"APK Signature Scheme v2" is supported only by "apksigner" not by "jarsigner"

Question

We use HSM for APK signing and in order to support new "APK Signature Scheme v2" do we need to use apksigner going forward to support both Scheme 1 & 2?

jarsigner - supports only "APK Signature Scheme v1" (JAR-based signing scheme)

apksigner - supports both "APK Signature Scheme v1 & V2"

Answer 1

Yes, you'll need to switch away from jarsigner.

jarsigner is for signing JAR files. Thus, I don't believe jarsigner will ever support APK Signature Scheme v2 -- it just would not make sense. You'll need to use apksigner or other tools which support APK Signature Scheme v2.

There's also the apksig library on top of which apksigner is built. If you need a custom tool for signing APKs, you could build your own tool on top of this library.