Android-签名密钥过期后会发生什么? [英] Android - What happens when a signing key expires?

问题描述

如果签名密钥到期，现有的apk是否拒绝安装，或者仅意味着不能使用该密钥对新应用进行签名?

If a signing key expires, do existing apks refuse to install, or does it just mean that new apps can't be signed with that key?

我们建议使用25年以上过期的密钥，并且Google Play 授权的有效期至少应为2033-10-22！但是，有些人可能希望续订出于安全原因(摩尔定律，破解的算法等)，它们的密钥 far 的使用频率更高.

We are recommended to use keys that expire in 25+ years, and Google Play mandates expiry of at least 2033-10-22! However, some people may wish to renew their keys far more frequently than that for security reasons (Moore's law, cracked algorthms, etc.).

如果apk的密钥已过期，有什么方法可以安装它(不依赖开发人员重新发布)?

If an apk's key has expired, is there any way of installing it (without relying on the developer to re-release)?

推荐答案

如果签名密钥到期，现有的apk是否拒绝安装，或者仅意味着不能使用该密钥对新应用进行签名?

If a signing key expires, do existing apks refuse to install, or does it just mean that new apps can't be signed with that key?

jarsigner将拒绝使用过期密钥，并且安装时Android会拒绝使用旧密钥签名的apk，但已安装的应用程序将继续正常运行.

jarsigner will refuse to use an expired key, and apk's signed with the old key will be refused by Android on install, but apps already installed will continue to run just fine.

https://developer.android.com/guide/publishing/app -signing.html

如果apk的密钥已过期，有什么方法可以安装它(不依赖开发人员重新发布)?

If an apk's key has expired, is there any way of installing it (without relying on the developer to re-release)?

是的，apk可以是 查看全文