What is Authenticode equivalent for .NET Core on Linux?

user_6305105 0
Viewed 253

On Windows, there is Authenticode to sign .NET Core / .NET 5 assemblies (please note that I am not referring to Strong Name Signing which is different). This prevents tampering and guarantees authenticity.

I am new to .NET Core on Linux. What is the equivalent of Authenticode signing on Linux for .NET Core? Since Authenticode signing is part of the Windows SDK (and not .NET Core) it is not available on Linux. Ideally there is some widely used convention for this.

Have looked around extensively on SO and online and have not been able to find anything useful or definitive. Any guidance would be greatly appreciated.

authenticode .net-core code-signing linux
1 Answers

Executable code signing on Linux is typically done at the package repo level, not at the individual executable level.

One option, therefore, is to try getting your software into one of the major package repos for your chosen platform: APT, DNF, Homebrew…

For cases where that isn’t acceptable, you can set up your own repo and try to convince your users to install the repo, which in turn signs the packages delivered through it.

user_1424540
Related