我的自签名 APK 被 Play Protect 屏蔽了

问题描述

我是使用 Windows 7 X64 的家庭用户。我的签名 APK 有问题。
我的应用程序仅供家庭使用和学习。我不会提交到 Google Play。
安装后显示

已被 Play Protect 屏蔽。
Play 保护机制无法识别此应用的开发者。
来自未知开发者的应用有时可能不安全。

工具：

keytool.exe    v8.0.3019.9
openssl.exe    v1.1.1k
zipalign.exe   v29.0.3
apksigner.jar  v29.0.3

批处理脚本：

cls


del /f KEY.JKS
del /f KEY.PEM
del /f KEY.PK8
del /f CERT.PEM


"C:\Program Files\Java\jre1.8.0_301\bin\keytool.exe" -genkeypair -v -alias MYKEY -storepass 123456 -keypass 123456 -keystore KEY.JKS -keyalg RSA -keysize 2048 -validity 9999 -dname "EMAILADDRESS=[e-mail],CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US"

openssl.exe    req    -x509   -nodes    -days 9999   -newkey rsa:2048  -keyout KEY.PEM  -out CERT.PEM  -subj "/C=US/ST=California/L=Mountain View/O=Android/OU=Android/CN=Android/emailAddress=[e-mail]"  -config openssl.cnf
openssl.exe    pkcs8  -topk8  -nocrypt  -inform PEM  -outform DER      -in KEY.PEM      -out KEY.PK8


zipalign.exe   -f -p 4   myApp.apk  myApp_Align.apk


rem java -jar apksigner.jar  sign    --ks  KEY.JKS  --ks-pass pass:123456  --out myApp_Signed.apk  myApp_Align.apk
    java -jar apksigner.jar  sign    --key KEY.PK8  --cert CERT.PEM        --out myApp_Signed.apk  myApp_Align.apk

    java -jar apksigner.jar  verify  -v  --print-certs                           myApp_Signed.apk


pause

我的密钥被屏蔽了：

Verified using v1 scheme (JAR signing): true
Verified using v2 scheme (APK Signature Scheme v2): true
Verified using v3 scheme (APK Signature Scheme v3): true
Number of signers: 1
Signer #1 certificate DN: EMAILADDRESS=[e-mail],C=US
Signer #1 certificate SHA-256 digest: 07d51277869be18dfe8618d797ad1c0c8e16b7c067d9d224962af960c0382bfb
Signer #1 certificate SHA-1 digest: 85789690f7f12d0d6f4c7f67adb96429c326049f
Signer #1 certificate MD5 digest: 13b9633388142f4d40295cd45ac65aa9
Signer #1 key algorithm: RSA
Signer #1 key size (bits): 2048
Signer #1 public key SHA-256 digest: bb280251b6eb2a1dd5e2493a3ac23881e254274318a2247bce84fd067181c441
Signer #1 public key SHA-1 digest: b2be0f31d13ce91162bf7ccf9fa4662e7c47b2d6
Signer #1 public key MD5 digest: 9648bca600a81a383cffd490a8614852

我从互联网上下载了一些 APK，但没有被阻止。

Verified using v1 scheme (JAR signing): true
Verified using v2 scheme (APK Signature Scheme v2): true
Verified using v3 scheme (APK Signature Scheme v3): false
Number of signers: 1
Signer #1 certificate DN: EMAILADDRESS=[e-mail],C=US
Signer #1 certificate SHA-256 digest: a40da80a59d170caa950cf15c18c454d47a39b26989d8b640ecd745ba71bf5dc
Signer #1 certificate SHA-1 digest: 61ed377e85d386a8dfee6b864bd85b0bfaa5af81
Signer #1 certificate MD5 digest: e89b158e4bcf988ebd09eb83f5378e87
Signer #1 key algorithm: RSA
Signer #1 key size (bits): 2048
Signer #1 public key SHA-256 digest: ef57b690165cb561b5026922c00d2d6574e8b184fa7d161e076f06e06e6d35db
Signer #1 public key SHA-1 digest: 0c2440c055c753a8f0493b4e602d3ea0096b1023
Signer #1 public key MD5 digest: 452f8cfe026b30a8a3e99a6074e5f285

我从互联网下载了 KEY.PK8 和 CERT.PEM，但没有被阻止。

Verified using v1 scheme (JAR signing): true
Verified using v2 scheme (APK Signature Scheme v2): true
Verified using v3 scheme (APK Signature Scheme v3): true
Number of signers: 1
Signer #1 certificate DN: EMAILADDRESS=[e-mail],CN=Lorensius W. L. T,OU=AndroidDev,O=Londatiga,L=Bandung,ST=Jawa Barat,C=ID
Signer #1 certificate SHA-256 digest: 518ac8bdaf0c767deb31bae1eba826adbef793a68f22784cf3e19c67ba87ecb9
Signer #1 certificate SHA-1 digest: ece521e38c5e9cbea53503eaef1a6ddd204583fa
Signer #1 certificate MD5 digest: eea6f6f40858b8215c48b0465fe479b8
Signer #1 key algorithm: RSA
Signer #1 key size (bits): 1024
Signer #1 public key SHA-256 digest: d8dc2ef9b37fcb543b07678a2d64d3a1dc5122642ee824a61dfbed0bf86d25c4
Signer #1 public key SHA-1 digest: 74bd7b456d9e651fc84446f65041bef1207c408d
Signer #1 public key MD5 digest: 58d291bc49e568eb8fc84dabaf508d08

我的步骤有什么问题？我切换到密钥库（KEY.JKS），它也不起作用。

解决方法

除非谷歌知道您密钥的指纹或 APK 本身是用谷歌密钥签名的，否则它会被 Play Protect 标记为“未知开发者”。您可以通过在 google play 上提交由该特定密钥签名的应用程序来“验证”您的密钥