How do I get a private key and certificate for a release?

[ashherb2u]

How do I get the right format for those also?

[britzl]

Have you read our manual on Android development? https://www.defold.com/manuals/android/

And there’s one for iOS development as well: https://www.defold.com/manuals/ios/

[ashherb2u]

The certificates downloaded from the play console can’t be used why is this?

[britzl]

Downloaded from the play console? You mean the Google Play Developer console? I guess that’s a .keystore file? You can extract key and cert from it and use that when signing.

[ashherb2u]

How do I do that?

[sven]

The user @universityofgames posted a great guide on the forums how to do just that:

How to convert Unity Keystore to PK8 format?

Hello, When your team is porting game to another engine / technology, it will always encounter some difficulty. One of them is certification. As you can guess, not all game engines / applications use the same certificate format. In our scenario, Unity Game Engine use *.keystore format, but Defold Engine require *.PK8 and *.PEM. How to extract it from the *.keystore file? Before we start we need to get the tools below: (a) OpenSSL’s homepage and OpenSSL (b) KeyStore Explorer Once you’ve inst…

I bet there are a bunch of other guides available online as well.

[ashherb2u]

The Google certificate is a dem file

[britzl]

A dem file? Never heard of those. What are they used for? Last time I did Android development you used a .keystore file when signing.

[Pkeod]

If you follow the steps in the manual that’s all you need. You can let Google manage the release signing, and then you use your key for uploading only. Then you can get new upload if you ever lose yours or they get compromised, but you should be careful to backup and never share yours.

Specifically

$ openssl genrsa -out key.pem 2048
$ openssl req -new -key key.pem -out request.pem
$ openssl x509 -req -days 9999 -in request.pem -signkey key.pem -out certificate.pem
$ openssl pkcs8 -topk8 -outform DER -in key.pem -inform PEM -out key.pk8 -nocrypt

And then don’t lose your keys.

[ashherb2u]

Thanks

[ashherb2u]

What does unable to parse certificate mean?

[Pkeod]

It means something you are trying to use the certificate with thinks it is malformed. What are you trying to do? Try to follow the process again fully and carefully and see if it still happens.