History log of /build/tools/signapk/SignApk.java
Revision Date Author Comments
147626e624ec0b709e6dc8f156ccb391fffef9c8 04-Sep-2012 Doug Zongker <dougz@google.com> change SignApk.java to use bouncy castle for signing

Remove use of the private sun.security.* classes for generating pkcs7
signatures and use bouncy castle instead.

Change-Id: Ie8213575461975085d119e000e764d2a28c26715
e691373514d47ecf29ce13e14e9f3b867d394693 04-Jul-2012 Doug Zongker <dougz@android.com> make SignApk faster for OTA packages

Change to the default compression level instead of the max compression
level for OTA packages (-w): it's much faster and the difference in
output size is usually negligible.

Bug: 6778962
Change-Id: I82a6acc19be8b3289fd84c8c15f03ebeb7a1ce63
7bb042317ab4df86b9962f30399c7728e8b84599 11-May-2012 Doug Zongker <dougz@android.com> add copy of public cert used for signing to OTA packages

When signing a file with -w (ie, an OTA package), add the file
META-INF/com/android/otacert, which is a copy of the public key
certificate. While this can be extracted from the CERT.RSA file,
having a copy of it more easily accessible makes it easier to write
tools.

Bug: 6477365
Change-Id: I8cdb19536eca9a223c2b954e3f8ea0d9f3f86f02
7978d50edb9c4da0b8f4076412f092418da6e372 24-Sep-2010 Ficus Kirkpatrick <ficus@android.com> Add a workaround for a platform JAR parsing bug.

The java.util.jar implementation through Android 1.6 has a
bug where if the signature file in META-INF is a multiple
of 1024 bytes, it will throw an IOException attempting to
read it.

If signapk would produce a CERT.SF in a multiple of 1024
bytes, add an extra CRLF to the end of the file.

Bug: 3019677
Change-Id: I23d4a36e12e224be600d3ac39379b5b5a022a628
e6b4e5b20ac8a3b01f1a99dd877a98c92036ce5e 13-Nov-2009 Jean-Baptiste Queru <jbq@google.com> eclair snapshot
badd2ca451ee7a408f55632025cbe69649b426b5 15-Aug-2009 Doug Zongker <dougz@android.com> fix endianness problem with the tail of the signature comment

The two 0xff bytes were intended to easily distinguish files with
whole file signatures from those without, but I got the endianness
backwards. Go ahead and fix that, as long as I'm making changes to
the verifier anyway.

Check for a signature that includes the sequence 0x50 0x4b 0x05 0x06,
which looks to minzip like the start of the EOCD block.
c6cf01a1170c3a7a5b03135b01cf97f06e1b953d 13-Aug-2009 Doug Zongker <dougz@android.com> add whole-file signature mode to SignApk

Make SignApk generate a signature for (nearly) the entire zip file
when run with the -w option. The signature covers all of the zip file
except for the archive comment (conveniently the last thing in a zip
file); the archive comment field is used to contain the signature
itself.
e74d8d1f8557be32a2286072101c082d65b3de8a 13-Aug-2009 Doug Zongker <dougz@android.com> add whole-file signature mode to SignApk

Make SignApk generate a signature for (nearly) the entire zip file
when run with the -w option. The signature covers all of the zip file
except for the archive comment (conveniently the last thing in a zip
file); the archive comment field is used to contain the signature
itself.
a237874ccf49e92b93faea51f65c2ff37ea19ac7 16-Jul-2009 Doug Zongker <dougz@android.com> fix the modtime of files in the apk when signing

SignApk fixes the timestamp of the signature files it adds. Use that
same timestamp for all the files, so that the modtime doesn't vary
from build to build. (Incremental OTAs currently spend significant
time rewriting every .apk to do nothing but patch in timestamp
changes.)
af482b62e50b70e469426681584503eab1b308e9 08-Jun-2009 Doug Zongker <dougz@android.com> make signapk strip other signatures

Change signapk to not propagate other signatures to the output
archive. Multiple signatures seem to confuse the package manager, as
we saw with Maps, and other partners are checking in prebuilt APKs for
google experience devices signed with random other things.
88b607994a148f4af5bffee163e39ce8296750c6 04-Mar-2009 The Android Open Source Project <initial-contribution@android.com> auto import from //depot/cupcake/@135843
05806d7af62e07c6225b2e7103a1b115ecf6c9ad 04-Mar-2009 The Android Open Source Project <initial-contribution@android.com> auto import from //depot/cupcake/@135843
dcc08f073b6873c69ab891d4f69f7c568e282df7 18-Dec-2008 The Android Open Source Project <initial-contribution@android.com> Code drop from //branches/cupcake/...@124589
b6c1cf6de79035f58b512f4400db458c8401379a 21-Oct-2008 The Android Open Source Project <initial-contribution@android.com> Initial Contribution