新更新 : apk that is not signed with the upload certificate 的 Android App Sign 问题

Question

最近我上传了一个应用程序到 play-store，现在已经上线了，我也启用了应用程序登录。但是，当我尝试上传新版本时，我无法找到我的旧 keystore 。因此，当我生成新的 KEYSTORE 并尝试上传时，出现错误:

you uploaded an apk that is not signed with the upload certificate. You must use the same certificate.

请查看我的开发人员控制台，其中包含上传证书和应用签名证书。

如何让 apk 使用相同的指纹签名并上传到 play-store？

引用:https://support.google.com/googleplay/android-developer/answer/7384423?hl=en

If you lose your keystore or think it may be compromised, Google Play App Signing makes it possible to request a reset to your upload key. If you're not enrolled in Google Play App Signing and lose your keystore, you'll need to publish a new app with a new package name.

注意:与 KeyStore 相关的许多关于堆栈溢出的问题，但这是与 Google “App Signing” 的新功能相关的一些事情，我没有得到合适的答案。

我已联系谷歌，他们的回复并未确认任何内容。请在下面找到来自谷歌的消息。

I'm sorry for the confusion, however I can see for your app (with package name: com.wma.foodinns.foodinnsapp), you have successfully registered your upload key with Google and have therefore successfully generated an upload key. The upload key you generated and then used to register is the key you should still have on your side and should be used to sign your APKs when uploading new APKs for this app to the Play Console.

The certificate you can download from the Play Console is not the full upload key, but contains the public key as well as some extra identifying information about who owns the key (for more information on this, please see the definitions listed here: https://support.google.com/googleplay/android-developer/answer/7384423?hl=en&ref_topic=7072031).

Do you still have the key you have created that was then registered as as the upload key on the Play Console?

Answer 1

最后，Google 帮助我解决了这个问题。我已经写了一封电子邮件来描述这个问题，然后在得到他们的回复后，按照以下步骤操作。

1. 我创建了新的 keystore 。
2. 将该 key 的证书导出为 PEM 格式:

keytool -export -rfc -alias upload -file upload_certificate.pem -keystore keystore.jks

1. 回复了他们的电子邮件并附上了 upload_certificate.pem 文件。
2. 然后 Google 发了一封电子邮件说他们已经更新了我的 keystore ，我可以在 3 到 4 天后使用它。

3. 我使用了新生成的 keystore ，他们生成了已成功上传到 Playstore 的签名 APK。

   以下是更新 keystore 所需位置的列表

   1. 本地机器
   2. 锁定现场服务器(不同的 ACL)
   3. 云计算机(不同的 ACL)
   4. 专用 secret 管理服务
   5. (git) repo