Question

I am trying sign an app using keytool, but I dont have a keystore file.

Do I need to generate this file myself or should I receive it from from code signing authority ?
If so what files do I require to generate a keystore file ?

Thanks

Answer 1

The key store is a database for your keys. The process of "signing" an app (e.g. with jarsigner) is roughly the following:

1. You create a private/public key pair with keytool.
2. You then create a CSR (certificate signing request)
3. A CA (certification authority) processes your request and gives you a certificate.
4. You have to import the CA response into your keystore.

You may create self signed certificate to get a feeling of the process. You may use openssl.