mtrojnar/osslsigncode

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

1079 stars · 152 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

osslsigncode is a small C tool that implements Microsoft Authenticode signing and timestamping, based on OpenSSL and cURL. It signs, verifies, timestamps, removes, and extracts signatures from PE, CAB, CAT, MSI, APPX files and various script formats, serving as a cross-platform alternative to signtool.exe.

Use cases

• sign windows executables on linux
• authenticode sign msi installer without windows
• timestamp a signed dll using openssl
• verify authenticode signature of an exe
• remove signature from a pe file
• sign powershell scripts from ci pipeline
• sign appx package on macos

When to choose

• you need to sign Windows binaries but don't have a Windows machine
• you want to automate Authenticode signing in Linux or macOS CI pipelines
• you need signature verification, removal, or extraction for PE/CAB/MSI/APPX files

When to avoid

• you already run signtool.exe on Windows and don't need cross-platform signing
• you need full Authenticode feature parity with Microsoft's signtool.exe
• you need to sign file formats other than PE, CAB, CAT, MSI, APPX, or supported scripts

Facets

cli-tool · maturity active

security cryptography cli developer-tools security developer-tools windows cross-platform cli authenticode code-signing openssl signtool timestamping pe-files msi appx command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="mtrojnar/osslsigncode")