How to Apply App Certificates
Overview
In WizarPOS terminals, app installation requires APK signature verification through the root certificate chain, in addition to the standard Android signature check. Only APKs signed with the root certificate or a child certificate are permitted. Developers must obtain a signing certificate from WizarPOS. Refer to wizarPOSDevCertificateApplyGuide_en.pdf for detailed application procedures.
Prerequisites
- A PC with Java Development Kit (JDK) installed.
- Use the 'keytool' command in the JDK.
Steps to Generate a Private Keystore
keytool -genkeypair -keystore demo.jks -keyalg RSA -keysize 2048 -alias androiddebugkey -dname "EMAILADDRESS=myname@abc.com, CN=MyName, OU=RD, O=ABC company, L=Shanghai, ST=Shanghai, C=CN"
- Ensure the domain name reflects your company's actual information.
| Field | Value | Description |
|---|---|---|
| CN | Common name | developer name or project name |
| OU | Organization unit | Department name |
| O | Organization | Company name |
| L | Locality name | |
| ST | state or province name | |
| C | Country name codes | Country_Name_Codes |
- Set the 'EMAILADDRESS' to your company's official email.
- For use in Eclipse as a custom debug keystore, set the alias to “androiddebugkey” and password to “android”. Otherwise, choose any alias and password.
Generating and Sending CSR (Certificate Signing Request)
- Export CSR:
- Follow the standard procedure to generate a CSR using keytool.
keytool -certreq -keystore demo.jks -alias androiddebugkey > demo.csr
- Submit CSR to WizarPOS:
- Email the CSR with the following details:
- Sales Person: Name of your WizarPOS contact.
- Company Name: Your company's name.
- Attachment: Include the CSR file.
- Send to: WizarPOS sales staff (add first), support@wizarpos.com, techsupport@wizarpos.com.
- Email the CSR with the following details:
Import the Certificate Chain
Save the WizarPOS reply (in *.crt or *.pem format) in the same folder as your keystore file.:
keytool -importcert -keystore demo.jks -file file-name-of-CSR-reply -alias androiddebugkey
- Store the Certificate File:
- Save the *.pem file from WizarPOS's reply in the same directory as your keystore (jks) file. The filename will be as specified in the WizarPOS reply, referred to here as 'file-name-of-CSR-reply'.
- Import the Certificate Chain:
- Use the appropriate tool to import the certificate chain file into your keystore.
- During the import process, when prompted to trust the certificate, select "Yes" or the equivalent affirmative option in your language.
FAQ
Keytool Access
- Location: 'keytool.exe' is found in the JRE directory, typically 'XXX/Java/jreXXX/bin'.
- Usage:
- If the 'JAVA_HOME' environment variable is set, 'keytool' can be run from any directory.
- Without 'JAVA_HOME' set, you must navigate to the JRE directory to execute 'keytool' commands.
Resolving Keysize Issues during Keypair Generation
- Solution:
- Download the Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files for your Java version:
- Copy 'local_policy.jar' and 'US_export_policy.jar' into '$JAVA_HOME/jre/lib/security'.
CSR (Certificate Signing Request) Validation
- Procedure:
- Open the exported CSR in Notepad.
- A valid CSR begins with "-----BEGIN NEW CERTIFICATE REQUEST-----" and ends with "-----END NEW CERTIFICATE REQUEST-----", with content in between.
- If the CSR contains only an error message, address the specified issue as per the message.
Handling Expired Certificates
- Renewal Process:
- Email the expired certificate to support@wizarpos.com for renewal.
- WizarPOS support will send back the renewed certificate.
- Import the renewed certificate into the keystore that holds the expired certificate.
Country Name Codes
https://www.digicert.com/kb/ssl-certificate-country-codes.htm
List of 2 letter country codes.
- AF - Afghanistan
- AX - Aland Islands
- AL - Albania
- DZ - Algeria
- AS - American Samoa
- AD - Andorra
- AO - Angola
- AI - Anguilla
- AQ - Antarctica
- AG - Antigua and Barbuda
- AR - Argentin a
- AM - Armenia
- AW - Aruba
- AC - Ascension Island
- AU - Australia
- AT - Austria
- AZ - Azerbaijan
- BS - Bahamas
- BH - Bahrain
- BB - Barbados
- BD - Bangladesh
- BY - Belarus
- BE - Belgium
- BZ - Belize
- BJ - Benin
- BM - Bermuda
- BT - Bhutan
- BW - Botswana
- BO - Bolivia
- BA - Bosnia and Herzegovin a
- BV - Bouvet Island
- BR - Brazil
- IO - British Indian Ocean Territory
- BN - Brunei Darussalam
- BG - Bulgaria
- BF - Burkin a Faso
- BI - Burundi
- KH - Cambodia
- CM - Cameroon
- CA - Canada
- CV - Cape Verde
- KY - Cayman Islands
- CF - Central African Republic
- TD - Chad
- CL - Chile
- CN - Chin a
- CX - Christmas Island
- CC - Cocos (Keeling) Islands
- CO - Colombia
- KM - Comoros
- CG - Congo
- CD - Congo, Democratic Republic
- CK - Cook Islands
- CR - Costa Rica
- CI - Cote D'Ivoire (Ivory Coast)
- HR - Croatia (Hrvatska)
- CU - Cuba
- CY - Cyprus
- CZ - Czech Republic
- CS - Czechoslovakia (former)
- DK - Denmark
- DJ - Djibouti
- DM - Dominica
- DO - Dominican Republic
- TP - East Timor
- EC - Ecuador
- EG - Egypt
- SV - El Salvador
- GQ - Equatorial Guinea
- ER - Eritrea
- EE - Estonia
- ET - Ethiopia
- FK - Falkland Islands (Malvin as)
- FO - Faroe Islands
- FJ - Fiji
- FI - Finland
- FR - France
- FX - France, Metropolitan
- GF - French Guiana
- PF - French Polynesia
- TF - French Southern Territories
- MK - F.Y.R.O.M. (Macedonia)
- GA - Gabon
- GM - Gambia
- GE - Georgia
- DE - Germany
- GH - Ghana
- GI - Gibraltar
- GB - Great Britain (UK)
- GR - Greece
- GL - Greenland
- GD - Grenada
- GP - Guadeloupe
- GU - Guam
- GT - Guatemala
- GN - Guinea
- GW - Guinea-Bissau
- GY - Guyana
- HT - Haiti
- HM - Heard and McDonald Islands
- HN - Honduras
- HK - Hong Kong
- HU - Hungary
- IS - Iceland
- IN - India
- ID - Indonesia
- IR - Iran
- IQ - Iraq
- IE - Ireland
- IL - Israel
- IM - Isle of Man
- IT - Italy
- JE - Jersey
- JM - Jamaica
- JP - Japan
- JO - Jordan
- KZ - Kazakhstan
- KE - Kenya
- KI - Kiribati
- KP - Korea (North)
- KR - Korea (South)
- KW - Kuwait
- KG - Kyrgyzstan
- LA - Laos
- LV - Latvia
- LB - Lebanon
- LI - Liechtenstein
- LR - Liberia
- LY - Libya
- LS - Lesotho
- LT - Lithuania
- LU - Luxembourg
- MO - Macau
- MG - Madagascar
- MW - Malawi
- MY - Malaysia
- MV - Maldives
- ML - Mali
- MT - Malta
- MH - Marshall Islands
- MQ - Martinique
- MR - Mauritania
- MU - Mauritius
- YT - Mayotte
- MX - Mexico
- FM - Micronesia
- MD - Moldova
- MC - Monaco
- ME - Montenegro
- MS - Montserrat
- MA - Morocco
- MZ - Mozambique
- MM - Myanmar
- NA - Namibia
- NR - Nauru
- NP - Nepal
- NL - Netherlands
- AN - Netherlands Antilles
- NT - Neutral Zone
- NC - New Caledonia
- NZ - New Zealand (Aotearoa)
- NI - Nicaragua
- NE - Niger
- NG - Nigeria
- NU - Niue
- NF - Norfolk Island
- MP - Northern Mariana Islands
- NO - Norway
- OM - Oman
- PK - Pakistan
- PW - Palau
- PS - Palestinian Territory, Occupied
- PA - Panama
- PG - Papua New Guinea
- PY - Paraguay
- PE - Peru
- PH - Philippines
- PN - Pitcairn
- PL - Poland
- PT - Portugal
- PR - Puerto Rico
- QA - Qatar
- RE - Reunion
- RO - Romania
- RU - Russian Federation
- RW - Rwanda
- GS - S. Georgia and S. Sandwich Isles.
- KN - Saint Kitts and Nevis
- LC - Saint Lucia
- VC - Saint Vincent & the Grenadines
- WS - Samoa
- SM - San Marino
- ST - Sao Tome and Principe
- SA - Saudi Arabia
- SN - Senegal
- RS - Serbia
- SC - Seychelles
- SL - Sierra Leone
- SG - Singapore
- SI - Slovenia
- SK - Slovak Republic
- SB - Solomon Islands
- SO - Somalia
- ZA - South Africa
- GS - S. Georgia and S. Sandwich Isles.
- ES - Spain
- LK - Sri Lanka
- SH - St. Helena
- PM - St. Pierre and Miquelon
- SD - Sudan
- SR - Surin ame
- SJ - Svalbard & Jan Mayen Islands
- SZ - Swaziland
- SE - Sweden
- CH - Switzerland
- SY - Syria
- TW - Taiwan
- TJ - Tajikistan
- TZ - Tanzania
- TH - Thailand
- TG - Togo
- TK - Tokelau
- TO - Tonga
- TT - Trinidad and Tobago
- TN - Tunisia
- TR - Turkey
- TM - Turkmenistan
- TC - Turks and Caicos Islands
- TV - Tuvalu
- UG - Uganda
- UA - Ukraine
- AE - United Arab Emirates
- UK - United Kingdom
- US - United States
- UM - US Minor Outlying Islands
- UY - Uruguay
- SU - USSR (former)
- UZ - Uzbekistan
- VU - Vanuatu
- VA - Vatican City State (Holy See)
- VE - Venezuela
- VN - Viet Nam
- VG - British Virgin Islands
- VI - Virgin Islands (U.S.)
- WF - Wallis and Futuna Islands
- EH - Western Sahara
- YE - Yemen
- YU - Yugoslavia (former)
- ZM - Zambia
- (ZR - Zaire) - See CD Congo, Democratic Republic
- ZW - Zimbabwe