android - "Package file was not signed correctly"错误 -- 检测它是否会发生在 Google Play 应用程序 apk 上

Question

我遇到以下问题中描述的错误问题:

Published Android apk gives error "Package file was not signed correctly"
Some (but not all) users receive "Package file was not signed correctly" when downloading my app from Google Play

具体来说，当一些用户尝试下载我的 Google Play 应用时，他们收到了错误消息，而其他人则没有。

我的问题是:如何在提交前检测是否会出现问题？

为了它的值(value)，当我运行时

jarsigner -verify -verbose -certs myapk.apk

我看到类似下面的内容:

86226 Sun Nov 09 10:34:54 EET 2014 META-INF/MANIFEST.MF X.509, //[personal stuff omitted] [certificate is valid from 8/20/14 8:04 AM to 1/5/42 7:04 AM] [CertPath not validated: Path does not chain with any of the trust anchors] // several hundred entries like the above, and then: jar verified.

Warning: This jar contains entries whose certificate chain is not validated. This jar contains signatures that does not include a timestamp. Without a timestamp, users may not be able to validate this jar after the signer certificate's expiration date (2042-01-05) or after any future revocation date.

Answer 1

实际上这是一个常见问题，我猜你一定是在使用 Java 7 或更高版本。

解决方案

运行 jarsigner:

jarsigner -verbose -verify -keystore ${KEYSTORE_PATH} ${YOU_JAR_FILE}

看看here