From 1eb7c136bffc4b21fbd09aa93622a0e98fe59a71 Mon Sep 17 00:00:00 2001 From: austinried <4966622+austinried@users.noreply.github.com> Date: Thu, 8 Oct 2026 18:08:01 +0000 Subject: [PATCH] docs: link F-Droid's signing keys and the nightly keystore --- signing/README.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/signing/README.md b/signing/README.md index 9a324848..4578ddba 100644 --- a/signing/README.md +++ b/signing/README.md @@ -4,8 +4,8 @@ subtracks ships through four channels: - **GitHub releases** — the APK and the AAB are signed with the release key. The public certificate is committed here as [`release-certificate.pem`](release-certificate.pem) and attached to each release, along with a `SHA256SUMS`. - **Google Play** — uses Play App Signing, so Google re-signs the app it delivers. The release key is only the *upload* key there: it signs the AAB we send to Play, not the APK users install. The installed app verifies against Google's app signing certificate (Play Console → App integrity), and the upload key only proves the AAB we uploaded. -- **F-Droid** — re-signed by F-Droid with its own key; see F-Droid's published signing key. -- **`nightly` builds** (the `subtracks-nightly` artifact from CI) — signed with the public debug key committed here as [`nightly-certificate.pem`](nightly-certificate.pem). +- **F-Droid** — re-signed by F-Droid with its own key; see [F-Droid's signing keys](https://f-droid.org/docs/Release_Channels_and_Signing_Keys/). +- **`nightly` builds** (the `subtracks-nightly` artifact from CI) — signed with the public debug key committed at [`app/debug.keystore`](../app/debug.keystore), whose certificate is [`nightly-certificate.pem`](nightly-certificate.pem). ## GitHub releases @@ -38,7 +38,7 @@ keytool -printcert -jarfile app-release.aab ## `nightly` builds -Certificate SHA-256: +The signing key is the committed [`app/debug.keystore`](../app/debug.keystore) (a public key: alias `androiddebugkey`, password `android`). Certificate SHA-256: ``` DF:31:3F:18:58:E9:AD:F4:7F:44:65:B2:80:8F:DC:E5:B9:F8:8A:48:35:DC:D0:79:95:19:61:C3:05:05:08:37