Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

huawei App Signing Export and upload key and certificate

I would like to upload my app to the Huawei App Gallery. I am stuck at the App Signing process.

To perform App Signing, you will need to choose one of 2 options:

  1. Let AppGallery Connect create and manage app signature for you (recommended and applicable only to new app release)
  2. Export and upload key and certificate

Unfortunately, the instructions in Huawei App Gallery tells you to Obtain the pepk.jar file from the Internet or another legitimate source. but do not provide a link from which the PEPK Tool (pepk.jar) can be downloaded.

Where can I find the "legal channels" to download the tool?

EDIT: Huawei App Gallery Instructions for reference

  1. Obtain the pepk.jar file through the Internet or other legal channels.
  2. Run the following command to export and encrypt your private key and public key certificate into a ZIP file. Parameters in bold must be replaced as needed. Then, enter your storage location and key password as prompted.
java -jar pepk.jar --keystore test.jks --alias test --output=output.zip --encryptionkey=<some-encryption-key> --include-cert
  1. Upload the ZIP file containing the private key and public key certificate. (The ZIP file contains only certificate.pem and encryptedPrivateKey.)

SECOND EDIT: Google Play PEPK
When opting in for Google Play App Signing they provide a link to: PEPK tool and PEPK tool source code.

EDIT FOR REOPENING This is a serious question. The Huawei app gallery tells you to find the pepk.jar file from somewhere. A file which should handle your signing certificates so it's pretty important this one is not tampered with. So this question is not opinion based, but rather the question is, where can we get the official pepk.jar from google.

like image 261
NewestStackOverflowUser Avatar asked Jun 13 '20 08:06

NewestStackOverflowUser


People also ask

What is upload key certificate?

the upload key is a private key, since the upload key is used to sign APKs. the upload certificate does not contain a private key, because certificates in general contain public keys, not private keys (there are exceptions, sort of, but not in this case).

How do I get a new upload key?

Generate an upload key and keystoreIn the menu bar, click Build > Generate Signed Bundle/APK. In the Generate Signed Bundle or APK dialog, select Android App Bundle or APK and click Next. Below the field for Key store path, click Create new.

What is signing certificate in Android?

Android requires that all apps be digitally signed with a certificate before they can be installed. Android uses this certificate to identify the author of an app, and the certificate does not need to be signed by a certificate authority. Android apps often use self-signed certificates.


1 Answers

You can download it from here https://github.com/yongjhih/pepk

At the bottom of the readme.md

like image 112
danms07 Avatar answered Oct 13 '22 01:10

danms07