'Does it possible to build and upload an apk file available for Android 5/6 without the JAR v1 sign?
We have users with our Android App that have Android 5 and major and we know that there is a security patch to avoid in them the Janus vulnerability, allowing that old Android versions to accept the v2 sign of the .apk. Then, we are trying to build an .apk without the JAR v1 sign (enableV1Signing false) for Android 5 or major and the build works. But then apksigner say "DOES NOT VERIFY" and also when we try to upload the .apk to the Store it is rejected. So, does it possible to avoid the v1 sign for Android 5 or major? If not, how we can publish the app excluding the users with Android 5 and 6 who haven't the Janus security patch installed? Thanks in advance.
Sources
This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.
Source: Stack Overflow
| Solution | Source |
|---|