diff --git a/debian/changelog b/debian/changelog
index ee1468085..527e42a7d 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -14,6 +14,7 @@ linux (4.5-1~exp2) UNRELEASED; urgency=medium
     as signatures will be packaged separately
     - debian/control: Add build-dependencies on libssl-dev, openssl
     - debian/copyright: Note that extract-cert and sign-file are under LGPL 2.1
+    - linux-kbuild: Add extract-cert and sign-file programs
   * certs: Set SYSTEM_TRUSTED_KEYS to my own personal certificate to support
     initial testing of signed modules
 
diff --git a/debian/rules.d/scripts/Makefile b/debian/rules.d/scripts/Makefile
index 63cc4be87..d735ecf03 100644
--- a/debian/rules.d/scripts/Makefile
+++ b/debian/rules.d/scripts/Makefile
@@ -1,8 +1,10 @@
 PROGS = \
 	conmakehash \
+	extract-cert \
 	kallsyms \
 	pnmtologo \
-	recordmcount
+	recordmcount \
+	sign-file
 
 DATA = \
 	Kbuild.include \
@@ -37,3 +39,4 @@ SUBDIRS = \
 include $(top_rulesdir)/Makefile.inc
 
 CPPFLAGS += -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64
+extract-cert sign-file: LDLIBS += -lcrypto