search

kellinwood / zip-signer

Official source of the ZipSigner app for Android
35 stars 10 forks source link

Commits after long time #1

Open HemanthJabalpuri opened 4 years ago

HemanthJabalpuri commented 4 years ago

@kellinwood Sir, I am a android user with your zipsigner from command line even though there is gui app.

Many things have been changed between these years.

Official signapk have many commits after your version of signapk.

There are also working zip signature verifying modifications are done in various modded signapks available from different places of github.

I will share the links of those when I am free through this issue.

Why the zipsigner app is not available in play store now?

Thanks for your great app.

kellinwood commented 4 years ago

I look forward to seeing your links. Google pulled ZipSigner from the play store because the 'Donate' item violated their policies. I removed the menu item and am in the process of re-submitting it.

HemanthJabalpuri commented 4 years ago

@kellinwood According to the zip-signing section of the doc said here https://forum.xda-developers.com/showpost.php?p=56621542&postcount=2 and from https://github.com/omnirom/android_packages_apps_OpenDelta/tree/android-10/server we have to use signWholeOutputFile method which adds signature at the end of zip file. That signWholeOutputFile source is available in signapk source and can be invoked with -w flag to it when signing recovery flashable zip files. Also they says that we have to use zip_adjust tool after signing normally.

Implementation of above method that is compatible in android is available at https://github.com/topjohnwu/Magisk/tree/master/signing/src/main/java/com/topjohnwu/signing which signs normally first and then zipadjusts it and then invokes signWholeOutputFile.

Also now instead of signapk, all are using apksigner tool available from https://android.googlesource.com/platform/tools/apksig/+/refs/heads/master/src/ for signing their apps for better protection.

There is a implementation keytool java tool in android that is avilable from https://github.com/YutakaAoki/KeyTool

There are many projects use your zipsigner-lib to sign newly built apps from thier apps within android Eg:- JavaIdeDroid, Java-N-IDE, CCTools, TerminalIDE, Termux, Dalvik-bytecode-editor, ZIPMe, LuckyPatcher etc.

Also there is a popular file manager called MiXplorer which an able to create JKS, BKS, PKCS12 & UBER keystores and covert from one other in android. There is also support for DSA.

There is a command line version in android at https://github.com/t-arn/java-ide-droid/blob/master/src/com/t_arn/JavaIDEdroid/SignApk.java

HemanthJabalpuri commented 3 years ago

@kellinwood Can you please release ZipSigner apk in releases page of this repo.

pixel2user commented 3 years ago

Google pulled ZipSigner from the play store because the 'Donate' item violated their policies. I removed the menu item and am in the process of re-submitting it. What happened? I had to install https://play.google.com/store/apps/details?id=com.haibison.apksigner because 'zipsigner' was not available trough PlayStore or F-Droid! :-(

HemanthJabalpuri commented 3 years ago

What happened? I had to install https://play.google.com/store/apps/details?id=com.haibison.apksigner because 'zipsigner' was not available trough PlayStore or F-Droid! :-(

We can download it at https://www.apkmirror.com/apk/ken-ellinwood/zipsigner