Automatically sign an apk with the Android test certificate. The public and private keys are embedded within the jar.
Building:
./build.sh
Testing:
./test.sh
sign my.apk
my.s.apk
is created next to my.apk
sign my.apk --override
my.apk
is replaced with a signed version
Verify signature.
jarsigner -verify my.s.apk
New releases are published to GitHub automatically by CI agent.
It is only necessary to push a new version tag to master
:
git tag -a 1.0 -m 1.0
git push --tags origin master
git push --tags remote master
Released under the Apache 2.0 License (the same as Android's SignApk.java).
https://github.com/android/platform_build/blob/master/tools/signapk/SignApk.java
http://androidxref.com/4.1.1/xref/build/tools/signapk/
http://androidxref.com/4.1.1/xref/build/tools/signapk/test/run
http://androidxref.com/4.1.1/xref/cts/tests/assets/otacerts.zip
http://androidxref.com/4.1.1/xref/external/quake/tools/packagesharedlib#11
http://androidxref.com/4.1.1/raw/build/target/product/security/testkey.pk8
http://androidxref.com/4.1.1/xref/build/target/product/security/
The following commands are equivalent.
sign my.apk
java -classpath sign.jar orig.SignApk testkey.x509.pem testkey.pk8 my.apk my.s.apk
java -jar SignApk.jar testkey.x509.pem testkey.pk8 my.apk my.s.apk
ApkSign by Panxiaobo. dex2jar's ApkSign has many dependencies and does not fit into one source file. While the name ApkSign
is similar to apks
, no source from dex2jar is used in this project.
Tiny Sign by Panxiaobo. Simple jar signing that can run on Android.