Search code examples
javacode-signingsigningjar-signing

Code signing, do I need to generate a keystore?

I am trying sign an app using keytool, but I dont have a keystore file.

Do I need to generate this file myself or should I receive it from from code signing authority ? If so what files do I require to generate a keystore file ?

Thanks

Solution

  • The key store is a database for your keys. The process of "signing" an app (e.g. with jarsigner) is roughly the following:

    1. You create a private/public key pair with keytool.
    2. You then create a CSR (certificate signing request)
    3. A CA (certification authority) processes your request and gives you a certificate.
    4. You have to import the CA response into your keystore.

    You may create self signed certificate to get a feeling of the process. You may use openssl.