Skip to content
体验新版
项目
组织
正在加载...
登录
切换导航
打开侧边栏
白晓明η
Docs
提交
ae728c12
D
Docs
项目概览
白晓明η
/
Docs
与 Fork 源项目一致
Fork自
OpenHarmony / Docs
通知
1
Star
0
Fork
0
代码
文件
提交
分支
Tags
贡献者
分支图
Diff
Issue
0
列表
看板
标记
里程碑
合并请求
0
Wiki
0
Wiki
分析
仓库
DevOps
项目成员
Pages
D
Docs
项目概览
项目概览
详情
发布
仓库
仓库
文件
提交
分支
标签
贡献者
分支图
比较
Issue
0
Issue
0
列表
看板
标记
里程碑
合并请求
0
合并请求
0
Pages
分析
分析
仓库分析
DevOps
Wiki
0
Wiki
成员
成员
收起侧边栏
关闭侧边栏
动态
分支图
创建新Issue
提交
Issue看板
体验新版 GitCode,发现更多精彩内容 >>
提交
ae728c12
编写于
10月 23, 2020
作者:
D
dianhades
提交者:
NEEN
10月 23, 2020
浏览文件
操作
浏览文件
下载
电子邮件补丁
差异文件
!154 OpenHarmony Application Self-Signing README
* OpenHarmony Application Self-Signing README
上级
697a293c
变更
1
隐藏空白更改
内联
并排
Showing
1 changed file
with
42 addition
and
0 deletion
+42
-0
docs-en/readme/security-subsystem.md
docs-en/readme/security-subsystem.md
+42
-0
未找到文件。
docs-en/readme/security-subsystem.md
浏览文件 @
ae728c12
...
...
@@ -235,6 +235,48 @@ The application installation service of OpenHarmony verifies the application sig
![](
figures/en-us_image_0000001051562162.png
)
-
**OpenHarmony Application Self-Signing**
After an OpenHarmony application is compiled, it needs to be signed. The signature will be verified during the application installation.
Self-signing requires the application HAP, profile (
*.p7b), self-signed certificate (*
.cer), and public-private key pair (
*
.jks).
1.
The self-signed certificate and public-private key pair are stored in the tools repository.
2.
The application profile is stored in the code directory.
3.
The application HAP is generated during application compilation.
4.
The signing command is integrated into the compilation process. The following is an example:
java -jar hapsigntoolv2.jar sign -mode localjks -privatekey "OpenHarmony Software Signature" -inputFile camera.hap -outputFile signed_camera.hap -signAlg SHA256withECDSA -keystore OpenHarmony.jks -keystorepasswd 123456 -keyaliaspasswd 123456 -profile camera_release.p7b -certpath OpenHarmony.cer -profileSigned 1
Key fields:
-jar: signing tool, which is hapsigntoolv2.jar stored in the tools directory
-mode: local signature flag, which is fixed at localjks
-privatekey: alias of the public-private key pair, which is OpenHarmony Software Signature
-inputFile: application to be signed
-outputFile: signed application
-signAlg: signing algorithm, which is fixed at SHA256withECDSA
-keystore: public-private key pair used for signing the application
-keystorepasswd: password of the public-private key pair, which is 123456
-keyaliaspasswd: password of the public-private key pair alias, which is 123456
-profile: application profile, which is stored in the code directory
-certpath: self-signed certificate
-profileSigned: whether the signing block contains the profile, which is fixed at 1
## Repositories Involved<a name="section1665013282177"></a>
security
\_
services
\_
app
\_
verify
...
...
编辑
预览
Markdown
is supported
0%
请重试
或
添加新附件
.
添加附件
取消
You are about to add
0
people
to the discussion. Proceed with caution.
先完成此消息的编辑!
取消
想要评论请
注册
或
登录