Cheap Code Signing with Your Thawte Freemail Certificate

As I am always loosing this, I better write it down.

There is nice way how to sign your jars using Thawte Freemail Certificate. I think it is fine for code given out for free.

<signjar keystore="your_keystore.p12"
         storetype="pkcs12"
         alias="your_alias"
         storepass="secret">
  <fileset dir="${client.deploy.dir}/lib">
        <include name="**/*" />
  </fileset>          
</signjar>

Step by step guide:

1. Ask Thawte for your certificate.
2. Download it to your Firefox.
3. Choose Edit/Preferences/Encryption/View Certificates/<select>/Backup (use PKCS12)
4. If you don't know your alias use this to list it:
   keytool -list -storetype pkcs12 -keystore your_keystore.p12
   

Enjoy!

P.