java - 为什么jarsigner可以签名Android apk？

Question

根据我在 Java 方面的经验，jarsigner 用于为 JAVA ARchive(JAR) 文件生成签名并验证签名的 JAR 文件的签名。

令我惊讶的是，Android 还使用 jarsigner sign the Android application package(APK)这与 JAR 格式不同。

jarsigner 是否不需要将二进制文件打包到 JAR 中？它在幕后是如何工作的？

Answer 1

APK 文件只是具有不同内容的 zip 文件。

Is there a difference between typical a ZIP file and an APK file?

来自http://docs.oracle.com/javase/7/docs/technotes/tools/windows/jarsigner.html

The JAR feature enables the packaging of class files, images, sounds, and
other digital data in a single file for faster and easier distribution. A tool
named jar enables developers to produce JAR files. 

(Technically, any zip file can also be considered a JAR file, although when 
created by the jar command or processed by the jarsigner command, JAR files
also contain a META-INF/MANIFEST.MF file.)