############# certification files in AOSP source code
lake@localhost:/Google/git-aosp-AndroidN7.1.x$ ls -l build/target/product/security/
total 68
-rw-r--r-- 1 lake sys 260 Jul 9 02:10 Android.mk
-rw-r--r-- 1 lake sys 1675 Jul 9 02:10 media.pem
-rw-r--r-- 1 lake sys 1217 Jul 9 02:10 media.pk8
-rw-r--r-- 1 lake sys 1440 Jul 9 02:10 media.x509.pem
-rw-r--r-- 1 lake sys 1675 Jul 9 02:10 platform.pem
-rw-r--r-- 1 lake sys 1216 Jul 9 02:10 platform.pk8
-rw-r--r-- 1 lake sys 1440 Jul 9 02:10 platform.x509.pem
-rw-r--r-- 1 lake sys 3123 Jul 9 02:10 README
-rw-r--r-- 1 lake sys 1679 Jul 9 02:10 shared.pem
-rw-r--r-- 1 lake sys 1218 Jul 9 02:10 shared.pk8
-rw-r--r-- 1 lake sys 1440 Jul 9 02:10 shared.x509.pem
-rw-r--r-- 1 lake sys 1675 Jul 9 02:10 testkey.pem
-rw-r--r-- 1 lake sys 1216 Jul 9 02:10 testkey.pk8
-rw-r--r-- 1 lake sys 1440 Jul 9 02:10 testkey.x509.pem
-rw-r--r-- 1 lake sys 524 Jul 9 02:10 verity_key
-rw-r--r-- 1 lake sys 1219 Jul 9 02:10 verity.pk8
-rw-r--r-- 1 lake sys 1444 Jul 9 02:10 verity.x509.pem
lake@localhost:/Google/git-aosp-AndroidN7.1.x$
### OTA update.zip
#### update.zip only!!!!
java -Xmx2048m -Djava.library.path=out/host/linux-x86/lib64 -jar out/host/linux-x86/framework/signapk.jar -w build/target/product/security/testkey.x509.pem build/target/product/security/testkey.pk8 /tmp/tmp8hHnHI out/target/product/pnl101_edge/pnl101_edge-ota-eng.lake.zip
#### 3rd party apk with adb shell permission to install/uninstall application
<manifest xmlns:android="http://schemas.android.com/apk/res/android"
package="com.rtc.mysshd"
android:versionCode="1"
android:versionName="1.0"
android:sharedUserId="android.uid.shell"
>
lake@localhost:/Google/git-aosp-AndroidN7.1.x$ java -Xmx2048m -Djava.library.path=out/host/linux-x86/lib64 -jar out/host/linux-x86/framework/signapk.jar -w build/target/product/security/platform.x509.pem build/target/product/security/platform.pk8 ~/tmp/shell-Mysshd/app-debug.apk ~/tmp/shell-Mysshd/mysshd-shell.apk
lake@localhost:/Google/git-aosp-AndroidN7.1.x$
#### test shell permission in application shell
rk3399_firefly_box:/ $ id
uid=2000(shell) gid=2000(shell) groups=2000(shell),1015(sdcard_rw),1023(media_rw),3002(net_bt),3003(inet),3008(net_bt_stack),3010(wakelock),9997(everybody),42000(u0_a32000) context=u:r:shell:s0
rk3399_firefly_box:/ $
############# Intergrated sign/apk with Android Studio3.0.1
Get keytool from https://github.com/getfatday/keytool-importkeypair
On Linux
lake@localhost:~/Android/keytool-importkeypair/rtc-edge-gen2-rk3399$ ../keytool-importkeypair -k SignDemo.jks -p 123456 -pk8 platform.pk8 -cert platform.x509.pem -alias SignDemo
Importing "SignDemo" with SHA1 Fingerprint=41:79:1C:9B:8F:AF:15:E1:AC:D5:AA:F5:92:10:FD:42:46:7D:82:77
Entry for alias signdemo successfully imported.
Import command completed: 1 entries successfully imported, 0 entries failed or cancelled
Use SignDemo.jks in Android Studio/Build signed apk