OCSInventory-NG / AndroidAgent

OCS Inventory NG Android Agent
http://www.ocsinventory-ng.org/en/
GNU General Public License v2.0
28 stars 23 forks source link

APK of latest release (v2.3.1) lacks signature #24

Open IzzySoft opened 6 years ago

IzzySoft commented 6 years ago

The APK attached to the latest release (OCSNG-Android-Agent-2.3.1.apk) lacks its signature and thus does not verify:

$ apksigner verify OCSNG-Android-Agent-2.3.1.apk
DOES NOT VERIFY
ERROR: No JAR signatures

Can you please check and fix? Thanks!

IzzySoft commented 6 years ago

Knock, knock? Did you miss it – or simply had no time yet to check? A little "life-sign" would be much appreciated :wink:

IzzySoft commented 6 years ago

Seems like reporting here is in vain. Will have to disable updates then and finally remove the app from my repo.

gillesdubois commented 6 years ago

Hi, Sorry for the anwser delay :)

Is there something specific to generate this signed apk ? Because when i generated it i used the jks and the same process we used for ealier release. So, it should be signed.

Regards, Gilles Dubois.

IzzySoft commented 6 years ago

@gillesdubois apologies accepted :wink:

I'm no dev, so I cannot tell about the process. And while the package might be signed, the certs are missing from the META-INF folder:

ERROR: No signing certificates found in repo/org.ocs.android.agent_2.3.1.apk
WARNING: Skipping 'org.ocs.android.agent_2.3.1.apk' with invalid signature!

Without the certificates, any signature will be "invalid" (as it cannot be verified).

ubiquando commented 6 years ago

Hi, the link to this version 2.3.1 is not available on the www.ocsinventory-ng.org website... and the version 2.3 is buggy... I suppose it's not the right place to post this message, but I didn't find the right one... thanks

IzzySoft commented 6 years ago

@ubiquando 2.3.1 is on the releases page here – but has the above described issues. Still unfixed. Seems like @gillesdubois has another delay :speak_no_evil:

IzzySoft commented 6 years ago

@gillesdubois any progress? any life-sign? :sos:

IzzySoft commented 6 years ago

Monthly ping – are you still on it?

IzzySoft commented 5 years ago

OK, looks dead then. Sad. Removed it from my repo for now. Be welcome to ping me in case you pick up.

jackadam1981 commented 3 years ago

Sign with JDK