an Authenticode or RFC 3161 timestamp, and verifies the resulting signature. The README also documents PKCS#12 containers, PKCS#11 engines and providers, Windows CNG engine use, CAB Java signing compatibility, and operations for extracting or removing signatures.

The tool is especially useful in CI/CD systems that build Windows artifacts on non-Windows hosts or store signing keys in HSM, token, PKCS#11, or provider-backed systems.

为什么软件包爱好者会关心

osslsigncode is significant because it packages a Windows trust-format workflow in portable Unix-style form. It sits at the awkward intersection of OpenSSL, Windows Authenticode, timestamp authorities, hardware-backed keys, and reproducible release automation.

Related projects

  • Microsoft signtool.exe is the proprietary reference tool that osslsigncode partially replaces. OpenSSL, cURL, PKCS#11 engines/providers, and certificate-authority timestamp services are its operational dependencies and ecosystem neighbors.

安全态势

风险级别：绿色

narrow executable package without higher-risk signals.

风险分类器

绿色 风险 · 低 置信度 · appliance

原因

  • narrow executable package without higher-risk signals

信号

  • metadata:no-higher-risk-signals

安装行为

  • 未记录 Homebrew bottle 元数据。

建议审查

在无人值守的代理使用前，请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。

可执行文件

已安装的可执行文件

命令类型暴露范围备注
osslsigncode可执行文件已索引可执行文件从本地可执行文件索引发现。

新鲜度

版本和新鲜度

这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。

页面生成时间2026-08-03
管理器版本2.14
管理器更新时间2026-07-21
本地数据未知
上游不可用
检测到的最新版本未检测到
  • OK没有生成新鲜度警告。

安装元数据

软件包元数据

软件包键brew:osslsigncode
版本2.14
软件包管理器Homebrew
主页https://github.com/mtrojnar/osslsigncode
仓库https://github.com/mtrojnar/osslsigncode
最后更新2026-07-21T00:23:43Z
Pulseupdated
Bottle未记录
服务未声明

源数据库匹配

其他软件包管理器记录

匹配项来自外部软件包管理器索引，并与本地 Automic Vault 软件包链接分开显示。

Debian apt95%

osslsigncode 2.9-2

Authenticode signing tool

https://github.com/mtrojnar/osslsigncode

sudo apt install osslsigncode
  • Section: otherosfs
  • Architecture: amd64
  • 3 依赖
  • normalized package name match
  • 匹配方式：Osslsigncode
Debian stable package indexes · deb.debian.org · Debian stable package indexes: osslsigncode from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix95%

osslsigncode

nix profile install nixpkgs#osslsigncode
  • normalized package name match
  • 匹配方式：Osslsigncode
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/os/osslsigncode/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
Ubuntu apt95%

osslsigncode 2.8-2

Authenticode signing tool

https://github.com/mtrojnar/osslsigncode

sudo apt install osslsigncode
  • Section: universe/otherosfs
  • Architecture: amd64
  • 4 依赖
  • normalized package name match
  • 匹配方式：Osslsigncode
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: osslsigncode from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
dnf95%

osslsigncode 2.13-1.fc45

OpenSSL-based Authenticode signing for PE, CAB, CAT, MSI, APPX

https://github.com/mtrojnar/osslsigncode

sudo dnf install osslsigncode
  • License: GPL-3.0-or-later
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: osslsigncode
  • 5 依赖
  • 1 提供
  • normalized package name match
  • 匹配方式：Osslsigncode
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: osslsigncode from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst
zypper95%

osslsigncode 2.13-1.4

Platform-independent tool for Authenticode signing of EXE/CAB files

https://github.com/mtrojnar/osslsigncode

sudo zypper install osslsigncode
  • License: GPL-3.0-only
  • Category: Productivity/Security
  • Architecture: x86_64
  • Source Package: osslsigncode
  • 4 依赖
  • 1 提供
  • normalized package name match
  • 匹配方式：Osslsigncode
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: osslsigncode from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst
MacPorts95%

osslsigncode

sudo port install osslsigncode
  • normalized package name match
  • 匹配方式：Osslsigncode
MacPorts ports tree · api.github.com · MacPorts ports tree: devel/osslsigncode/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
Scoop95%

main/osslsigncode

scoop install main/osslsigncode
  • normalized package name match
  • 匹配方式：Osslsigncode
Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/osslsigncode.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1
winget95%

MichalTrojnara.osslsigncode

winget install --id MichalTrojnara.osslsigncode -e
  • normalized package name match
  • 匹配方式：Osslsigncode
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: MichalTrojnara.osslsigncode from https://cdn.winget.microsoft.com/cache/source.msix

软件包图谱

链接来自本地软件包关系图、补充数据、依赖边、生态匹配和软件包 hub 归属。

来源线索

由仓库数据生成

此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。

使用的来源

  • Geiger risk classifier
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • pkg.so package database
  • pkgdb category and tag curation