Opened 13 months ago

Closed 6 weeks ago

#27514 closed task (duplicate)

Add instructions how to verify signatures on Android

Reported by: traumschule Owned by: traumschule
Priority: Medium Milestone:
Component: Community/Tor Support Version:
Severity: Normal Keywords: docshackathon
Cc: Actual Points:
Parent ID: #30259 Points:
Reviewer: Sponsor:

Description

Child Tickets

Change History (9)

comment:1 Changed 13 months ago by traumschule

Please help to make this more useful for less advanced users:

  1. To show the applications signature you need the app Checkey. It can be installed via F-Droid or from source, if you know how to do it.
  1. APK files are signed java JAR files, so you need the application jarsigner or apksigner
jarsigner -verify -verbose -certs my_application.apk

or

apksigner: apksigner verify --print-certs application-development-release.apk

Details: https://android.stackexchange.com/questions/9312/how-can-i-verify-the-authenticity-of-an-apk-file-i-downloaded

comment:2 Changed 13 months ago by traumschule

Status: newneeds_review
Last edited 12 months ago by traumschule (previous) (diff)

comment:3 Changed 10 months ago by traumschule

Component: Webpages/WebsiteCommunity/Tor Support
Parent ID: #3893#9843
Status: needs_reviewneeds_revision

#27682 is a duplicate. Quoting towiw3:

This can potentially be used to identify Tor Browser for Android users. gnupg is not installed by default in Termux so it needs to be downloaded from Termux repository. Termux uses Cloudflare, too. It is better to use Orbot for downloading gnupg. Orbot VPN can be used to proxy Termux traffic through Tor. Orbot VPN must be used before opening Termux after installing it (of course this doesn't apply when Termux is already in use for a long time). This is not a problem when TBA is installed from Google play store; you are already identified as a TBA user and you don't verify signature if you installed TBA from Google play store.

In Termux, wget doesn't support https links, it only supports http. But curl works so we can use it for downloading the .asc file. I think it would be helpful to include how to download the .asc file in the steps.

Version 0, edited 10 months ago by traumschule (next)

comment:4 Changed 6 months ago by emmapeel

Owner: set to traumschule
Status: needs_revisionassigned

This page will be superseeded by the new website. Please submit to review the instructions for the support portal instead: #29422

comment:5 Changed 5 months ago by emmapeel

Parent ID: #9843

comment:6 Changed 5 months ago by pili

Parent ID: #30259

comment:8 Changed 6 weeks ago by ggus

Keywords: docshackathon added

comment:9 Changed 6 weeks ago by ggus

Resolution: duplicate
Status: assignedclosed
Note: See TracTickets for help on using tickets.