On Sat, Oct 8, 2011 at 10:29 PM, Jean-François Geyelin
<[email protected]> wrote:

> My questions are:
> When you upload an update to the android market, does it check if the update
> is correctly signed ?

It does parse your apk, and checks if it is signed with a debug
certificate. It probably
doesn't check if it is signed with the same key/certificate as
previous versions.
Sounds like you didn't, but did you change your key or signing certificate?
BTW, is your app on the Amazon appstore? Amazon has been known to
counter-sign apks, so they might get an error if the installed from
Amazon and try
to update from the Market.

> If not, how can I check if the application is signed the same way as a
> previous version?

You can run the command below to check whether they have been signed
with the same certificate. If the fingerprint is the same, they have been
signed with the same cert.

$ unzip -p your-signed.apk META-INF/CERT.RSA | keytool -printcert | grep SHA1:

You can also run jarsigner with the -verbose and -certs options to see
and compare signing certificates:

$ jarsigner -verify -verbose -certs your-signed.apk

-- 
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en

Reply via email to