import kellinwood.security.zipsigner.ZipSigner; //导入依赖的package包/类
/** KeyStore-type agnostic.  This method will sign the zip file, automatically handling JKS or BKS keystores. */
public static void signZip( ZipSigner zipSigner,
                     String keystorePath,
                     char[] keystorePw,
                     String certAlias,
                     char[] certPw,
                     String signatureAlgorithm,
                     String inputZipFilename,
                     String outputZipFilename)
    throws Exception
{
    zipSigner.issueLoadingCertAndKeysProgressEvent();
    KeyStore keystore = KeyStoreFileManager.loadKeyStore( keystorePath, keystorePw);
    Certificate cert = keystore.getCertificate(certAlias);
    X509Certificate publicKey = (X509Certificate)cert;
    Key key = keystore.getKey(certAlias, certPw);
    PrivateKey privateKey = (PrivateKey)key;

    zipSigner.setKeys( "custom", publicKey, privateKey, signatureAlgorithm, null);
    zipSigner.signZip( inputZipFilename, outputZipFilename);
}
 

import kellinwood.security.zipsigner.ZipSigner; //导入依赖的package包/类
private static void zipSign(AndroidProjectFolder projectFile) throws Exception {
//        if (!appContext.getString(R.string.keystore).contentEquals(projectFile.jksEmbedded.getName())) {
//             TODO use user defined certificate
//        }

        // use embedded private key
        KeyStore keyStore = projectFile.getKeyStore();
        String keystorePath = keyStore.getFile().getPath();
        char[] keystorePw = keyStore.getPassword();
        String certAlias = keyStore.getCertAlias();
        char[] certPw = keyStore.getCertPassword();
        String signatureAlgorithm = "SHA1withRSA";

        ZipSigner zipsigner = new ZipSigner();
        zipsigner.addProgressListener(new SignProgress() {
            @Override
            public void onProgress(ProgressEvent event) {
                super.onProgress(event);
                System.out.println("Sign progress: " + event.getPercentDone());
            }
        });
        CustomKeySigner.signZip(zipsigner, keystorePath, keystorePw, certAlias,
                certPw, signatureAlgorithm,
                projectFile.getApkUnsigned().getPath(),
                projectFile.getApkUnaligned().getPath());
    }
 

import kellinwood.security.zipsigner.ZipSigner; //导入依赖的package包/类
public void signZip(File input, File output) {
    try {
        ZipSigner zipSigner = new ZipSigner();

        X509Certificate cert = (X509Certificate) keyStore.getCertificate(INDEX_CERT_ALIAS);

        KeyPair kp = getKerplappKeypair();
        PrivateKey priv = kp.getPrivate();

        zipSigner.setKeys("kerplapp", cert, priv, DEFAULT_SIG_ALG, null);
        zipSigner.signZip(input.getAbsolutePath(), output.getAbsolutePath());

    } catch (ClassNotFoundException | IllegalAccessException | InstantiationException | GeneralSecurityException | IOException e) {
        Log.e(TAG, "Unable to sign local repo index", e);
    }
}
 

import kellinwood.security.zipsigner.ZipSigner; //导入依赖的package包/类
private void signApk() throws IOException, GeneralSecurityException, IllegalAccessException, InstantiationException, ClassNotFoundException {

        Logger.logd( "ZipSigner.MODE_AUTO_TESTKEY: " + ZipSigner.MODE_AUTO_TESTKEY, verbose, System.out);
        ZipSigner zipsigner = new ZipSigner();
        zipsigner.setKeymode(ZipSigner.MODE_AUTO_TESTKEY);
        zipsigner.signZip(buildFiles.unsigned.getAbsolutePath(), buildFiles.signed.getAbsolutePath());
        Logger.logd("Signed zip: " + buildFiles.signed.getAbsolutePath() + " exists: " + buildFiles.signed.exists(), verbose, System.out);
    }
 

import kellinwood.security.zipsigner.ZipSigner; //导入依赖的package包/类
void signApk(File tmpApkFile) throws Exception {
    ZipSigner zipSigner = new ZipSigner();
    zipSigner.setKeymode("auto-testkey");
    String inputFilename = tmpApkFile.getCanonicalPath();
    out.printf(IOutput.Level.VERBOSE, "Signing %s into %s\n", inputFilename, outApkFilename);
    zipSigner.signZip(inputFilename, outApkFilename);
}
 

import kellinwood.security.zipsigner.ZipSigner; //导入依赖的package包/类
/**
 * Uses the ZipSigner library to sign the apk in the given file.
 *
 * @param unsignedApk
 * @param signedName
 * @return
 * @throws IllegalAccessException
 * @throws InstantiationException
 * @throws ClassNotFoundException
 * @throws java.io.IOException
 * @throws java.security.GeneralSecurityException
 */
private File signApk(File unsignedApk, String signedName) throws
        IllegalAccessException,
        InstantiationException,
        ClassNotFoundException,
        IOException,
        GeneralSecurityException {
    File signedApkFile = new File(getMorphCacheDir(), signedName + SIGNED_EXTENSION);
    ZipSigner zipSigner = new ZipSigner();
    zipSigner.setKeymode("auto-testkey");
    zipSigner.signZip(unsignedApk.getPath(), signedApkFile.getPath());

    return signedApkFile;
}