科爾多瓦android版本發布jar驗證警告

Question

我正在使用cordova來構建android應用。 現在我想發布它，因此我已經使用https://developer.android.com/tools/publishing/app-signing.html生成了密鑰，

跑步時

jarsigner -verify -verbose -certs my_application.apk

我收到以下錯誤

在此輸出的開頭我得到

[certificate is valid from 9/11/15 3:29 PM to 27/3/43 3:29 PM]
      [CertPath not validated: Path does not chain with any of the trust anchors]

在輸出的末尾

jar verified.

Warning: 
This jar contains entries whose certificate chain is not validated.
This jar contains signatures that does not include a timestamp. Without a timestamp, users may not be able to validate this jar after the signer certificate's expiration date (2043-03-27) or after any future revocation date.

我在這里做什么？

Answer 1

要添加時間戳，您必須使用私鑰對應用進行簽名，如下所示

jarsigner -verbose -tsa http://timestamp.digicert.com -sigalg SHA1withRSA -digestalg SHA1 -keystore my-release-key.keystore my.apk my_alias

您必須將路徑添加到密鑰庫中才能使用正確的條目。

jarsigner -verify -keystore /path_to_my/key.keystore   my_application.apk