crosswalk-project / crosswalk

A web runtime built on Chrome. This project is currently unmaintained.
https://crosswalk-project.org/blog/crosswalk-final-release.html
BSD 3-Clause "New" or "Revised" License
2.33k stars 652 forks source link

Pin apk signature hash #4034

Closed flavius-mester closed 6 years ago

flavius-mester commented 6 years ago

Add the ability to pin the sha-256 digest hash of the public key of your choice. Therefore when you are in the crosswalk download mode, you can sign your crosswalkRuntimeLib.apk's with the key of your choice, and pin the hash of those certificates in your app. The changes are only in the crossswalkShared library, which is the one you embeed into your app.

This is useful on amazon store, as you are not affected by the fact that amazon changes the signature of your app.