1. First you need to register a Google developer account and pay $25 with a credit card. Omit 1000 words here
2. When creating an application and uploading an application signature, it prompts that the private key is not correctly encrypted.
The upload.zip produced with the official command cannot be used.
Finally, I asked for official help and the reply is as follows.
此密钥必须为 2048 位 RSA 密钥，有效期为 25 年。
You can use keytool to view the signature encryption method you generated before.
keytool -list -v -keystore mytestkey.jks
Find the
signature algorithm name: SHA256withRSA . This is correct.
If it is MD5withRSA, it will be useless. . . Need to regenerate a new signature
Use the following command to generate an RSA key
keytool -genkeypair -alias upload -keyalg RSA -keysize 2048 -validity 9125 -keystore keystore.jks
Then use the official tool to generate upload.zip and upload it.
Then upload the aab installation package. Supplementary privacy statement, etc.