What is the meaning of the keystore validity in Android?

Question

Can be a sign to the expiration keystore, install are also available.

ex) 1 day keystore generate.

$ keytool -genkey -v -keystore my-release-key.keystore
-alias alias_name -keyalg RSA -keysize 2048 -validity 1

ex) my-release-key.keystore already is expired.

$ jarsigner -verbose -sigalg SHA1withRSA -digestalg SHA1
-keystore my-release-key.keystore my_application.apk alias_name

App launch is also available. So, What is the meaning of the keystore validity in Android?

a long time ago, when the app is installed with expired keystore (use to adb install *.apk, not app store), i think that the app can't also launch. so... — Charming, Dec 22 '15 at 15:19

score 3 · Answer 1 · edited Jan 16 '19 at 04:25

3

this is from developer.android.com

If you plan to support upgrades for an app, ensure that your key has a validity period that exceeds the expected lifespan of that app. A validity period of 25 years or more is recommended. When your key's validity period expires, users will no longer be able to seamlessly upgrade to new versions of your application.

If you plan to publish your apps on Google Play, the key you use to sign these apps must have a validity period ending after 22 October 2033. Google Play enforces this requirement to ensure that users can seamlessly upgrade apps when new versions are available.

edited Jan 16 '19 at 04:25

Siavas

4,992
2
23
33

answered Dec 21 '15 at 07:34

Akhil Jayakumar

2,262
14
25

For a long time ago, i think that application can't launch when sign is expired. Is this policy changed? – Charming Dec 21 '15 at 08:10
if sign is expired You can't get any updates from play store – Akhil Jayakumar Dec 21 '15 at 08:35

score 2 · Accepted Answer · answered Dec 21 '15 at 07:33

2

keystore is used to validate developer's id,that is even the keystore has expired the application will work well on our android phone,it won't impress any functions about this app,but once the developer want to publish new version of this app,it can't use this keystore anymore,otherwise it will be refused by Google play,and if you use a new debug keystore to run on your device for debug,system will informs that pre app will be removed to install new one because they are not compat.

answered Dec 21 '15 at 07:33

starkshang

8,228
6
41
52

For a long time ago, i think that application can't launch when sign is expired. Is this policy changed? – Charming Dec 21 '15 at 08:10
@Charming,maybe,but I'm not sure,but now app will work well also even keystore has expired. – starkshang Dec 21 '15 at 08:13

score 0 · Answer 3 · answered Dec 21 '15 at 07:41

0

If you plan to support upgrades for an app, ensure that your key has a validity period that exceeds the expected lifespan of that app. A validity period of 25 years or more is recommended. When your key's validity period expires, users will no longer be able to seamlessly upgrade to new versions of your application.

Source: Signing your application

Read more under section Signing Considerations to understand this better.

answered Dec 21 '15 at 07:41

Viral Patel

32,418
18
82
110

For a long time ago, i think that application can't launch when sign is expired. Is this policy changed? – Charming Dec 21 '15 at 08:10
It won't stop launching if already installed I think. But play store won't allow you to upload updates. This policy had always been there its not new. – Viral Patel Dec 21 '15 at 08:57
Thank you for your answer, But a long time ago, when the app is installed with expired keystore (use to adb install *.apk, not app store), i think that the app can't also launch. so... – Charming Dec 22 '15 at 01:42

What is the meaning of the keystore validity in Android?

3 Answers3