In my scenario, the ‘Release’ private key that matches the .pem cert file is stored in a HSM and it’s non-exportable. I see that signapk.jar takes the -providerClass parameter (which in theory should allow to connect to HSM) but also requires you pass the .pk8 (PrivKey) as well as the .pem (PubKey). Is there a way for signapk.jar to use PrivKey in HW device? For ex. java jarsigner and apksigner both work with my HSM Crypto Provider can’t get signapk.jar to work the same.

For context I’m trying to follow this guide but with the keys hardware protected and not in .pk8 format.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.