Bug #3199

Fdroidserver doesn't check for existing keys properly

Added by Anonymous almost 4 years ago. Updated almost 4 years ago.

Status:ClosedStart date:04/04/2014
Priority:NormalDue date:
Assignee:-% Done:

0%

Category:-
Target version:improved security/usability
Component:

Description

When publishing an APK it says:

keytool -list -alias 2c4b2d89 -keystore /home/gerry/.local/share/fdroidserver/keystore.jks -storepass:file KEYSTORE_PASSWORD

whereas it probably should be

keytool -list -alias 2c4b2d89 -keystore /home/gerry/.local/share/fdroidserver/keystore.jks -storepass:file .fdroid.keystorepass.txt

Fdroid.org don't seem to have a problem publishing APKs lately though.

History

#1 Updated by daithib8 almost 4 years ago

This means that fdroidserver tries to generate a new key each time, but obviously it can't.

#2 Updated by hans almost 4 years ago

  • Status changed from New to Feedback
  • Target version set to improved security/usability

#3 Updated by daithib8 almost 4 years ago

Great work. May I suggest adding Java 7 requirement to the manual? Was always needed for signed fdroid update anyway.

#4 Updated by hans almost 4 years ago

  • Status changed from Feedback to Closed

Ciaran fixed it separately in commit e4ad1743999a876b56c679aff0f00da308630bb8:
https://gitlab.com/eighthave/fdroidserver/commit/e4ad1743999a876b56c679aff0f00da308630bb8

Also available in: Atom PDF