OS Manuals

/usr/bin/jarsigner

Use the GraalVM 23 JVM as the default JVM with the JDK installed

From graalvm-23-ce-default-jdk 23.0.2-r8 (enterprise-packages), captured 2026-11-08 by running jarsigner --help (exit 0). permalink

Usage: jarsigner [options] jar-file alias
       jarsigner -verify [options] jar-file [alias...]
       jarsigner -version

[-keystore <url>]           keystore location

[-storepass <password>]     password for keystore integrity

[-storetype <type>]         keystore type

[-keypass <password>]       password for private key (if different)

[-certchain <file>]         name of alternative certchain file

[-sigfile <file>]           name of .SF/.DSA file

[-signedjar <file>]         name of signed JAR file

[-digestalg <algorithm>]    name of digest algorithm

[-sigalg <algorithm>]       name of signature algorithm

[-verify]                   verify a signed JAR file

[-version]                  print the program version

[-verbose[:suboptions]]     verbose output when signing/verifying.
                            suboptions can be all, grouped or summary

[-certs]                    display certificates when verbose and verifying

[-revCheck]                 Enable certificate revocation check

[-tsa <url>]                location of the Timestamping Authority

[-tsacert <alias>]          public key certificate for Timestamping Authority

[-tsapolicyid <oid>]        TSAPolicyID for Timestamping Authority

[-tsadigestalg <algorithm>] algorithm of digest data in timestamping request

[-internalsf]               include the .SF file inside the signature block

[-sectionsonly]             don't compute hash of entire manifest

[-protected]                keystore has protected authentication path

[-providerName <name>]      provider name

[-addprovider <name>        add security provider by name (e.g. SunPKCS11)
  [-providerArg <arg>]] ... configure argument for -addprovider

[-providerClass <class>     add security provider by fully-qualified class name
  [-providerArg <arg>]] ... configure argument for -providerClass

[-providerPath <list>]      provider classpath

[-strict]                   treat warnings as errors

[-conf <url>]               specify a pre-configured options file

[-? -h --help]              Print this help message

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.