Skip to content

Azure trusted signing w/ apksigner fails #292

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
vilgotf opened this issue Mar 18, 2025 · 8 comments
Open

Azure trusted signing w/ apksigner fails #292

vilgotf opened this issue Mar 18, 2025 · 8 comments

Comments

@vilgotf
Copy link

vilgotf commented Mar 18, 2025

The command below fails to run with the following error: Failed to load signer "signer #1": NONE entry "<accountName>/<profileName>" does not contain a key.

 java -cp apksigner.jar:jsign.jar com.android.apksigner.ApkSignerTool sign \
      --provider-class net.jsign.jca.JsignJcaProvider \
      --provider-arg https://neu.codesigning.azure.net \
      --ks NONE \
      --ks-type TRUSTEDSIGNING \
      --ks-pass env:ACCESS_TOKEN \
      --ks-key-alias <accountName>/<profileName> \
      --in app.apk

Jsign is otherwise working. E.g. jsign --storetype TRUSTEDSIGNING --keystore neu.codesigning.azure.net --storepass env:ACCESS_TOKEN --alias <accountName>/<profileName> app.msix successfully completes.

@ebourg
Copy link
Owner

ebourg commented Mar 18, 2025

Do you get more details with the --verbose option?

@vilgotf
Copy link
Author

vilgotf commented Mar 18, 2025

No. I should also mention that I'm using apksigner bundled with Android 35.

@ebourg
Copy link
Owner

ebourg commented Mar 18, 2025

And you use a fresh token generated just before invoking apksigner?

@vilgotf
Copy link
Author

vilgotf commented Mar 18, 2025

Yes

@ebourg
Copy link
Owner

ebourg commented Mar 18, 2025

Did you try --ks-pass pass:$ACCESS_TOKEN instead of --ks-pass env:ACCESS_TOKEN?

@vilgotf
Copy link
Author

vilgotf commented Mar 18, 2025

Yes I've tried that too. I should add that the error appears instantaneously without seemingly making any http request (I am even able to reproduce the error without an internet connection (I would expect another, network, error then)).

@ebourg
Copy link
Owner

ebourg commented Mar 19, 2025

And you've downloaded jsign-7.1.jar from the release page, renamed it to jsign.jar, and placed it in the current directory, right?

@vilgotf
Copy link
Author

vilgotf commented Mar 19, 2025

Yes, I've used both the release page's .deb and .jar files.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants