5 ms·
I have a few apps in the marketplace that I made on my old pc years ago. The keys I used to sign the apps weren't lost, unfortunately, the original Android ecli
by dazbradbury 15y ago
I have a few apps in the marketplace that I made on my old pc years ago. The keys I used to sign the apps weren't lost, unfortunately, the original Android eclipse plugin was signing my apps as part of my build process (I think they have fixed that now).
I wiped the machine, and hey presto, I can't update those apps anymore. I was shocked there was no workaround, and it seems Google have been hit by this now also. At least they're sticking to their own policy I guess, I'm sure they could update the app if they really wanted to.
- r00fus 15y agoWouldn't it be impossible for them (assuming proper PKI implementation) for them to regenerate the signing key once lost? ie, you lose it, it's gone... the way it should be.
- sk5t 15y agoProper PKI doesn't exclude key escrow... but Google would have little interest in trying to support the process to keep that secure.
- deleted 15y ago[deleted]
- tedunangst 15y agoCan you explain some more? You lost the keys or you didn't? If you didn't, why can't you sign the apps?
- dazbradbury 15y agoSorry, let me elaborate. I have the keys I purposefully signed the apps with. I would export the apk from eclipse, and sign it, submit it. However, as part of the eclipse build, eclipse was signing the apk. Therefore it ended up signed by TWO keys. When I re-installed eclipse, this hidden key that I wasn't aware of was lost. I couldn't submit to the Android market without the app being signed by BOTH keys. That is what I found strange...