Android - 签名密钥过期时会发生什么? [英] Android - What happens when a signing key expires?

问题描述

如果签名密钥过期，现有的 apk 会拒绝安装，还是仅仅意味着新应用无法使用该密钥进行签名?

If a signing key expires, do existing apks refuse to install, or does it just mean that new apps can't be signed with that key?

我们建议使用 25 年以上过期的密钥，并且 Google Play 要求至少在 2033-10-22 过期！但是，有些人可能希望续订出于安全原因(摩尔定律、破解算法等)，他们的密钥远比密钥更频繁.

We are recommended to use keys that expire in 25+ years, and Google Play mandates expiry of at least 2033-10-22! However, some people may wish to renew their keys far more frequently than that for security reasons (Moore's law, cracked algorthms, etc.).

如果一个apk的key已经过期了，有没有办法安装(不依赖开发者重新发布)?

If an apk's key has expired, is there any way of installing it (without relying on the developer to re-release)?

推荐答案

如果签名密钥过期，现有的 apk 会拒绝安装，还是仅仅意味着新应用无法使用该密钥进行签名?

If a signing key expires, do existing apks refuse to install, or does it just mean that new apps can't be signed with that key?

jarsigner 将拒绝使用过期的密钥，并且使用旧密钥签名的 apk 将在安装时被 Android 拒绝，但已安装的应用程序将继续正常运行.

jarsigner will refuse to use an expired key, and apk's signed with the old key will be refused by Android on install, but apps already installed will continue to run just fine.

https://developer.android.com/guide/publishing/app-signing.html

如果一个apk的key已经过期了，有没有办法安装(不依赖开发者重新发布)?

If an apk's key has expired, is there any way of installing it (without relying on the developer to re-release)?

是的，apk 可以是 用您自己的证书辞职.

Yes, the apk can be resigned with your own certificate.

这篇关于Android - 签名密钥过期时会发生什么?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！