Opened 10 months ago

Last modified 2 months ago

#27514 assigned task

Add instructions how to verify signatures on Android

Reported by: traumschule Owned by: traumschule
Priority: Medium Milestone:
Component: Community/Tor Support Version:
Severity: Normal Keywords:
Cc: Actual Points:
Parent ID: #30259 Points:
Reviewer: Sponsor:

Description

Child Tickets

Change History (6)

comment:1 Changed 10 months ago by traumschule

Please help to make this more useful for less advanced users:

  1. To show the applications signature you need the app Checkey. It can be installed via F-Droid or from source, if you know how to do it.
  1. APK files are signed java JAR files, so you need the application jarsigner or apksigner
jarsigner -verify -verbose -certs my_application.apk

or

apksigner: apksigner verify --print-certs application-development-release.apk

Details: https://android.stackexchange.com/questions/9312/how-can-i-verify-the-authenticity-of-an-apk-file-i-downloaded

comment:2 Changed 10 months ago by traumschule

Status: newneeds_review
Last edited 10 months ago by traumschule (previous) (diff)

comment:3 Changed 8 months ago by traumschule

Component: Webpages/WebsiteCommunity/Tor Support
Parent ID: #3893#9843
Status: needs_reviewneeds_revision

#27682 is a duplicate. Quoting towiw3:

This can potentially be used to identify Tor Browser for Android users. gnupg is not installed by default in Termux so it needs to be downloaded from Termux repository. Termux uses Cloudflare, too. It is better to use Orbot for downloading gnupg. Orbot VPN can be used to proxy Termux traffic through Tor. Orbot VPN must be used before opening Termux after installing it (of course this doesn't apply when Termux is already in use for a long time). This is not a problem when TBA is installed from Google play store; you are already identified as a TBA user and you don't verify signature if you installed TBA from Google play store.

In Termux, wget doesn't support https links, it only supports http. But curl works so we can use it for downloading the .asc file. I think it would be helpful to include how to download the .asc file in the steps.

towiw3, do you want to work on this?

Last edited 8 months ago by traumschule (previous) (diff)

comment:4 Changed 4 months ago by emmapeel

Owner: set to traumschule
Status: needs_revisionassigned

This page will be superseeded by the new website. Please submit to review the instructions for the support portal instead: #29422

comment:5 Changed 3 months ago by emmapeel

Parent ID: #9843

comment:6 Changed 2 months ago by pili

Parent ID: #30259
Note: See TracTickets for help on using tickets.