Sparkle

Signing the distribution with Java

Asked by Rick

I'd like to build a Java server to handle the bookkeeping associated with pushing out a new version of my app. I'm a fairly expert Java server developer, but sometimes cryptography can be...cryptic. Looking at the signing Ruby script, it appears that first the .zip file is signed with sha1, and then that result is signed with the private key, and that is base64 encoded, and the result is what's put into the cast.

Am I right about this?

Any chance there's already some Java code available for generating that signature that I could have? Thanks!

Question information

Language:
English Edit question
Status:
Solved
For:
Sparkle Edit question
Assignee:
No assignee Edit question
Solved by:
Rick
Solved:
Last query:
Last reply:
Revision history for this message
Andy Matuschak (andymatuschak) said : 		#1

The Ruby script just calls the crypto tools via the command line. You can have your Java just execute the same commands.

Revision history for this message
Rick (rmann) said : 		#2

Hi, thanks for the quick response. I left out a crucial detail in my original question: I want to to the encrytion natively in Java.

No worries; I'll figure it out. I just wanted to skip some work if I could. I did it for iPhone push certs, I can probably figure it out for this, too. Thanks!