What is the difference between Jar signer and Apk signer?

Question

As ApkSigner is available in revision 24.0.3 and higher of the Android SDK Build Tools, I have a question: What is the difference between ApkSigner and JarSigner? Why do we need ApkSigner?

Can I sign Apk in the command line for both signers?

Karat

Answer 1

jarsigner is designed for signing JAR files and does not know anything about APKs and Android, whereas apksigner is designed for signing APK files and knows what requirements Android places on APK signatures.

For example, jarsigner does not produce APK Signature Scheme v2 signatures introduced in Android 7.0 (Nougat), whereas apksigner does. Another example is that jarsigner does not know that APKs which need to run on API Level 17 or lower must not use SHA-256 digests in their signatures, whereas apksigner knows that.

If you want to sign an APK using one of these tools, use apksigner.

Here's the official documentation about signing from command-line: Sign your app

Heroworship

@KrunalKapadiya Yes. apksigner sign --ks mykeystorefile --ks-key-alias myaliasname myapkfile.apk – Glamour

Note: You cannot use apksigner to sign your app bundle. – Armagnac