First : Import the CAcert root cert here
command line example for pkcs12 codesigning (Java >=1.4):
[gr@gr gr]$ keytool -list -storetype pkcs12 -keystore keystore.p12
Tapez le mot de passe du Keystore : XXXXXXXXXXXX
Type Keystore : pkcs12
Fournisseur Keystore : SunJSSE
Votre Keystore contient 1 entrée(s)
guillaume frederic romagny's root ca id #2, 22 oct. 2005, keyEntry,
Empreinte du certificat (MD5) : 05:A7:69:72:B4:E7:91:2A:03:11:77:B6:02:AB:B6:25
[gr@gr gr]$ jarsigner -storetype pkcs12 -keystore keystore.p12 pasta.jar "guillaume frederic romagny's root ca id #2"
Enter Passphrase for keystore: XXXXXXXXXXXX
[gr@gr gr]$ jarsigner -verbose -verify -certs pasta.jar
2771 Sat Oct 22 20:20:54 CEST 2005 META-INF/MANIFEST.MF
2810 Sat Oct 22 20:44:00 CEST 2005 META-INF/GUILLAUM.SF
3660 Sat Oct 22 20:44:00 CEST 2005 META-INF/GUILLAUM.RSA
0 Sat Oct 22 20:20:20 CEST 2005 META-INF/
0 Sat Oct 22 17:43:22 CEST 2005 net/
0 Sat Oct 22 17:43:22 CEST 2005 net/grhq/
0 Sat Oct 22 17:43:22 CEST 2005 net/grhq/pastacountdown/
sm 573 Sat Oct 22 20:17:06 CEST 2005 Pasta.class
X.509, EMAILADDRESS=gr@grhq.net, CN=Guillaume Frederic ROMAGNY
[certificate is valid from 23/04/05 10:56 to 23/04/06 10:56]
X.509, EMAILADDRESS=support@cacert.org, CN=CA Cert Signing Authority, OU=http://www.cacert.org, O=Root CA
[certificate is valid from 30/03/03 14:29 to 29/03/33 14:29]
sm 141 Sat Oct 22 20:17:06 CEST 2005 java.policy.applet
X.509, EMAILADDRESS=gr@grhq.net, CN=Guillaume Frederic ROMAGNY
[certificate is valid from 23/04/05 10:56 to 23/04/06 10:56]
X.509, EMAILADDRESS=support@cacert.org, CN=CA Cert Signing Authority, OU=http://www.cacert.org, O=Root CA
[certificate is valid from 30/03/03 14:29 to 29/03/33 14:29]
sm 779 Sat Oct 22 17:43:22 CEST 2005 net/grhq/pastacountdown/About$1.class
X.509, EMAILADDRESS=gr@grhq.net, CN=Guillaume Frederic ROMAGNY
[certificate is valid from 23/04/05 10:56 to 23/04/06 10:56]
X.509, EMAILADDRESS=support@cacert.org, CN=CA Cert Signing Authority, OU=http://www.cacert.org, O=Root CA
[certificate is valid from 30/03/03 14:29 to 29/03/33 14:29]
sm 806 Sat Oct 22 17:43:22 CEST 2005 net/grhq/pastacountdown/About$2.class
X.509, EMAILADDRESS=gr@grhq.net, CN=Guillaume Frederic ROMAGNY
[certificate is valid from 23/04/05 10:56 to 23/04/06 10:56]
X.509, EMAILADDRESS=support@cacert.org, CN=CA Cert Signing Authority, OU=http://www.cacert.org, O=Root CA
[certificate is valid from 30/03/03 14:29 to 29/03/33 14:29]
sm 4314 Sat Oct 22 17:43:22 CEST 2005 net/grhq/pastacountdown/About.class
X.509, EMAILADDRESS=gr@grhq.net, CN=Guillaume Frederic ROMAGNY
[certificate is valid from 23/04/05 10:56 to 23/04/06 10:56]
X.509, EMAILADDRESS=support@cacert.org, CN=CA Cert Signing Authority, OU=http://www.cacert.org, O=Root CA
[certificate is valid from 30/03/03 14:29 to 29/03/33 14:29]
sm 5367 Fri Jan 28 20:52:36 CET 2005 net/grhq/pastacountdown/About.form
X.509, EMAILADDRESS=gr@grhq.net, CN=Guillaume Frederic ROMAGNY
[certificate is valid from 23/04/05 10:56 to 23/04/06 10:56]
X.509, EMAILADDRESS=support@cacert.org, CN=CA Cert Signing Authority, OU=http://www.cacert.org, O=Root CA
[certificate is valid from 30/03/03 14:29 to 29/03/33 14:29]
sm 807 Sat Oct 22 17:43:22 CEST 2005 net/grhq/pastacountdown/CountDown$1.class
X.509, EMAILADDRESS=gr@grhq.net, CN=Guillaume Frederic ROMAGNY
[certificate is valid from 23/04/05 10:56 to 23/04/06 10:56]
X.509, EMAILADDRESS=support@cacert.org, CN=CA Cert Signing Authority, OU=http://www.cacert.org, O=Root CA
[certificate is valid from 30/03/03 14:29 to 29/03/33 14:29]
sm 834 Sat Oct 22 17:43:22 CEST 2005 net/grhq/pastacountdown/CountDown$2.class
X.509, EMAILADDRESS=gr@grhq.net, CN=Guillaume Frederic ROMAGNY
[certificate is valid from 23/04/05 10:56 to 23/04/06 10:56]
X.509, EMAILADDRESS=support@cacert.org, CN=CA Cert Signing Authority, OU=http://www.cacert.org, O=Root CA
[certificate is valid from 30/03/03 14:29 to 29/03/33 14:29]
sm 834 Sat Oct 22 17:43:22 CEST 2005 net/grhq/pastacountdown/CountDown$3.class
X.509, EMAILADDRESS=gr@grhq.net, CN=Guillaume Frederic ROMAGNY
[certificate is valid from 23/04/05 10:56 to 23/04/06 10:56]
X.509, EMAILADDRESS=support@cacert.org, CN=CA Cert Signing Authority, OU=http://www.cacert.org, O=Root CA
[certificate is valid from 30/03/03 14:29 to 29/03/33 14:29]
sm 834 Sat Oct 22 17:43:22 CEST 2005 net/grhq/pastacountdown/CountDown$4.class
X.509, EMAILADDRESS=gr@grhq.net, CN=Guillaume Frederic ROMAGNY
[certificate is valid from 23/04/05 10:56 to 23/04/06 10:56]
X.509, EMAILADDRESS=support@cacert.org, CN=CA Cert Signing Authority, OU=http://www.cacert.org, O=Root CA
[certificate is valid from 30/03/03 14:29 to 29/03/33 14:29]
sm 834 Sat Oct 22 17:43:22 CEST 2005 net/grhq/pastacountdown/CountDown$5.class
X.509, EMAILADDRESS=gr@grhq.net, CN=Guillaume Frederic ROMAGNY
[certificate is valid from 23/04/05 10:56 to 23/04/06 10:56]
X.509, EMAILADDRESS=support@cacert.org, CN=CA Cert Signing Authority, OU=http://www.cacert.org, O=Root CA
[certificate is valid from 30/03/03 14:29 to 29/03/33 14:29]
sm 834 Sat Oct 22 17:43:22 CEST 2005 net/grhq/pastacountdown/CountDown$6.class
X.509, EMAILADDRESS=gr@grhq.net, CN=Guillaume Frederic ROMAGNY
[certificate is valid from 23/04/05 10:56 to 23/04/06 10:56]
X.509, EMAILADDRESS=support@cacert.org, CN=CA Cert Signing Authority, OU=http://www.cacert.org, O=Root CA
[certificate is valid from 30/03/03 14:29 to 29/03/33 14:29]
sm 834 Sat Oct 22 17:43:22 CEST 2005 net/grhq/pastacountdown/CountDown$7.class
X.509, EMAILADDRESS=gr@grhq.net, CN=Guillaume Frederic ROMAGNY
[certificate is valid from 23/04/05 10:56 to 23/04/06 10:56]
X.509, EMAILADDRESS=support@cacert.org, CN=CA Cert Signing Authority, OU=http://www.cacert.org, O=Root CA
[certificate is valid from 30/03/03 14:29 to 29/03/33 14:29]
sm 834 Sat Oct 22 17:43:22 CEST 2005 net/grhq/pastacountdown/CountDown$8.class
X.509, EMAILADDRESS=gr@grhq.net, CN=Guillaume Frederic ROMAGNY
[certificate is valid from 23/04/05 10:56 to 23/04/06 10:56]
X.509, EMAILADDRESS=support@cacert.org, CN=CA Cert Signing Authority, OU=http://www.cacert.org, O=Root CA
[certificate is valid from 30/03/03 14:29 to 29/03/33 14:29]
sm 7986 Sat Oct 22 17:43:22 CEST 2005 net/grhq/pastacountdown/CountDown.class
X.509, EMAILADDRESS=gr@grhq.net, CN=Guillaume Frederic ROMAGNY
[certificate is valid from 23/04/05 10:56 to 23/04/06 10:56]
X.509, EMAILADDRESS=support@cacert.org, CN=CA Cert Signing Authority, OU=http://www.cacert.org, O=Root CA
[certificate is valid from 30/03/03 14:29 to 29/03/33 14:29]
sm 6102 Fri Jan 28 20:52:36 CET 2005 net/grhq/pastacountdown/CountDown.form
X.509, EMAILADDRESS=gr@grhq.net, CN=Guillaume Frederic ROMAGNY
[certificate is valid from 23/04/05 10:56 to 23/04/06 10:56]
X.509, EMAILADDRESS=support@cacert.org, CN=CA Cert Signing Authority, OU=http://www.cacert.org, O=Root CA
[certificate is valid from 30/03/03 14:29 to 29/03/33 14:29]
sm 814 Sat Oct 22 17:43:22 CEST 2005 net/grhq/pastacountdown/ErreurDate$1.class
X.509, EMAILADDRESS=gr@grhq.net, CN=Guillaume Frederic ROMAGNY
[certificate is valid from 23/04/05 10:56 to 23/04/06 10:56]
X.509, EMAILADDRESS=support@cacert.org, CN=CA Cert Signing Authority, OU=http://www.cacert.org, O=Root CA
[certificate is valid from 30/03/03 14:29 to 29/03/33 14:29]
sm 841 Sat Oct 22 17:43:22 CEST 2005 net/grhq/pastacountdown/ErreurDate$2.class
X.509, EMAILADDRESS=gr@grhq.net, CN=Guillaume Frederic ROMAGNY
[certificate is valid from 23/04/05 10:56 to 23/04/06 10:56]
X.509, EMAILADDRESS=support@cacert.org, CN=CA Cert Signing Authority, OU=http://www.cacert.org, O=Root CA
[certificate is valid from 30/03/03 14:29 to 29/03/33 14:29]
sm 2896 Sat Oct 22 17:43:22 CEST 2005 net/grhq/pastacountdown/ErreurDate.class
X.509, EMAILADDRESS=gr@grhq.net, CN=Guillaume Frederic ROMAGNY
[certificate is valid from 23/04/05 10:56 to 23/04/06 10:56]
X.509, EMAILADDRESS=support@cacert.org, CN=CA Cert Signing Authority, OU=http://www.cacert.org, O=Root CA
[certificate is valid from 30/03/03 14:29 to 29/03/33 14:29]
sm 2121 Fri Jan 28 20:52:36 CET 2005 net/grhq/pastacountdown/ErreurDate.form
X.509, EMAILADDRESS=gr@grhq.net, CN=Guillaume Frederic ROMAGNY
[certificate is valid from 23/04/05 10:56 to 23/04/06 10:56]
X.509, EMAILADDRESS=support@cacert.org, CN=CA Cert Signing Authority, OU=http://www.cacert.org, O=Root CA
[certificate is valid from 30/03/03 14:29 to 29/03/33 14:29]
sm 800 Sat Oct 22 17:43:22 CEST 2005 net/grhq/pastacountdown/SetTimer$1.class
X.509, EMAILADDRESS=gr@grhq.net, CN=Guillaume Frederic ROMAGNY
[certificate is valid from 23/04/05 10:56 to 23/04/06 10:56]
X.509, EMAILADDRESS=support@cacert.org, CN=CA Cert Signing Authority, OU=http://www.cacert.org, O=Root CA
[certificate is valid from 30/03/03 14:29 to 29/03/33 14:29]
sm 827 Sat Oct 22 17:43:22 CEST 2005 net/grhq/pastacountdown/SetTimer$2.class
X.509, EMAILADDRESS=gr@grhq.net, CN=Guillaume Frederic ROMAGNY
[certificate is valid from 23/04/05 10:56 to 23/04/06 10:56]
X.509, EMAILADDRESS=support@cacert.org, CN=CA Cert Signing Authority, OU=http://www.cacert.org, O=Root CA
[certificate is valid from 30/03/03 14:29 to 29/03/33 14:29]
sm 827 Sat Oct 22 17:43:22 CEST 2005 net/grhq/pastacountdown/SetTimer$3.class
X.509, EMAILADDRESS=gr@grhq.net, CN=Guillaume Frederic ROMAGNY
[certificate is valid from 23/04/05 10:56 to 23/04/06 10:56]
X.509, EMAILADDRESS=support@cacert.org, CN=CA Cert Signing Authority, OU=http://www.cacert.org, O=Root CA
[certificate is valid from 30/03/03 14:29 to 29/03/33 14:29]
sm 827 Sat Oct 22 17:43:22 CEST 2005 net/grhq/pastacountdown/SetTimer$4.class
X.509, EMAILADDRESS=gr@grhq.net, CN=Guillaume Frederic ROMAGNY
[certificate is valid from 23/04/05 10:56 to 23/04/06 10:56]
X.509, EMAILADDRESS=support@cacert.org, CN=CA Cert Signing Authority, OU=http://www.cacert.org, O=Root CA
[certificate is valid from 30/03/03 14:29 to 29/03/33 14:29]
sm 5050 Sat Oct 22 17:43:22 CEST 2005 net/grhq/pastacountdown/SetTimer.class
X.509, EMAILADDRESS=gr@grhq.net, CN=Guillaume Frederic ROMAGNY
[certificate is valid from 23/04/05 10:56 to 23/04/06 10:56]
X.509, EMAILADDRESS=support@cacert.org, CN=CA Cert Signing Authority, OU=http://www.cacert.org, O=Root CA
[certificate is valid from 30/03/03 14:29 to 29/03/33 14:29]
sm 4436 Fri Jan 28 20:52:36 CET 2005 net/grhq/pastacountdown/SetTimer.form
X.509, EMAILADDRESS=gr@grhq.net, CN=Guillaume Frederic ROMAGNY
[certificate is valid from 23/04/05 10:56 to 23/04/06 10:56]
X.509, EMAILADDRESS=support@cacert.org, CN=CA Cert Signing Authority, OU=http://www.cacert.org, O=Root CA
[certificate is valid from 30/03/03 14:29 to 29/03/33 14:29]
sm 163 Fri Jan 28 20:52:36 CET 2005 net/grhq/pastacountdown/dontcare.mid
X.509, EMAILADDRESS=gr@grhq.net, CN=Guillaume Frederic ROMAGNY
[certificate is valid from 23/04/05 10:56 to 23/04/06 10:56]
X.509, EMAILADDRESS=support@cacert.org, CN=CA Cert Signing Authority, OU=http://www.cacert.org, O=Root CA
[certificate is valid from 30/03/03 14:29 to 29/03/33 14:29]
sm 6097 Fri Jan 28 20:52:36 CET 2005 net/grhq/pastacountdown/pasta.jpg
X.509, EMAILADDRESS=gr@grhq.net, CN=Guillaume Frederic ROMAGNY
[certificate is valid from 23/04/05 10:56 to 23/04/06 10:56]
X.509, EMAILADDRESS=support@cacert.org, CN=CA Cert Signing Authority, OU=http://www.cacert.org, O=Root CA
[certificate is valid from 30/03/03 14:29 to 29/03/33 14:29]
sm 1132 Sat Oct 22 17:43:22 CEST 2005 net/grhq/pastacountdown/testMID.class
X.509, EMAILADDRESS=gr@grhq.net, CN=Guillaume Frederic ROMAGNY
[certificate is valid from 23/04/05 10:56 to 23/04/06 10:56]
X.509, EMAILADDRESS=support@cacert.org, CN=CA Cert Signing Authority, OU=http://www.cacert.org, O=Root CA
[certificate is valid from 30/03/03 14:29 to 29/03/33 14:29]
s = signature was verified
m = entry is listed in manifest
k = at least one certificate was found in keystore
i = at least one certificate was found in identity scope
jar verified.