# Clefs AppStore (bujardservice.ch) - generees le 2026-09-20

## Cle de signature de la metadata (signify/Ed25519)
- keyid: 679e4450be43c012
- Cle pub (base64, 42 octets): RWRnnkRQvkPAEtCa3lGw2l8gr5fwEaRUXHwClJSMPDtzuj/5Oc2uhsBa
- Cle privee: appstore.0.sec  (NE JAMAIS PERDRE - signe metadata.1.0.sjson)
- Fichier signe: /var/www/ota/appstore/metadata.1.0.sjson (JSON + \n + b64(sig 74 octets) + \n)
- Re-signature: python3 resign_metadata.py appstore.0.sec metadata.1.json metadata.1.0.sjson
  (script sur Kali: /home/raider/appli_offbuild_20260909/AppStore-main/keys/appstore/resign_metadata.py)

## Keystore Android (signature APK AppStore)
- Fichier: appstore.keystore
- storePassword: appstore2026 / keyAlias: appstore / keyPassword: appstore2026
- DN: CN=AppStore Bujard, OU=Personal, O=Bujard, L=Geneve, C=CH
- Empreinte SHA-256: 0d65d4a908876e1f193dce9da64fc7ced7fe98d3f7b2189229d0a9c5d6cb0f5f

## Lieux des clefs
1. Synology: /ota/appstore-keys/  (ce dossier - copie de reference)
2. Kali: /home/raider/appli_offbuild_20260909/AppStore-main/keys/appstore/
3. Telephone: /product/priv-app/AppStore/AppStore.apk (APK signe; backup /data/local/tmp/AppStore.apk.bak)

## Pour ajouter une app au store
1. APK dans /var/www/ota/appstore/packages/<package>/<versionCode>/<Nom>.apk
2. Editer /var/www/ota/appstore/metadata.1.json (ajouter le package: signatures, variants, ...)
3. Re-signer (Kali): python3 resign_metadata.py appstore.0.sec metadata.1.json metadata.1.0.sjson
4. Mettre a jour metadata.1.0.sjson sur le serveur (smbclient, le montage CIFS est en lecture seule)