Flutter 打包 / 发布签名完整指南

keytool -genkey -v \
  -keystore orion_release.jks \
  -alias orion_key \
  -keyalg RSA \
  -keysize 2048 \
  -validity 10000

Enter keystore password:  ← 设置 storePassword（记住！）
Re-enter new password:    ← 再次确认

What is your first and last name?      Aioli Team
What is the name of your org unit?     Mobile
What is the name of your organization? Aioli
What is the name of your City?         Taipei
What is the name of your State?        Taiwan
What is the two-letter country code?   TW

Is CN=Aioli Team, ... correct? [no]: yes

Enter key password for <orion_key>:    ← 设置 keyPassword（可直接回车=同上）

keytool -list -v \
  -keystore orion_release.jks \
  -alias orion_key

Alias name: orion_key
Certificate fingerprints:
  MD5:    BA:CC:E1:2F:...   ← 32字节，去冒号后32字符
  SHA1:   AA:BB:CC:DD:...   ← 20字节，去冒号后40字符
  SHA256: EE:FF:00:11:...   ← 32字节，去冒号后64字符

# 查看 keystore 签名
keytool -list -v -keystore orion_release.jks -alias orion_key -storepass 你的密码

# 查看已构建 APK 的签名
apksigner verify --print-certs build/app/outputs/flutter-apk/app-release.apk

# 验证 APK 与 keystore 签名一致（SHA256 对比）
keytool -list -v -keystore orion_release.jks -alias orion_key -storepass 你的密码 \
  | grep SHA256 | tr '[:lower:]' '[:upper:]'

apksigner verify --print-certs build/app/outputs/flutter-apk/app-release.apk \
  | grep "SHA-256" | tr '[:lower:]' '[:upper:]'

# MD5（32字符）← 极光推送、微信开放平台等
keytool -exportcert \
  -keystore orion_release.jks \
  -alias orion_key \
  -storepass 你的密码 \
  | md5sum | awk '{print $1}'

# SHA1（40字符）← 高德地图、百度地图、Firebase
keytool -list -v -keystore orion_release.jks -alias orion_key -storepass 你的密码 \
  | grep "SHA1:" | awk '{print $2}' | tr -d ':'

# SHA256（64字符）← Google Play Console
keytool -list -v -keystore orion_release.jks -alias orion_key -storepass 你的密码 \
  | grep "SHA256:" | awk '{print $2}' | tr -d ':'

# macOS（直接复制到剪贴板）
base64 -i orion_release.jks | pbcopy
base64 -w0 -i orion_release.jks | pbcopy

# Linux
base64 -w 0 orion_release.jks > keystore_base64.txt

菜单栏 → Keychain Access
       → Certificate Assistant（证书助理）
       → Request a Certificate From a Certificate Authority（从证书颁发机构请求证书）

# 双击 .cer 文件自动导入，或命令行：
security import ~/Downloads/distribution.cer \
  -k ~/Library/Keychains/login.keychain-db

右键证书 → 导出（Export）
格式选择 .p12
设置导出密码（即 IOS_DISTRIBUTION_CERT_PASSWORD）

base64 -i Distribution.p12 | pbcopy

有私钥（可导出）：             没有私钥（.p12灰色）：
▼ 🏅 Apple Distribution: xxx   🏅 Apple Distribution: xxx
    🔑 私钥                        （无法展开）

类型：iOS App Development
Bundle ID：com.example.aioli.dev（或 com.example.aioli）
Certificate：选择刚才创建的 Distribution 证书
Devices：选择测试设备
Name：Aioli Dev Profile

base64 -i "Aioli_Dev_Profile.mobileprovision" | pbcopy

类型：App Store Connect
Bundle ID：com.example.aioli
Certificate：选择 Distribution 证书
Name：Aioli AppStore Profile

base64 -i "Aioli_AppStore_Profile.mobileprovision" | pbcopy

# 查看 PP 的 UUID、有效期、Bundle ID
security cms -D -i "Aioli_Dev_Profile.mobileprovision" \
  | grep -A1 "UUID\|application-identifier\|ExpirationDate"

左上角用户头像 → Integrations → App Store Connect API → 点击 +
Name：CI Deploy Key
Access：App Manager

base64 -i AuthKey_XXXXXXXXXX.p8 | pbcopy

keytool -exportcert \
  -keystore orion_release.jks \
  -alias orion_key \
  -storepass 你的密码 \
  | md5sum | awk '{print $1}'
# 输出示例：bacce12f3a445b6c7d8e9fa0b1c2d3e4

Certificates → + → Apple Push Notification service SSL (Sandbox & Production)
→ 选择 Bundle ID：com.example.aioli
→ 上传 CSR → 下载 .cer → 导入 Keychain → 导出 .p12

storeFile=../../orion_release.jks
storePassword=你的密码
keyAlias=orion_key
keyPassword=你的密码

import java.util.Properties
import java.io.FileInputStream

val keyPropsFile = rootProject.file("key.properties")
val keyProps = Properties()
if (keyPropsFile.exists()) {
    keyProps.load(FileInputStream(keyPropsFile))
}

android {
    signingConfigs {
        create("release") {
            val storeFilePath = keyProps["storeFile"] as String?
            if (storeFilePath != null) storeFile = file(storeFilePath)
            storePassword = keyProps["storePassword"] as String?
            keyAlias      = keyProps["keyAlias"]      as String?
            keyPassword   = keyProps["keyPassword"]   as String?
        }
    }
    buildTypes {
        getByName("release") {
            signingConfig    = signingConfigs.getByName("release")
            isMinifyEnabled  = true
            isShrinkResources = true
        }
    }
}

# Android 签名（根目录）
*.jks
*.keystore
android/key.properties

# iOS 证书
*.p12
*.mobileprovision
ios/ExportOptions.plist

# Android
flutter build apk --release
apksigner verify --print-certs build/app/outputs/flutter-apk/app-release.apk | grep SHA-256

# iOS
flutter build ipa --release --export-options-plist=ios/ExportOptions.plist