apksig/apksigner error message about unsupported algorithms used in JAR signature is too cryptic [63525618]

Fixed

Bug

Status Update

No update yet.

Description

kl...@google.com

created issue #1

Jul 10, 2017 04:40PM

When verifying an APK's JAR signature, apksig library and apksigner tool can report an error along the lines of
----
JAR signature META-INF/DELROID.RSA uses digest algorithm 2.16.840.1.101.3.4.2.1 and signature algorithm 1.2.840.113549.1.1.1 which is not supported on API Levels [[12, 17]]
---

The wording of the error is causing confusion among developers who use the library/tool (e.g.,

https://stackoverflow.com/questions/44874386/apk-upload-failed-for-alpha-version-errors-from-apksigner-digest-algorithm-and) and should thus be improved.

Comments

kl...@google.com <kl...@google.com> Jul 22, 2017 11:31PM

Accepted by kl...@google.com.

ap...@google.com <ap...@google.com> #2Jul 24, 2017 11:55PM

Thank you for this feedback. The team may reach out for more information on triaging or reproducing this issue.

ap...@google.com <ap...@google.com> #3Aug 9, 2017 09:29PM

I have tried the example project you've provided, it does not reproduce.

Could you please try running with -Pandroid.useDexArchive=false? This disables the new dexing pipeline, and fallbacks to the old one.

kl...@google.com <kl...@google.com> #4Oct 3, 2017 04:47PM

Marked as fixed.

@Mario Did you get a chance to try the build with -Pandroid.useDexArchive=false flag?

Issue 63525618

Description

Issue summary

Comments

kl...@google.com <kl...@google.com> Jul 22, 2017 11:31PM

ap...@google.com <ap...@google.com> #2Jul 24, 2017 11:55PM

ap...@google.com <ap...@google.com> #3Aug 9, 2017 09:29PM

kl...@google.com <kl...@google.com> #4Oct 3, 2017 04:47PM

Add comment

Issue metadata