Sandy's simple note

First, generate a RSA key for signing

$ sudo keytool -genkey -alias <your_lib_name> -validity 3650 -keystore <your_jks_file.jks> -keyalg RSA

Second, sign the jar with jarsigner

$ sudo jarsigner <your_jar_name> <your_lib_name> -keystore <your_jks_file.jks>

You can ignore : “warning : POSIX file permission and/or symlink attributes detected. These attributes are ignored when signing and are not protected by the signature.”