test APK signatures with a cert chain are parsed like apksigner

Browse source

Microsoft and SanDisk sign APKs with a X.509 certificate chain of
trust, so there are actually three certificates included. apksigner
only cares about one certificate and ignores the other certificates in
the chain.

The correct values come from:

    apksigner verify --print-certs 883cbdae7aeb2e4b122e8ee8d89966c7062d0d49107a130235fa220a5b994a79.apk

X.509 certificates are machine generated and just data, so are not
copyrightable.  So I included SANAPPSI.* directly.

...

This commit is contained in:

Hans-Christoph Steiner 2024-04-19 12:49:02 +02:00

parent accdd65f91

commit fc4a9c96a5

4 changed files with 2067 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

BIN

tests/SANAPPSI.RSA Normal file

View file

Binary file not shown.