How to Sign Apps - Revision history

Mahong: Replaced content with "{{Migrating|https://smartpossdk.gitbook.io/cloudpossdk/faq/other-development/app-signing-process}}"

2024-04-08T03:16:32Z

Replaced content with "{{Migrating|https://smartpossdk.gitbook.io/cloudpossdk/faq/other-development/app-signing-process}}"

Show changes

Mahong at 09:14, 28 February 2024

2024-02-28T09:14:56Z

← Older revision		Revision as of 09:14, 28 February 2024
Line 94:		Line 94:

	=== Use Android apksigner to sign APK ===		=== Use Android apksigner to sign APK ===
	[https://developer.android.com/tools/apksigner apksigner tool].		Please read this [https://developer.android.com/tools/apksigner apksigner tool].

			For Example:
			Sign an APK using release.jks, which is the only key in the KeyStore:
			$ apksigner sign --ks release.jks app.apk
	=== Use command line tool to sign APK(Deprecated) ===		=== Use command line tool to sign APK(Deprecated) ===
	WizarPOS provides a Java signature tool to help developers sign APK. You can use it on the command line. Please download the [http://ftp.wizarpos.com/advanceSDK/SignatureTools_v2.5-81-g1e5b0ac.zip signature tool v2.5-81]. Make sure you have JRE 1.6 or later installed on your PC.		WizarPOS provides a Java signature tool to help developers sign APK. You can use it on the command line. Please download the [http://ftp.wizarpos.com/advanceSDK/SignatureTools_v2.5-81-g1e5b0ac.zip signature tool v2.5-81]. Make sure you have JRE 1.6 or later installed on your PC.

Mahong at 08:49, 28 February 2024

2024-02-28T08:49:09Z

← Older revision		Revision as of 08:49, 28 February 2024
Line 95:		Line 95:
	=== Use Android apksigner to sign APK ===		=== Use Android apksigner to sign APK ===
	[https://developer.android.com/tools/apksigner apksigner tool].		[https://developer.android.com/tools/apksigner apksigner tool].
	=== Use command line tool to sign APK ===		=== Use command line tool to sign APK(Deprecated) ===
	WizarPOS provides a Java signature tool to help developers sign APK. You can use it on the command line. Please download the [http://ftp.wizarpos.com/advanceSDK/SignatureTools_v2.5-81-g1e5b0ac.zip signature tool v2.5-81]. Make sure you have JRE 1.6 or later installed on your PC.		WizarPOS provides a Java signature tool to help developers sign APK. You can use it on the command line. Please download the [http://ftp.wizarpos.com/advanceSDK/SignatureTools_v2.5-81-g1e5b0ac.zip signature tool v2.5-81]. Make sure you have JRE 1.6 or later installed on your PC.

Mahong at 08:47, 28 February 2024

2024-02-28T08:47:51Z

← Older revision		Revision as of 08:47, 28 February 2024
Line 93:		Line 93:


			=== Use Android apksigner to sign APK ===
			[https://developer.android.com/tools/apksigner apksigner tool].
	=== Use command line tool to sign APK ===		=== Use command line tool to sign APK ===
	WizarPOS provides a Java signature tool to help developers sign APK. You can use it on the command line. Please download the [http://ftp.wizarpos.com/advanceSDK/SignatureTools_v2.5-81-g1e5b0ac.zip signature tool v2.5-81]. Make sure you have JRE 1.6 or later installed on your PC.		WizarPOS provides a Java signature tool to help developers sign APK. You can use it on the command line. Please download the [http://ftp.wizarpos.com/advanceSDK/SignatureTools_v2.5-81-g1e5b0ac.zip signature tool v2.5-81]. Make sure you have JRE 1.6 or later installed on your PC.

Simon no use: Simon moved page How to sign app to How to Sign Apps: Normalize the title

2024-01-07T20:44:40Z

Simon moved page How to sign app to How to Sign Apps: Normalize the title

← Older revision	Revision as of 20:44, 7 January 2024
(No difference)

Simon no use at 20:42, 7 January 2024

2024-01-07T20:42:02Z

← Older revision		Revision as of 20:42, 7 January 2024
Line 1:		Line 1:
	== APK ~~signature~~ and ~~verification~~ ==		== APK Signature and Verification Process ==
	~~In a standard~~ Android ~~system, all~~ applications ~~should~~ be signed before ~~they are installed~~ on ~~the~~ system. ~~Please~~ refer to [https://developer.android.com/studio/publish/app-signing.html Google's ~~resource~~] ~~for details~~.		=== Standard Android System Requirements ===
			* '''Application Signing:'''
	In ~~the wizarpos terminal, in~~ addition to ~~the normal~~ Android signature ~~check~~, ~~the system will also verify the APK signature through~~ the root certificate chain. ~~Terminal only allows APK~~ signed by root certificate or ~~its~~ child certificate ~~to be installed successfully~~. ~~So developers should apply for the~~ signing certificate issued by wizarPOS. ~~Please refer~~ to ~~this document~~ [http://ftp.wizarpos.com/wizarPOSDevCertificateApplyGuide_en.pdf wizarPOSDevCertificateApplyGuide_en.pdf] ~~to apply~~ for ~~signing~~ certificate.		** All applications must be signed before installation on a standard Android system.
			** For detailed instructions, refer to [https://developer.android.com/studio/publish/app-signing.html Google's official resources] on application signing.
	After receiving the CSR reply from wizarPOS, ~~please~~ import the certificate chain file into ~~the key store~~. ~~Then the APK~~ signed ~~by the~~ keystore ~~can~~ be ~~installed to the~~ wizarPOS ~~terminal~~.		=== wizarPOS Terminal Specifics ===
			* '''Enhanced Signature Checks:'''
	~~By default,~~ development mode ~~terminals~~ do not require additional signature verification. ~~So you can~~ use ADB to install and debug Android ~~programs~~ in development mode.		** In addition to standard Android signature verification, wizarPOS terminals conduct additional checks using the root certificate chain.
			** Only APKs signed with the root certificate or a child certificate are permitted for installation.
	The certificate chain issued by wizarpos can ~~also~~ be ~~updated to~~ the ~~customer~~'s own certificate chain~~, so that the~~ terminal ~~owner can fully~~ control the ~~terminal application~~.		* '''Obtaining a Signing Certificate:'''
			** Developers must acquire a signing certificate issued by wizarPOS.
			** Refer to [http://ftp.wizarpos.com/wizarPOSDevCertificateApplyGuide_en.pdf wizarPOSDevCertificateApplyGuide_en.pdf] for instructions on applying for this certificate.
			* '''Importing the Certificate Chain:'''
			** After receiving the CSR reply from wizarPOS, import the certificate chain file into your keystore.
			** APKs signed with this keystore will be installable on wizarPOS terminals.
			=== Development Mode Terminals ===
			* '''Relaxed Signature Requirements:'''
			** Terminals in development mode do not require the additional signature verification.
			** This allows for the use of ADB to install and debug Android applications in development mode.
			=== Custom Certificate Chains ===
			* '''Terminal Control:'''
			** The certificate chain issued by wizarpos can be replaced with the terminal owner's own certificate chain.
			** This enables terminal owners to have full control over the applications installed on their terminals.

	== How to sign APK ==		== How to sign APK ==

Mahong: /* Use command line tool to sign APK */

2023-06-28T08:39:26Z

Use command line tool to sign APK

← Older revision		Revision as of 08:39, 28 June 2023
Line 81:		Line 81:

	=== Use command line tool to sign APK ===		=== Use command line tool to sign APK ===
	WizarPOS provides a Java signature tool to help developers sign APK. You can use it on the command line. Please download the [http://ftp.wizarpos.com/advanceSDK/SignatureTools_v2.5-79-~~gf738bb7~~.zip signature tool v2.5-79]. Make sure you have JRE 1.6 or later installed on your PC.		WizarPOS provides a Java signature tool to help developers sign APK. You can use it on the command line. Please download the [http://ftp.wizarpos.com/advanceSDK/SignatureTools_v2.5-81-g1e5b0ac.zip signature tool v2.5-81]. Make sure you have JRE 1.6 or later installed on your PC.

	==== Run signature tool ====		==== Run signature tool ====
Line 89:		Line 89:
	Replace the real parameter value, and change the key password and store password to your real password.		Replace the real parameter value, and change the key password and store password to your real password.

	For Example: java -jar SignatureTools_v2.5-79-~~gf738bb7.jar~~ sign --keytype jks --apk bcare_wallet_beta_andorid6.apk --out bcare_wallet_beta_andorid6_signed3.apk --keystore E:\...\XXX.jks --alias XXX--keypass XXX --storepass XXX --zipalign		For Example: java -jar SignatureTools_v2.5-81-g1e5b0ac sign --keytype jks --apk bcare_wallet_beta_andorid6.apk --out bcare_wallet_beta_andorid6_signed3.apk --keystore E:\...\XXX.jks --alias XXX--keypass XXX --storepass XXX --zipalign --quiet
	* Use pk8：'''java -jar <File Path>/SignatureTools.jar sign --keytype pk8 --apk <File Path>/<in name>.apk --out <File Path>/<out name>.apk --keyfile <File Path>/private_pwd.pk8(With or Without password) --certs <File Path>/cert.x509_pwd.pem --keypass android(Optional) --storepass android(Optional) --sigAlg SHA1withRSA(SHA1withRSA/MD5withRSA/SHA256withRSA, Optional) --signatureScheme v2(v1/v2)'''		* Use pk8：'''java -jar <File Path>/SignatureTools.jar sign --keytype pk8 --apk <File Path>/<in name>.apk --out <File Path>/<out name>.apk --keyfile <File Path>/private_pwd.pk8(With or Without password) --certs <File Path>/cert.x509_pwd.pem --keypass android(Optional) --storepass android(Optional) --sigAlg SHA1withRSA(SHA1withRSA/MD5withRSA/SHA256withRSA, Optional) --signatureScheme v2(v1/v2)'''
	Replace the real parameter value, and change the key password and store password to your real password.		Replace the real parameter value, and change the key password and store password to your real password.
Line 119:		Line 119:
	\| --signatureScheme \|\| v1 or v2 or v1v2\|\| signature scheme		\| --signatureScheme \|\| v1 or v2 or v1v2\|\| signature scheme
	\|-		\|-
	\| --zipalign\|\| \|\|apk zipalign		\| --zipalign\|\| \|\| apk zipalign
			\|-
			\| --quiet\|\| \|\| suppress informational messages, only show warnings and errors.
	\|}		\|}

Mahong: /* Run signature tool */

2021-08-20T02:58:04Z

Run signature tool

← Older revision		Revision as of 02:58, 20 August 2021
Line 86:		Line 86:
	In PC, run the follow command:		In PC, run the follow command:

	* Use jks：'''java -jar <File Path>/SignatureTools.jar sign --keytype jks --apk <File Path>/<in name>.apk --out <File Path>/<out name>.apk --keystore <File Path>/<name>.jks --alias androiddebugkey --storepass wizarpos(Optional) --sigAlg SHA1withRSA(SHA1withRSA/MD5withRSA/SHA256withRSA, Optional) --signatureScheme v2(v1/v2) --zipalign'''		* Use jks：'''java -jar <File Path>/SignatureTools.jar sign --keytype jks --apk <File Path>/<in name>.apk --out <File Path>/<out name>.apk --keystore <File Path>/<name>.jks --alias androiddebugkey --storepass wizarpos([Optional]) --sigAlg SHA1withRSA(SHA1withRSA/MD5withRSA/SHA256withRSA, [Optional]) --signatureScheme v2(v1/v2,[Optional]) --zipalign'''
	Replace the real parameter value, and change the key password and store password to your real password.		Replace the real parameter value, and change the key password and store password to your real password.

Mahong: /* Use command line tool to sign APK */

2021-08-20T02:49:55Z

Use command line tool to sign APK

← Older revision		Revision as of 02:49, 20 August 2021
Line 81:		Line 81:

	=== Use command line tool to sign APK ===		=== Use command line tool to sign APK ===
	WizarPOS provides a Java signature tool to help developers sign APK. You can use it on the command line. Please download the [http://ftp.wizarpos.com/~~device~~/SignatureTools_v2.5-30-~~gdc17c35~~.~~jar~~ signature tool v2.5-30]. Make sure you have JRE 1.6 or later installed on your PC.		WizarPOS provides a Java signature tool to help developers sign APK. You can use it on the command line. Please download the [http://ftp.wizarpos.com/advanceSDK/SignatureTools_v2.5-79-gf738bb7.zip signature tool v2.5-79]. Make sure you have JRE 1.6 or later installed on your PC.

	==== Run signature tool ====		==== Run signature tool ====
Line 89:		Line 89:
	Replace the real parameter value, and change the key password and store password to your real password.		Replace the real parameter value, and change the key password and store password to your real password.

	For Example: java -jar SignatureTools_v2.5-30-~~gdc17c35~~.jar sign --keytype jks --apk bcare_wallet_beta_andorid6.apk --out bcare_wallet_beta_andorid6_signed3.apk --keystore E:\...\XXX.jks --alias XXX--keypass XXX --storepass XXX --zipalign		For Example: java -jar SignatureTools_v2.5-79-gf738bb7.jar sign --keytype jks --apk bcare_wallet_beta_andorid6.apk --out bcare_wallet_beta_andorid6_signed3.apk --keystore E:\...\XXX.jks --alias XXX--keypass XXX --storepass XXX --zipalign
	* Use pk8：'''java -jar <File Path>/SignatureTools.jar sign --keytype pk8 --apk <File Path>/<in name>.apk --out <File Path>/<out name>.apk --keyfile <File Path>/private_pwd.pk8(With or Without password) --certs <File Path>/cert.x509_pwd.pem --keypass android(Optional) --storepass android(Optional) --sigAlg SHA1withRSA(SHA1withRSA/MD5withRSA/SHA256withRSA, Optional) --signatureScheme v2(v1/v2)'''		* Use pk8：'''java -jar <File Path>/SignatureTools.jar sign --keytype pk8 --apk <File Path>/<in name>.apk --out <File Path>/<out name>.apk --keyfile <File Path>/private_pwd.pk8(With or Without password) --certs <File Path>/cert.x509_pwd.pem --keypass android(Optional) --storepass android(Optional) --sigAlg SHA1withRSA(SHA1withRSA/MD5withRSA/SHA256withRSA, Optional) --signatureScheme v2(v1/v2)'''
	Replace the real parameter value, and change the key password and store password to your real password.		Replace the real parameter value, and change the key password and store password to your real password.

Mahong at 03:17, 22 April 2021

2021-04-22T03:17:26Z

← Older revision		Revision as of 03:17, 22 April 2021
Line 2:		Line 2:
	In a standard Android system, all applications should be signed before they are installed on the system. Please refer to [https://developer.android.com/studio/publish/app-signing.html Google's resource] for details.		In a standard Android system, all applications should be signed before they are installed on the system. Please refer to [https://developer.android.com/studio/publish/app-signing.html Google's resource] for details.

	In the wizarpos terminal, in addition to the normal Android signature check, the system will also verify the APK signature through the root certificate chain. Terminal only allows APK signed by root certificate or its child certificate to be installed successfully. So developers should apply for the signing certificate issued by wizarPOS. Please refer to this document [~~ftp~~://~~sdkuser:wizsdkar@~~ftp.wizarpos.com/wizarPOSDevCertificateApplyGuide_en.pdf wizarPOSDevCertificateApplyGuide_en.pdf] to apply for signing certificate.		In the wizarpos terminal, in addition to the normal Android signature check, the system will also verify the APK signature through the root certificate chain. Terminal only allows APK signed by root certificate or its child certificate to be installed successfully. So developers should apply for the signing certificate issued by wizarPOS. Please refer to this document [http://ftp.wizarpos.com/wizarPOSDevCertificateApplyGuide_en.pdf wizarPOSDevCertificateApplyGuide_en.pdf] to apply for signing certificate.

	After receiving the CSR reply from wizarPOS, please import the certificate chain file into the key store. Then the APK signed by the keystore can be installed to the wizarPOS terminal.		After receiving the CSR reply from wizarPOS, please import the certificate chain file into the key store. Then the APK signed by the keystore can be installed to the wizarPOS terminal.
Line 81:		Line 81:

	=== Use command line tool to sign APK ===		=== Use command line tool to sign APK ===
	WizarPOS provides a Java signature tool to help developers sign APK. You can use it on the command line. Please download the [~~ftp~~://~~sdkuser:wizsdkar@~~ftp.wizarpos.com/device/SignatureTools_v2.5-30-gdc17c35.jar signature tool v2.5-30]. Make sure you have JRE 1.6 or later installed on your PC.		WizarPOS provides a Java signature tool to help developers sign APK. You can use it on the command line. Please download the [http://ftp.wizarpos.com/device/SignatureTools_v2.5-30-gdc17c35.jar signature tool v2.5-30]. Make sure you have JRE 1.6 or later installed on your PC.

	==== Run signature tool ====		==== Run signature tool ====