Signing Applets

The standard version of SoftArtisans JFile is signed by SoftArtisans, Inc. In the case of a hidden upload or download, JFile will display a confirmation dialog asking the user if he or she agrees to transfer the file.

With the SoftArtisans signed version of JFile, you also received the unsigned Java classes, allowing you to create an applet with your company signature, that will not display a transfer confirmation dialog.

SoftArtisans, Inc. disavows all responsibility for malicious use of the JFile applet to take files from a user's hard disk or to place files on a user's hard disk without their consent. By signing the applet with your signature, you assume full responsibility that the applet is used in an appropriate manner that respects the user's privacy and integrity.

To sign JFile you will need:

A Code Signing Certificate
To sign the applet, you must obtain a standard RSA certificate from a Certificate Authority such as Versign or Thawte.

A Code Signing Tool
To sign a .jar file for Sun JVM and Netscape JVM, you can use Jarsigner (shipped as part of the Java 2 SDK), or Netscape Signing Tool. To sign a .cab file for Microsoft VM, use Signcode.exe. To sign a .jar file for MacOS 9 and Internet Explorer, use Javakey.

JFile's Unsigned Class Files
The unsigned classes for a .jar file are in [JFileRoot]\lib\classes\Jar. The unsigned classes for a .cab file are in [JFileRoot]\lib\classes\Cab.

Jar Signing Steps

Obtain a standard RSA certificate from Verisign or Thawte.

Obtain a code signing tool. To sign a .jar file for Sun JVM and Netscape JVM, you can use Jarsigner (shipped as part of the Java 2 SDK), or Netscape Signing Tool. To sign a .cab file for Microsoft VM, use Signcode.exe. To sign a .jar file for MacOS 9 and Internet Explorer, use Javakey.

Locate JFile's unsigned class files. The unsigned classes for a .jar file are in [JFileRoot]\lib\classes\Jar. The unsigned classes for a .cab file are in [JFileRoot]\lib\classes\Cab.

From a command prompt, go to JFile's \lib\ directory, open build.bat, and edit the file according to your environment (this build.bat file is for jar signing).

From a command prompt, go to JFile's \lib\iecert\ directory, open build.bat, and edit the file according to your environment (this build.bat file is for cab signing).

To sign a .jar file for Sun JVM or Netscape JVM, follow the instructions in How to Sign Applets Using RSA-Signed Certificates.

To sign a .cab file for Microsoft VM, follow the instructions in How to Package Components for Internet Distribution.

To sign a .jar file for MacOS 9 and Internet Explorer, follow the instructions in Applet Signing with MRJ and Javakey.