What happened to pl.net.szafraniec.NFCTagmaker?

[mmn]

Hello, I’m curious what has happened to the binaries and source packages for NFC Tag maker, browsable (but 404s on APK links) on f-droid.org: NFC Tag maker | F-Droid - Free and Open Source Android App Repository

I do see that the project is abandoned according to the README.md on upstream source repo but at least the old binaries I have work excellent and I don’t see pl.net.szafraniec.NFCTagmaker on the list of failing builds.

[NicoAlt]

Hello @mmm, welcome to the forum

@mmn

Hello, I’m curious what has happened to the binaries and source packages for NFC Tag maker, browsable (but 404s on APK links) on f-droid.org: NFC Tag maker | F-Droid - Free and Open Source Android App Repository

That’s most likely because of this one:

Many old, unmaintained apps have been archived

F-Droid relies on the standard tools for verifying the signatures of APKs, these are Oracle Java’s jarsigner and Google Android’s apksigner. Both of those tools recently disabled the MD5 algorithm used in the APK signatures which are an essential part of the security of the Android platform. That means that any APK signature that uses MD5 is now considered unsigned by jarsigner and apksigner, and unsigned APKs are considered uninstallable. That means that apps that were built a long time ago …

The apps is probably still shown on the website because we currently have problems refreshing the app list.

[klyubin]

MD5 APK signatures are still supported by Android and accepted by Google Play when you upload an APK there.

What happened with jarsigner and apksigner is that these tools use Sun/Oracle’s PKCS #7 classes to verify JAR signatures of APKs. In recent versions of Java, these classes were switched to reject MD5 signatures by default, unless special command-line parameters are provided to the JVM.

apksigner has now switched to using its own PKCS #7 codebase which accepts MD5 signatures because Android does so. Unfortunately, apksigner version 0.8 which contains this change is not yet out (as of Aug 21 2017). It will be released in the next release of Android SDK Build Tools. If you’re desperate to try it out until then, the source code is at platform/tools/apksig - Git at Google.