How to resolve invalid SHA1 signature when signing the Android app?

Question

When I verify the signature of my application:

jarsigner -verify -verbose -certs testapp.apk

it gives me the error:

jarsigner: java.lang.SecurityException: invalid SHA1 signature file digest for res/drawable-xhdpi/breadcrumb_grey_white.png

How to resolve this?

Answer 1

make sure to delete the META_INF folder in the apk before signing it. Also, if you are using JDK 7, then include the the option -sigalg MD5withRSA when signing with the jarsigner along with -digestalg SHA1 mentioned by Andrejs

Answer 2

Ripped from here.

Here is the solution:

jarsigner -keystore mykeystore -digestalg SHA1 jarfile alias

To verify:

jarsigner -verify -verbose -certs jarfile