help wantedquestion
仓库指标
- 星标
- (5,458 个星标)
- PR 合并指标
- (30 天内没有已合并 PR)
描述
V2 and V3 signature stripped in apk files:
$ apksigner verify Phonesky.apk
DOES NOT VERIFY
WARNING: No SourceStamp signature
ERROR: JAR signer BNDLTOOL.RSA: JAR signature META-INF/BNDLTOOL.SF indicates the APK is signed using APK Signature Scheme v2 but no such signature was found. Signature stripped?
ERROR: JAR signer BNDLTOOL.RSA: JAR signature META-INF/BNDLTOOL.SF indicates the APK is signed using APK Signature Scheme v3 but no such signature was found. Signature stripped?
Checked in several opengapps builds: open_gapps-arm64-8.1-mini-20210314.zip, open_gapps-arm64-8.1-pico-20210314.zip, open_gapps-arm64-10.0-pico-20210314.zip
This leads to error when try to install apks via ADB:
$ adb install Phonesky.apk
Performing Streamed Install
adb: failed to install Phonesky.apk: Failure [INSTALL_PARSE_FAILED_NO_CERTIFICATES: Failed to collect certificates from /data/app/vmdl1536924348.tmp/base.apk: META-INF/BNDLTOOL.SF indicates /data/app/vmdl1536924348.tmp/base.apk is signed using APK Signature Scheme v2, but no such signature was found. Signature stripped?]
I checked apks in source repo - https://gitlab.opengapps.org/opengapps/arm64/-/tree/master/priv-app/com.android.vending/21/nodpi - there is no such problem:
$ apksigner verify 82442310.apk
WARNING: No SourceStamp signature
WARNING: META-INF/services/com.fasterxml.jackson.core.JsonFactory not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/.
WARNING: META-INF/services/com.google.protobuf.GeneratedExtensionRegistryLoader not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/.
WARNING: META-INF/services/kotlinx.coroutines.CoroutineExceptionHandler not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/.
WARNING: META-INF/services/kotlinx.coroutines.internal.MainDispatcherFactory not protected by signature. Unauthorized modifications to this JAR entry will not be detected. Delete or move the entry outside of META-INF/.