List APK signing certificate fingerprint so users can verify releases
Nobody has claimed this yet.
Assessment
- Difficulty
- 1/5
- Estimated time
- Under an hour
- Newbie friendliness
- 85/100
Research direction
The issue asks to publish the APK signing certificate fingerprint. First, generate the SHA-256 fingerprint of the app's signing certificate using keytool -printcert -jarfile app.apk. Then, add this fingerprint to the project's README.md file and/or the GitHub Releases page notes. Verify the change by checking the updated documentation in the repository.
Written by the indexing model from the issue text.
Description
Use case
I'm installing this app via Obtanium / sideloading, and I'd like to make sure the APK I install is genuinely signed by you (and not a tampered or repackaged build).
To verify this, I use a certificate-fingerprint check (e.g., AppVerifier, or keytool -printcert -jarfile app.apk on desktop). For that to work, I need the signing certificate's fingerprint published somewhere I can compare against.
Proposed solution
Please add the SHA-256 fingerprint of the signing certificate (SHA-1 is a fine bonus) to the README and/or the Releases page, e.g.:
- Dominant language
- Kotlin
- Stars
- 9.3k
- Forks
- 773
- PR merge metrics
- No merged PRs in 30d
Getting set up
- No Dockerfile or Docker Compose file
- Has a pull request template
- No contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from zhanghai/MaterialFiles
-
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
zhanghai/MaterialFiles#1659 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
zhanghai/MaterialFiles#1580 ·
-
[Feature Request] Add directory entries count (items count) and configurable secondary line metadataOpen
Difficulty 4/5 3-5 days Newbie friendliness 48/100
zhanghai/MaterialFiles#1666 · 1 comment ·
-
Difficulty 4/5 1-2 days Newbie friendliness 58/100
zhanghai/MaterialFiles#1664 ·
-
Difficulty 5/5 Over a week Newbie friendliness 35/100
zhanghai/MaterialFiles#1660 · 2 reactions ·
All issues in zhanghai/MaterialFiles
Similar issues
-
[Request] 李跳跳Openrequest-adaption
Difficulty 2/5 Under an hour Newbie friendliness 78/100
BetterAndroid/android-notification-icon-project#799 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
-
Difficulty 1/5 Under an hour Newbie friendliness 90/100
ProdigyV21/ARVIO#832 ·
Maintainers usually reply within 1 day
-
bug
Difficulty 2/5 1-3 hours Newbie friendliness 90/100
Maintainers usually reply within 1 day
-
SIGSEGV in symex on __builtin_constant_p of a void expressionPossibly taken A pull request linked to this issue is open or already merged. Openbug goto-symex
Difficulty 2/5 1-3 hours Newbie friendliness 83/100
Maintainers usually reply within 1 day