0

I'm trying to set up "Login with Amazon" for a Fire TV app and I can't find the required MD5 signature I need to generate an API key. Amazon requires both SHA-256 and MD5 signatures, but I can only find the SHA-256 and SHA-1 signatures. I have extracted the CERT.RSA file from the APK package and ran this command: keytool -printcert -file CERT.RSA And I have ran this command on the keystore file: keytool -list -v -alias <alias> -keystore <keystore.filename> This is the result for both commands:

... 
Certificate fingerprints:
         SHA1: 26:C9:E6:7E:B5:28:F9:CC:C5:5D:9C:...
         SHA256: 09:65:05:6C:38:03:94:E7:81:18:E7:36:6D:FE:41:DB:06:...
Signature algorithm name: SHA256withRSA
Subject Public Key Algorithm: 2048-bit RSA key 
...

As you can see, no MD5 signature. I have tried running the signingReport using these instructions: How to get the SHA-1 fingerprint certificate in Android Studio for debug mode? I do get an MD5 signature, but that is for the debug keystore only, as far as I can tell. And the SHA-256 signature from that report is different from the one from the keytool commands. I need the MD5 signature from the release keystore.

Can someone show me how to get the MD5 signature from a release keystore or from a CERT.RSA file? thanks, Dave

David Evans
  • 53
  • 5
  • I found the answer. I had to create a new Gradle config to add to the signingReport per these instructions [Create New signingReport config](https://stackoverflow.com/questions/25001479/app-release-unsigned-apk-is-not-signed/34964168#34964168) – David Evans Sep 20 '21 at 12:30
  • Then run the signingReport task using the 'release' build variant [Run signingReport task](https://stackoverflow.com/questions/15727912/sha-1-fingerprint-of-keystore-certificate/35308827#35308827) – David Evans Sep 20 '21 at 12:37
  • If tasks doesn't show up, you go to Settings --> Experiemental and untick the box 'Do not build Gradle task list...' – David Evans Sep 20 '21 at 12:37
  • I still would like to know why I can't get the MD5 signature by using the keytool like many examples. – David Evans Sep 20 '21 at 12:38

1 Answers1

0

I should have posted the answer here instead of in comments.

I had to create a new Gradle config to add to the signingReport per these instructions Create New signingReport config

Then run the signingReport task using the 'release' build variant Run signingReport task

If tasks doesn't show up, you can go to Settings --> Experimental and untick the box 'Do not build Gradle task list...'

I still have no idea why I can't get the MD5 signature by using keytool.

David Evans
  • 53
  • 5