help wantedquestion
Métriques du dépôt
- Stars
- (5 458 étoiles)
- Métriques de merge PR
- (Aucune PR mergée en 30 j)
Description
V2 and V3 signature stripped in apk files:
$ apksigner verify Phonesky.apk
DOES NOT VERIFY
WARNING: No SourceStamp signature
ERROR: JAR signer BNDLTOOL.RSA: JAR signature META-INF/BNDLTOOL.SF indicates the APK is signed using APK Signature Scheme v2 but no such signature was found. Signature stripped?
ERROR: JAR signer BNDLTOOL.RSA: JAR signature META-INF/BNDLTOOL.SF indicates the APK is signed using APK Signature Scheme v3 but no such signature was found. Signature stripped?
Checked in several opengapps builds: open_gapps-arm64-8.1-mini-20210314.zip, open_gapps-arm64-8.1-pico-20210314.zip, open_gapps-arm64-10.0-pico-20210314.zip
This leads to error when try to install apks via ADB:
$ adb install Phonesky.apk
Performing Streamed Install
adb: failed to install Phonesky.apk: Failure [INSTALL_PARSE_FAILED_NO_CERTIFICATES: Failed to collect certificates from /data/app/vmdl1536924348.tmp/base.apk: META-INF/BNDLTOOL.SF indicates /data/app/vmdl1536924348.tmp/base.apk is signed using APK Signature Scheme v2, but no such signature was found. Signature stripped?]
I checked apks in source repo - https://gitlab.opengapps.org/opengapps/arm64/-/tree/master/priv-app/com.android.vending/21/nodpi - there is no such problem:
$ apksigner verify 82442310.apk
WARNING: No SourceStamp signature
WARNING: META-INF/services/com.fasterxml.jackson.core.JsonFactory not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/.
WARNING: META-INF/services/com.google.protobuf.GeneratedExtensionRegistryLoader not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/.
WARNING: META-INF/services/kotlinx.coroutines.CoroutineExceptionHandler not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/.
WARNING: META-INF/services/kotlinx.coroutines.internal.MainDispatcherFactory not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/.