diff --git a/cmake/SignJar.cmake b/cmake/SignJar.cmake
new file mode 100644
index 0000000..00c9939
--- /dev/null
+++ b/cmake/SignJar.cmake
@@ -0,0 +1,20 @@
+if(NOT Java_PATH)
+  message(FATAL_ERROR "Java_PATH must be defined")
+endif()
+
+if(NOT JAR_FILE)
+  message(FATAL_ERROR "JAR_FILE must be defined")
+endif()
+
+set(KEYTOOL "${Java_PATH}/keytool")
+set(JARSIGNER "${Java_PATH}/jarsigner")
+
+file(REMOVE tigervnc.keystore)
+execute_process(COMMAND
+  ${KEYTOOL} -genkey -alias TigerVNC -keystore tigervnc.keystore -keyalg RSA
+    -storepass tigervnc -keypass tigervnc -validity 7300
+    -dname "CN=TigerVNC, OU=Software Development, O=The TigerVNC Project, L=Austin, S=Texas, C=US")
+execute_process(COMMAND
+  ${JARSIGNER} -keystore tigervnc.keystore
+    -storepass tigervnc -keypass tigervnc ${JAR_FILE} TigerVNC)
+file(REMOVE tigervnc.keystore)