1// Base configuration 2// 3// Location of signtool.jar 4 5config.signtool=../hapsigntool/hap_sign_tool/build/libs/hap-sign-tool.jar 6 7// All products would be put into folder 8config.targetDir=result 9 10// Common configuration, will be overwrite by detail config 11common.keystoreFile=ohtest.jks 12common.keystorePwd=123456 13common.keyAlg=ECC 14common.keySize=NIST-P-256 15common.signAlg=SHA256withECDSA 16common.validity=365 17common.outForm=certChain 18common.mode=localSign 19 20// You must change this instead of using default 21common.keyPwd=123456 22common.issuerKeyPwd=123456 23 24// keypair of app signature 25app.keypair.keyAlias=oh-app1-key-v1 26app.keypair.keyPwd=123456 27 28// keypair of profile signature 29profile.keypair.keyAlias=oh-profile1-key-v1 30profile.keypair.keyPwd=123456 31 32// Csr 33csr.keyAlias=oh-app1-key-v1 34csr.subject=C=CN,O=OpenHarmony,OU=OpenHarmony Community,CN=App1 Release 35csr.outFile=oh-app1-key-v1.csr 36 37// Root CA 38root-ca.keyAlias=oh-root-ca-key-v1 39root-ca.subject=C=CN,O=OpenHarmony,OU=OpenHarmony Community,CN=Root CA 40root-ca.outFile=root-ca1.cer 41 42// Sub APP CA 43sub-ca.app.keyAlias=oh-app-sign-srv-ca-key-v1 44sub-ca.app.subject=C=CN,O=OpenHarmony,OU=OpenHarmony Community,CN= Application Signature Service CA 45sub-ca.app.outFile=app-sign-srv-ca1.cer 46 47// Sub Profile CA 48sub-ca.profile.keyAlias=oh-profile-sign-srv-ca-key-v1 49sub-ca.profile.subject=C=CN,O=OpenHarmony,OU=OpenHarmony Community,CN= Profile Signature Service CA 50sub-ca.profile.outFile=profile-sign-srv-ca1.cer 51 52// App signature cert 53cert.app.subject=C=CN,O=OpenHarmony,OU=OpenHarmony Community,CN=App1 Release 54cert.app.outFile=app1.pem 55 56// Profile signature cert 57cert.profile.subject=C=CN,O=OpenHarmony,OU=OpenHarmony Community,CN=Profile1 Release 58cert.profile.outFile=profile1.pem 59 60// Sign profile 61sign.profile.inFile=app1-profile-release.json 62sign.profile.outFile=app1-profile.p7b 63 64// Sign app 65sign.app.inFile=app1-unsigned.hap 66sign.app.outFile=app1-signed.hap 67 68 69// Default config. Do not change it 70sub-ca.app.issuer=$root-ca.subject 71sub-ca.app.issuerKeyAlias=$root-ca.keyAlias 72sub-ca.profile.issuer=$root-ca.subject 73sub-ca.profile.issuerKeyAlias=$root-ca.keyAlias 74 75cert.app.keyAlias=$app.keypair.keyAlias 76cert.app.issuer=$sub-ca.app.subject 77cert.app.issuerKeyAlias=$sub-ca.app.keyAlias 78cert.app.rootCaCertFile=$root-ca.outFile 79cert.app.subCaCertFile=$sub-ca.app.outFile 80 81cert.profile.keyAlias=$profile.keypair.keyAlias 82cert.profile.issuer=$sub-ca.profile.subject 83cert.profile.issuerKeyAlias=$sub-ca.profile.keyAlias 84cert.profile.rootCaCertFile=$root-ca.outFile 85cert.profile.subCaCertFile=$sub-ca.profile.outFile 86 87sign.profile.keyAlias=$profile.keypair.keyAlias 88sign.profile.profileCertFile=$cert.profile.outFile 89 90sign.app.keyAlias=$app.keypair.keyAlias 91sign.app.appCertFile=$cert.app.outFile 92sign.app.profileFile=$sign.profile.outFile 93