In my scenario, the ‘Release’ private key that matches the .pem cert file is stored in a HSM and it’s non-exportable. I see that signapk.jar takes the -providerClass parameter (which in theory should allow to connect to HSM) but also requires you pass the .pk8 (PrivKey) as well as the .pem (PubKey). Is there a way for signapk.jar to use PrivKey in HW device? For ex. java jarsigner and apksigner both work with my HSM Crypto Provider can’t get signapk.jar to work the same.
For context I’m trying to follow this guide but with the keys hardware protected and not in .pk8 format.