Skip to main content

Manage

Showing App Signing Certificates​

You can list the current app signing certificates as follows:

approov appsigncert -list

Which will output something like:

1 app signing certificate:
 C0:F3:15:9B:A5:6C:A8:E1
   Subject: CN=ANOther,O=Approov,L=Edinburgh,C=UK
   Expiry: 21 May 2041
   Auto-Registering
   SPKI: MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A...DftceTQwhEcv5UbnEnwk13MOzQIDAQAB
   Updated: 2023-11-20 10:34:14
   Added By: Another Person

Each entry is listed under the fingerprint hash value for that certificate, which can be used to remove it if necessary. If the certificate was assigned a label then that is shown in brackets after the fingerprint hash. Each entry then has:

  • Subject: The subject of the certificate.
  • Expiry: The time and date of the certificate expiry.
  • Properties: Optional additional properties that may be applied such as auto-registration and development.
  • SPKI: This provides a prefix and suffix of the Subject Public Key Information (SPKI) for the certificate and may be useful in debugging with other tools that show the certificate in this form.
  • Updated: The date and time that the entry was last updated.
  • Added By: Name of the user that last updated the entry.

Removing App Signing Certificates​

An app signing certificate can be removed with:

approov appsigncert -remove C0:F3:15:9B:A5:6C:A8:E1

Use the fingerprint hash to select the appropriate certificate. Note that removal requires an admin or delegate role and user confirmation:

WARNING: removing an app signing certificate will have an immediate impact on your apps in production
ATTENTION: If you wish to continue then please type YES and return: YES
successfully removed app signing certificate with fingerprint C0:F3:15:9B:A5:6C:A8:E1
info

Adding or removing an app signing certificate does not have an immediate impact on an app that is already running. The impact is only for apps which are launched 30 seconds or more after the change.