apksig/apksigner error message about unsupported algorithms used in JAR signature is too cryptic [63525618]

Fixed

Bug

Status Update

No update yet.

Description

kl...@google.com

created issue #1

Jul 10, 2017 04:40PM

When verifying an APK's JAR signature, apksig library and apksigner tool can report an error along the lines of
----
JAR signature META-INF/DELROID.RSA uses digest algorithm 2.16.840.1.101.3.4.2.1 and signature algorithm 1.2.840.113549.1.1.1 which is not supported on API Levels [[12, 17]]
---

The wording of the error is causing confusion among developers who use the library/tool (e.g.,

https://stackoverflow.com/questions/44874386/apk-upload-failed-for-alpha-version-errors-from-apksigner-digest-algorithm-and) and should thus be improved.

Comments

kl...@google.com <kl...@google.com> Jul 22, 2017 11:31PM

Accepted by kl...@google.com.

ap...@google.com <ap...@google.com> #2Jul 24, 2017 11:55PM

Is this fixed? I'm still seeing this issue with AGP 8.1.0-beta01 + Gradle 8.1

ap...@google.com <ap...@google.com> #3Aug 9, 2017 09:29PM

The fix has not been landed.

kl...@google.com <kl...@google.com> #4Oct 3, 2017 04:47PM

Marked as fixed.

Due to this bug in CI we hit configuration cache invalidation 100% of the time. Can we make sure the fix lands soon? And especially before 8.1.0 stable.

Issue 63525618

Description

Issue summary

Comments

kl...@google.com <kl...@google.com> Jul 22, 2017 11:31PM

ap...@google.com <ap...@google.com> #2Jul 24, 2017 11:55PM

ap...@google.com <ap...@google.com> #3Aug 9, 2017 09:29PM

kl...@google.com <kl...@google.com> #4Oct 3, 2017 04:47PM

Add comment

Issue metadata