Skip to content

Instantly share code, notes, and snippets.

@efleurine

efleurine/android-generate-keystores.md

Forked from henriquemenezes/android-generate-keystores.md
Created March 14, 2018 17:04
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save efleurine/1afd793c91400a46a45552a112673175 to your computer and use it in GitHub Desktop.
Save efleurine/1afd793c91400a46a45552a112673175 to your computer and use it in GitHub Desktop.
Download ZIP
Android: Generate Release/Debug Keystores
Raw
android-generate-keystores.md

Android: Generate Release/Debug Keystores

Generate Keystores

Debug Keystore

$ keytool -genkey -v -keystore debug.keystore -storepass android -alias androiddebugkey -keypass android -keyalg RSA -keysize 2048 -validity 10000 -dname "C=US, O=Android, CN=Android Debug"

A debug keystore which is used to sign an Android app during development needs a specific alias and password combination as dictated by Google.

  • Keystore name: "debug.keystore"
  • Keystore password: "android"
  • Key alias: "androiddebugkey"
  • Key password: "android"
  • CN: "CN=Android Debug,O=Android,C=US"

Release Keystore

$ keytool -genkey -v -keystore release.keystore -alias alias_name -keyalg RSA -keysize 2048 -validity 10000

Get Key Fingerprints

To get the keystore certificate fingerprints you can do:

keytool -list -v -keystore [keystore path] -alias [alias-name] -storepass [storepass] -keypass [keypass]

Ex.:

$ keytool -list -v -keystore debug.keystore -alias androiddebugkey -storepass android -keypass android

or

$ keytool -list -v -keystore debug.keystore

Verify APK signature

$ jarsigner -verify -verbose -certs my_application.apk

Verify APK keystore signature

  1. Unzip apk
  2. Get MD5 and SHA1 of certificate of APK: $ keytool -printcert -file ./META-INF/ANDROID_.RSA
  3. Get MD5 and SHA1 of keystore: $ keytool -list -keystore signing-key.keystore
  4. Compare MD5/SHA1 and if they are the same, so the APK was signed with signing-key.keystore.

or

Using gradle:

$ ./gradlew signingReport

Reference

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment