Re: verifying reproducible APKs: apksigcopier

2021-04-16 Thread Hans-Christoph Steiner
Great work, Felix! We're also rolling this out to our whole CI testing setup to make it easy for app developers to create and publish reproducible APKs. It should now be possible to submit an app to F-Droid via merge request to https://gitlab.com/fdroid/fdroiddata/-/merge_requests And the

Re: verifying reproducible APKs: apksigcopier

2021-04-15 Thread Felix C. Stegerman
Hi! I just released v0.5.0 of apksigcopier, which is the same code that has now also been merged into fdroidserver master as a vendored library. I've also uploaded a Debian source package to mentors.debian.net, which is now awaiting Holger's sponsorship. - Felix

Re: verifying reproducible APKs: apksigcopier

2021-03-31 Thread Felix C. Stegerman
Hi Torsten, * Torsten Grote [2021-03-31 16:58]: > On Sunday, 28 March 2021 22:02:33 -03 Felix C. Stegerman wrote: > > apksigcopier [2], a tool to copy APK signatures > > from a signed APK to an unsigned one. > > What kind of signatures does the tool support (couldn't find > this in the

Re: verifying reproducible APKs: apksigcopier

2021-03-31 Thread Torsten Grote
On Sunday, 28 March 2021 22:02:33 -03 Felix C. Stegerman wrote: > apksigcopier [2], a tool to copy APK signatures > from a signed APK to an unsigned one. Great news and great work! What kind of signatures does the tool support (couldn't find this in the README)? v1, v2 and v3? Kind Regards,

Re: verifying reproducible APKs: apksigcopier

2021-03-29 Thread Holger Levsen
Hi Felix, On Mon, Mar 29, 2021 at 03:02:33AM +0200, Felix C. Stegerman wrote: > The F-Droid reproducible builds & verification effort recently led [1] > to the development of apksigcopier [2], a tool to copy APK signatures > from a signed APK to an unsigned one. nice, that seems very useful! :)

verifying reproducible APKs: apksigcopier

2021-03-28 Thread Felix C. Stegerman
Hi! The F-Droid reproducible builds & verification effort recently led [1] to the development of apksigcopier [2], a tool to copy APK signatures from a signed APK to an unsigned one. ( I've started packaging it for Debian [3] and intend to file an ITP soon, but since I'm not a Debian developer