Nge-Play App Signing, i-Google iphatha iphinde ivikele ukhiye wakho wokusayinda i-app yakho iphinde iwusebenzisele ukusayinda ama-APK alungiselelwe, okusatshalaliswa akhiqizwa kuzinqwaba ze-app yakho. Ukusayina nge-App ye-Play kugcina ukhiye wakho wokusayinda kungqalasizinda ephephile ye-Google kuphinde kunikeze ngezinketho zokuthuthukisa ukuze zikhulise ukuphepha.
Ukuze usebenzise i-Play App Signing, udinga ukuthi ube umnikazi we-akhawunti noma umsebenzisi onemvume Yokukhiphela ekukhiqizeni, yokungahlanganisi amadivayisi, kanye nokusebenzisa imvume ye-Play App Signing, futhi kudingeka wamukele Imigomo Yesevisi ye-Play App Signing.
Isebenza kanjani
Uma usebenzisa i-Play App Signing, okhiye bakho bagcinwa kungqalasizinda ephephile efanayo naleyo i-Google eyisebenzisela ukugcina okhiye bayo. Okhiye bavikelwe isevisi yokuphathwa kokhiye be-Google. Uma ufuna ukufunda kabanzi mayelana nengqalasizinda ye-Google, funda amaphepha amhlophe okuvikela kwe-Google Cloud.
Izinhlelo zokusebenza ze-Android zisayinwa ngokhiye ogodliwe. Ukuze uqinisekise ukuthi izibuyekezo ze-app zinokwethenjelwa, wonke ukhiye ogodliwe unesitifiketi ezihlotshaniswayo esisesidlangalaleni esisetshenziswa amadivayisi namasevisi ukuze siqinisekise ukuthi isibuyekezo se-app sivela emthonjeni ofanayo. Amadivayisi amukela kuphela izibuyekezo uma isiginesha yawo ifana nesiginesha yohlelo lokusebenza olufakiwe. Ngokuvumela i-Google ukuthi iphathe ukhiye wokusayinda, lokho kwenza le nqubo ivikeleke kakhulu.
Qaphela: Ngama-app adalwe ngaphambi kuka-Agasti 2021, usengalayisha i-APK uphinde uphathe okhiye bakho esikhundleni sokusebenzisa i-Play App Signing nokushicilela Ngenqwaba ye-App ye-Android. Kodwa, uma ulahlekelwa i-keystore yakho noma yonakaliswa, ngeke uze ukwazi ukubuyekeza uhlelo lwakho lokusebenza ngaphandle kokushicilela uhlelo lokusebenza olusha olunegama lephakheji elisha. Kulama-app, i-Play incoma ukusebenzisa i-Play App Signing nokushintshela kunqwaba ye-app.
Izincazelo zokhiye, ama-artifact, namathuluzi| Umgomo | Incazelo |
|---|---|
| Ukhiye wokusayinda |
Ukhiye osetshenziswa i-Google Play ukuze isayinde ama-APK alethwa kudivayis yomsebenzisi. Uma usebenzisa i-Play App Signing, ungalayisha ukhiye wokusayinda i-app osukhona kakade noma wenze i-Google ikukhiqizele omunye. Gcina ukhiye wakho wokusayinda uyimfihlo, kodwa ungakwazi ukwabelana ngesitifiketi esisesidlangalaleni se-app yakho nabanye. |
| Layisha ukhiye |
Ukhiye owusebenzisela ukusayina inqwaba ye-app yakho ngaphambi kokuthi uyilayishe ku-Google Play. Gcina ukhiye wakho wokulayisha uyimfihlo, kodwa ungabelana ngesitifiketi sakho esisesidlangalaleni se-app nabanye. Ngezizathu zokuvikela, kungumbono omuhle wokuba nokhiye wokusayinda uhlelo lokusebenza kanye nokhiye bokulayisha abahlukile kwabanye. Kukhona izindlela ezimbili zokulayisha ukhiye:
|
Isitifiketi se-(.der noma se-.pem) |
Isitifiketi siqukethe ukhiye osesidlangalaleni nolwazi olungeziwe lokukhomba olumayelana nokuthi ubani ongumnikazi wokhiye. Isitifiketi sokhiye osesidlangalaleni sivumela noma ubani aqinisekise ukuthi ubani osayinda inqwaba yohlelo lokusebenza noma i-APK, futhi ungabelana ngaso nanoma nobani ngoba asifaki ukhiye wakho wobumfihlo. Ukuze ubhalise u(o)khiye wakho kubahlinzeki be-API, ungadawuniloda isitifiketi esisesidlangalaleni ukuze uthole ukhiye wokusayina nge-app bese uthola ukhiye wakho wokulayisha ekhasini elithi Ukusayina nge-App ye-Play (Ukukhulula > Ukusetha > Ukusayina nge-app) ku-Play Console. Isitifiketi sokhiye osesidlangalaleni singabelwa nanoma ubani. Asifaki ukhiye ogodliwe wakho. |
| Izigxivizo zeminwe zesitifiketi |
Okuqokelwe ukumela okunye okumfushane nokuhlukile kwesitifiketi okuvamise ukucelwa abahlinzeki be-API ngegama lephakheji lokubhalisa uhlelo lokusebenza ukuze lusebenzise isevisi yalo. Izigxivizo zeminwe ze-MD5, SHA-1 ne-SHA-256 zokulayisha nezitifiketi zokusayina nge-app zingatholwa ekhasini elithi Play App Signing (Ukukhulula > Ukusetha > Ukusayina nge-app) ku-Play Console. Ezinye izigxivizo zeminwe zingaphinda zifakwe kukhompyutha ngokudawuniloda isitifiketi sangempela ( |
I-Java keystore (.jks noma i-.keystore) |
Ikhosombe lezitifiketi zokuvikela nokhiye abayimfihlo. |
| Ukhiye Ogodliwe Wokubethela we-Google Play (PEPK) |
Ithuluzi lokuthumela okhiye bokumfihlo kusukela ku-Java keystore baphinde bawabethele ukuze badluliselwe ku-Google Play. Uma unikeza ukhiye wokusayinda ukuze usetshenziswe i-Google, khetha inketho yokuthumela nokulayisha ukhiye wakho (kanye nesitifiketi sawo esisesidlangalaleni uma kudingeka) uphinde ulandele imiyalo yokulanda nokusebenzisa ithuluzi. Uma uncamela, ungalanda, ubuyekeze, uphinde usebenzise ikhodi yomthombo ovumelekile wethuluzi le-PEPK. |
Nakhu ukuthi inqubo isebenza kanjani:
- Sayina inqwaba ye-app futhi uyilayishe ku-Play Console.
- I-Google ikhiqiza ama-APK alungiselelwe kusukela kunqwaba ye-app yakho iphinde iwasayinde ngokhiye wokusayinda.
- I-Google isebenzisa i-apksigner ukwengeza izitembu ezimbili ku-manifest ye-app yakho (
com.android.stamp.sourcekanye ne-com.android.stamp.type) bese usayinda ama-APK ngokhiye wakho wokusayinda. Izitembu ezifakwe nge-apksigner zikwenza ukwazi ukulandlela ukuthi ubani osayinde ama-APK. - I-Google iletha ama-APK asayindiwe kubasebenzisi.
Setha futhi uphathe i-Play App Signing
Uma i-app yakho ingakasebenzisi i-Play App Signing okwamanje, landela imiyalelo engezansi.
Isinyathelo 1: Dala ukhiye wokulayisha
- Ngemva kwale miyalelo, dala ukhiye wokulayisha.
- Sayinda inqwaba ye-app yakho ngokhiye wokulayisha.
Isinyathelo 2: Lungiselela ukukhishwa kwakho
- Landela imiyalelo ukuze ulungiselele uphinde ukhiphe ukukhishwa kwakho.
- Ngemuva kokukhetha ithrekhi yokukhishwa, isigaba "Sobuqotho be-app" sibonisa isimo se-Play App Signing ye-app yakho.
- Ukuze uqhubeke ngokhiye wokusayinda okhiqizwe yi-Google, layisha inqwaba ye-app yakho. Ngakolunye uhlangothi, ungakhetha Ukushintsha ukhiye wokusayinda ukuze ufinyelele lezi zinketho ezilandelayo:
- Sebenzisa ukhiye wokusayinda i-app okhiqizwe yi-Google: Ngaphezu kuka-90% wama-app amasha asebenzisa okhiye bokusayinda i-app abakhiqizwe yi-Google. Ukusebenzisa ukhiye okhiqizwe nge-Google kuyavikela ekulahlekelweni noma ekudeleni (ukhiye awudawunilodeki). Uma ukhetha lokhu okukhethwa kukho, ungadawuniloda ama-APK wokusabalalisa kusuka kokuthi Isihloli senqwaba ye-app asayinwe ngokhiye okhiqizwe i-Google wezinye iziteshi zokusabalalisa, noma usebenzise ukhiye ohlukile wawo.
- Sebenzisa ukhiye wokusayinda i-app ohlukile: Ukukhetha ukhiye wokusayinda i-app kukuvumela ukuthi usebenzise ukhiye ofanayo nenye i-app ku-akhawunti yakho yonjiniyela noma ugcine ikhophi yasendaweni yokhiye wakho wokusayinda mayelana nokuguquguquka okuthe xaxa. Ngokwesibonelo, kungenzeka ukuthi usunokhiye onqunyiwe ngoba i-app yakho ifakwe kusengaphambili kwamanye amadivayisi. Ukuba nekhophi yokhiye wakho ngaphandle kwamaseva we-Google kukhuphula ubungozi uma kwenzeka ikhophi yasendaweni iba sengcupheni. Unezinketho ezilandelayo zendlela yokusebenzisa ukhiye ohlukile:
- Sebenzisa ukhiye wokusayinda ofanayo njengenye i-app kule akhawunti kanjiniyela
- Khipha futhi ulayishe ukhiye kusuka ku-Java keystore
- Khipha futhi ulayishe ukhiye (ungasebenzisi i-Java Keystore)
- Khetha ukuphuma ku-Play App Signing (kufanele ukhethe le nketho kuphela uma uhlela ukuthuthukisa ukhiye wakho wokusayinda nge-app ukuze ubhalise ku-Play App Signing).
- Qedela imiyalelo esele ukuba ulungiselele futhi ukhiphe ukukhishwa kwakho.
Qaphela: Kuzomele wamukele Imigomo Yesevisi uphinde ukhethe ukungena ekusayindeni uhlelo lokusebenza ukuze uqhubeke.
Isinyathelo 3: Bhalisa ukhiye wakho wokusayinda ngabahlinzeki be-API
Uma i-app yakho isebenzisa noma yimaphi ama-API, ngokuvamile kudingeka ubhalise ukhiye wakho wokusayinda i-app nawo ngezinjongo zokufakazela ubuqiniso usebenzisa isigxivizo somunwe sesitifiketi. Nakhu lapho ungathola khona isitifiketi:
- Vula i-Play Console bese uya ekhasini elithi Ukusayina nge-App ye-Play (Ukukhulula > Ukusetha > Ukusayina nge-app).
- Ithiphu: Ungafinyelela leli khasi ngokusebenzisa ikhasi elithi Ubuqotho be-app (Khulula > Ubuqotho be-app), eliqukethe amasevisi obuqotho nokusayina akusiza uqinisekise ukuthi abasebenzisi bajabulela ama-app akho namageyimu ngendlela oyihlelile.
- Skrola uye esigabeni esithi “Isitifiketi sokhiye wokusayina nge-app” bese ukopisha izigxivizo zeminwe (i-MD5, i-SHA-1, ne-SHA-256) zesitifiketi sakho sokusayina nge-app.
- Uma umhlinzeki we-API adinga uhlobo oluhlukile lwezigxivizo zeminwe, ungaphinda ulande isitifiketi sangempela kufomethi ye-
.deruphinde usiguqule usebenzisa amathuluzi okuguqula adingwa umhlinzeki we-API.
- Uma umhlinzeki we-API adinga uhlobo oluhlukile lwezigxivizo zeminwe, ungaphinda ulande isitifiketi sangempela kufomethi ye-
Uma usebenzisa ukhiye okhiqizwe yi-Google, i-Google iwukhiqiza ngokuzenzakalelayo ukhiye we-RSA cryptographic oqinile ongu-4096 bits. Uma ukhetha ukulayisha ukhiye wakho wokusayinda i-app, khona-ke kumelwe kube ukhiye we-RSA ongu-2048 bits noma ngaphezulu.
Isinyathelo 1: Lungiselela i-Play App Signing
- Vula i-Play Console bese uya ekhasini elithi Ukusayina nge-App ye-Play (Ukukhulula > Ukusetha > Ukusayina nge-app).
- Ithiphu: Ungafinyelela leli khasi ngokusebenzisa ikhasi elithi Ubuqotho be-app (Khulula > Ubuqotho be-app), eliqukethe amasevisi obuqotho nokusayina akusiza uqinisekise ukuthi abasebenzisi bajabulela ama-app akho namageyimu ngendlela oyihlelile.
- Uma ungakenzi kanjalo, buyekeza Imigomo Yesevisi Yokusayina nge-App yePlay uphinde ukhethe okuthi Yamukela.
Isinyathelo 2: Thumela ikhophi yokhiye wakho wangempela ku-Google bese udala ukhiye wokulayisha
- Thola ukhiye wakho wokusayinda wangempela
- Vula i-Play Console bese uya ekhasini elithi Ukusayina nge-App ye-Play (Ukukhulula > Ukusetha > Ukusayina nge-app).
- Khetha inketho yokuthumela neyokulayisha efanelana kangcono nenqubo yakho yokukhulula bese ulayisha ukhiye okhona wokusayina nge-app.
Isinyathelo 3: Dala ukhiye wokulayisha (okungakhethwa nokunconyiwe)
- Dala ukhiye wokulayisha uphinde ulayishe isitifiketi ku-Google Play.
- Ungaphinda uqhubeke usebenzise ukhiye wokusayinda njengokhiye wakho wokulayisha.
- Kopisha izigxivizo zeminwe (i-MD5, SHA-1, ne-SHA-256) zesitifiketi sakho sokusayinda uhlelo lokusebenza.
- Ngezinjongo zokuhlola, ungadinga ukubhalisa isitifiketi sakho sokulayisha ngabahlinzeki be-API usebenzisa isitifiketi sezigxivizo zeminwe kanye nokhiye wokusayinda.
Isinyathelo 4: Sayina isibuyekezo se-app yakho esilandelayo ngokhiye wokulayisha
Uma ukhipha izibuyekezo ze-app yakho, kuzomele uzisayinde ngokhiye wakho wokulayisha.
- Uma ungazange ukhiqize ukhiye omusha wokulayisha: Qhubeka usebenzise ukhiye wakho wokusayinda wangempela ukuze usayine izinqwaba ze-app ngaphambi kokuthi uzilayishe ku-Google Play. Uma ulahlekelwa ukhiye wakho wangempela wokusayinda i-app, ungakhiqiza ukhiye omusha wokulayisha uphinde uwubhalise nge-Google ukuze uqhubeke ubuyekeze i-app yakho .
- Uma ukhiqize ukhiye wakho wokulayisha omusha: Sebenzisa ukhiye wakho wokulayisha omusha ukuze usayine izinqwaba ze-app ngaphambi kokuthi uzilayishe ku-Google Play. I-Google isebenzisa ukhiye wokulayisha ukuze iqinisekise ubunikazi bakho. Uma ulahlekelwa ukhiye wakho wokulayisha, ungaxhumana nosekelo ukuze uwusethe kabusha.
Ungase ufune ukuwenza uma ungakwazi ukwabelana ngokhiye wakho okhona. Ngaphambi kokuthi ukhethe ukuthuthukisa ukhiye wakho wokusayinda nge-app ukuze ubhalise, qaphela ukuthi:
- Le nketho izodinga ukukhishwa okukabili.
- Kuzodingeka ulayishe inqwaba ye-app kanye ne-APK esayinwe ngokhiye wakho wefa kukho konke ukukhishwa. I-Google Play izosebenzisa izinqwaba ze-app yakho ukwenza ama-APK asayindwe ngokhiye omusha wamadivayisi aku-Android R* (API ileveli 30) noma yakamuva. Ama-APK akho efa azosetshenziselwa ukukhishwa okudala kwe-Android (kuze kufike ku-API ekuleveli 29).
*Uma i-app yakho isebenzisa i-sharedUserId, kunconywa ukuthi usebenzise ukuthuthukiswa kokhiye ekufakweni nezibuyekezo kumadivayisi asebenzisa i-Android T (i-API enguleveli 33) noma yakamuva. Ukuze ulungiselele lokhu, sicela usethe ubuncane bohlobo lwe-SDK enembile ekulungiselelweni kwenqwaba.
Isinyathelo 1: Layisha ukhiye wakho omusha futhi ukhiqize bese ulayishe ubufakazi bokuzungeziswa
Ukuze ukhiye omusha uthenjwe kumadivayisi e-Android, kufanele ulayishe ukhiye wokusayinda omusha kusukela ekhosombeni, futhi ukhiqize bese ulayisha ubufakazi bokuzungeziswa:
- Vula i-Play Console bese uya ekhasini elithi Ukusayina nge-App ye-Play (Ukukhulula > Ukusetha > Ukusayina nge-app).
- Ithiphu: Ungafinyelela leli khasi ngokusebenzisa ikhasi elithi Ubuqotho be-app (Khulula > Ubuqotho be-app), eliqukethe amasevisi obuqotho nokusayina akusiza uqinisekise ukuthi abasebenzisi bajabulela ama-app akho namageyimu ngendlela oyihlelile.
- Khetha ithebhu ethi Ukusayina nge-app.
- Chofoza okuthi Bonisa izinketho ezithuthukile, bese ukhetha okuthi Sebenzisa ukhiye omusha wokusayinda nge-app (lokhu kudinga ukukhishwa okukabili okuqhubekayo).
- Khetha ukusebenzisa ukhiye wokusayinda nge-app ofanayo njengenye i-app ku-akhawunti yakho kanjiniyela, noma ukulayisha ukhiye wokusayinda nge-app omusha kusukela ku-Android Studio, i-Java KeyStore, noma elinye ikhosombe.
- Ulandela imiyalelo esesikrinini, dawuniloda futhi usebenzise ithuluzi le-PEPK.
- Lapho i-ZIP yakho isilungile, chofoza okuthi Layisha i-ZIP ekhiqiziwe bese uyilayisha ku-Play Console.
- Eduze no-"5. Vumela ukhiye omusha ukuba uthenjwe kumadivayisi we-Android ngokulayisha ubufakazi bokuzungeziswa," chofoza okuthi Bonisa imiyalelo.
- Dawuniloda i-APKSigner bese ukhiqiza ubufakazi bokuzungeziswa ngokuqalisa lo myalo:
$ apksigner rotate --out /path/to/new/file --old-signer --ks old-signer-jks --set-rollback true --new-signer --ks new-signer-jks --set-rollback true
- Chofoza okuthi Ukulayisha kukhiqiziwe ubufakazi bokuzungeziswa ifayela, bese ulayisha ubufakazi bokuzungeziswa obukhiqizwe esinyathelweni 8.
- Chofoza okuthi Londoloza.
Sungula ukhiye wokulayisha uphinde ubuyekeze ama-keystore
Ngokuvikelwa okukhushuliwe, ukusayinda i-app yakho ngokhiye omusha wokulayisha, esikhundleni sokhiye wakho wokusayinda, kuyanconywa.
Ungasungula ukhiye wokulayisha uma ukhetha ukungena kokuthi Ukusayina nge-App ye-Play, noma ungasungula ukhiye wokulayisha kamuva ngokuvakashela ikhasi elithi Ukusayina nge-App ye-Play (Ukukhulula > Ukusetha > Ukusayina nge-app).
Nayi indlela yokusungula ukhiye wokulayisha:
- Landela imiyalelo yesayithi lonjiniyela be-Android. Gcina ukhiye wakho endaweni ephephile.
- Thumela isitifiketi sokhiye wokulayisha kufomethi ye-PEM. Shintshanisa izingxabano ezilandelayo ezidwetshelwe:
$ keytool -export -rfc -keystore upload-keystore.jks -alias layisha -ifayela upload_certificate.pem
-
Uma ucelwa ngesikhathi senqubo yokukhishwa, layisha isitifiketi ukuze usibhalise ne-Google.
Ungawusebenzisa nini ukhiye wokulayisha:
- Ukhiye wakho wokulayisha ubhaliswe kuphela ne-Google ukuze ufakazele ubuquniso bobunikazi bomdali we-app.
- Isiginesha yakho iyasuswa kusukela kunoma imaphi ama-APK ngaphambi kokuthi athunyelwe kubasebenzisi.
- Kumele kube ukhiye we-RSA ongamabhithi angu-2048 noma ngaphezulu.
Ngemuva kokuthi udale ukhiye wokulayisha, nazi ezinye izindawo ongafuna ukuzihlola uphinde uzibuyekeze:
- Imishini yasendaweni
- Iseva ekhiywe kusayithi (ama-ACL ahlukayo)
- Umshini wamafu (ama-ACL ahlukayo)
- Amasevisi okuphatha anikelwe ezimfihlo
- (Git) amakhosombe
Thuthukisa ukhiye wokusayinda wohlelo lwakho lokusebenza
Kwezinye izimo, ungacela ukuthuthukiswa kokhiye wokusayinda.
Nazi izizathu ezimbalwa zokucela ukuthuthukiswa kokhiye wokusayinda:
- Udinga ukhiye oqinile we-cryptographically.
- Ukhiye wakho wokusayinda ufakwe engozini.
Okubalulekile: Ukuthuthukisa okuyinhloko kusekelwa kuphela kuma-app asebenzisa inqwaba yohlelo lokusebenza.
Ngaphambi kokucela ukuthuthukiswa kokhiye ku-Play Console, funda Izinto ezibalulekile ngaphambi kokucela ukuthuthukiswa kokhiye esigabeni esingezansi. Uzobe usukwazi nokunweba ezinye izigaba ezingezansi ukuze ufunde kabanzi mayelana nokucela ukuthuthukiswa kokhiye.
Ukunaka okubalulekile ngaphambi kokucela ukuthuthukiswa kokhiyeNgaphambi kokucela ukuthuthukiswa kokhiye, kubalulekile ukuqonda izinguqulo ongazidinga ukwenza ukuthuthuka kuphele.
- Uma usebenzisa ukhiye wokusayinda nge-app ofanayo kuma-app amaningi okwabelana ngedatha/ikhodi phakathi kwawo, udinga ukuthuthukisa ama-app ukuze unake zombili izitifiketi ezintsha nokhiye wokusayinda omusha. Kumadivayisi asebenzisa i-Android S (ileveli ye-API 32) noma ngezansi, isitifiketi sokhiye wokusayinda we-app wefa onaakkwa inkindla ye-Android ngenhloso yokwabelana ngedatha/ikhodi.
- Uma i-app yakho isebenzisa ama-APIs, qinisekisa ukuthi ubhalisa izitifiketi zokhiye wakho wokusayina nge-app kubahlinzeki be-API ngaphambi kokushicilela isibuyekezo ukuze uqinisekise ukuthi ama-API aqhubeka esebenza. Izitifiketi ziyatholakala ekhasini elithi Ukusayina nge-App ye-Play (Ukukhulula > Ukusetha > Ukusayina nge-app) ku-Play Console.
- Uma noma yimuphi wabasebenzisi bakho efaka izibuyekezo ngokwabelana okuthi peer-to-peer, bazokwazi kuphela ukufaka izibuyekezo ezisayinwe ngokhiye ofana nowohlelo lwe-app yakho asebeyifakile kakade. Uma ungakwazi ukubuyekeza uhlelo lwabo lokusebenza ngoba banenguqulo yohlelo lwakho lokusebenza esayindwe ngokhiye ohlukile, banenketho yokukhipha nokufaka kabusha uhlelo lokusebenza ukuthola isibuyekezo.
I-app ngayinye ingaba nokhiye wayo wokusayinda othuthukisiwe kukho konke ukufakwa ku-Android N (Ileveli yeAPI 24) nangaphezulu kanye ngonyaka.
Uma ukucele ngempumelelo lokhu kuthuthukiswa kokhiye, ukhiye wakho omusha usetshenziselwa ukusayinda konke ukufakwa nezibuyekezo ze-app. Kumadivayisi asebenzisa i-Android T (Ileveli ye-API 33) nangaphezulu, inkundla ye-Android iphoqelela ukusetshenziswa kokhiye othuthukisiwe. Kumadivayisi asebenzisa i-Android S ("Ileveli ye-API 32) noma ngezansi, inkundla ye-Android ayiphoqeleli ukusetshenziswa kwalokhu kukhuliswa futhi isabona ukhiye wokusayinda wefa njengokhiye wokusayinda we-app. Lokhu futhi kubandakanya izakhi zenkundla (isibonelo, ukwabelana kwezimvume) oncike kukhiye wokusayinda we-app. Kumadivayisi asebenzisa i-Android N (Ileveli ye-API 24) ukuya ku-Android S (Ileveli ye-API 32), i-Google Play Protect izohlola ukuthi ingabe izibuyekezo ze-app zisayinwe ngokhiye wakho othuthukisiwe, ngaphandle kwalapho zivalwe umsebenzisi. Lokhu kunikezela ngokuqinisekisa okungeziwe njengoba inkundla ye-Android ayiphoqeleli ukusetshenziswa kokhiye wokuthuthukisa kumadivayisi asebenzisa i-Android S ("Ileveli ye-API 32) noma ngezansi.
- Vula i-Play Console bese uya ekhasini elithi Ukusayina nge-App ye-Play (Ukukhulula > Ukusetha > Ukusayina nge-app).
- Ithiphu: Ungafinyelela leli khasi ngokusebenzisa ikhasi elithi ubuqotho be-app (Khulula > Ubuqotho be-app), eliqukethe amasevisi obuqotho nokusayina akusiza uqinisekise ukuthi abasebenzisi bajabulela ama-app akho namageyimu ngendlela oyihlelile.
- Ekhadini elithi “Thuthukisa ukhiye wakho wokusayina”, khetha okuthi Cela ukhiye wokuthuthukisa.
- Khetha okukhethwa kukho kokuthuthukisa ukhiye wakho wokusayinda kukho konke ukufakwa ku-Android N nangaphezulu.
- Yenza i-Google ukuthi ikhiqize ukhiye omusha wokusayinda (okunconyiwe) noma uwulayishe.
- Ngemuva kokuthuthukisa ukhiye wakho wokusayinda i-app, uma ubukade usebenzisa ukhiye ofanayo wokusayina ukhiye nokhiye wokulayisha noma dala ukhiye wokulayisha omusha.
- Khetha isizathu sokucela ukuthuthukiswa kokhiye wokusayinda nge-app.
- Uma kunesidingo, bhalisa ukhiye wakho omusha wokusayinda nabahlinzeki be-API.
Ithiphu: Uma usabalalisa i-app yakho eziteshini eziningi zokusabalalisa futhi ufuna ukukhulisa ukuhambisana kwesibuyekezo se-app kubasebenzisi bakho, kufanele uthuthukise ukhiye wakho esiteshini ngasinye sokusabalalisa. Ukuze uhambisane nokuthuthukiswa kokhiye we-Google Play, sebenzisa ithuluzi le-ApkSigner, elihlanganiswe Namathuluzi Okwakha e-Android SDK (ukubuyekeza 33.0.1+):
$ apksigner ngena --ngemvume ${INPUT_APK}
--phuma ${OUTPUT_APK}
--ks ${ORIGINAL_KEYSTORE}
--ks-key-alias ${ORIGINAL_KEY_ALIAS}
--next-signer --ks ${UPGRADED_KEYSTORE}
--ks-key-alias ${UPGRADED_KEY_ALIAS}
--lineage ${LINEAGE}
Funda kabanzi mayelana nendlela i-app ebuyekeza umsebenzi ngayo.
Imikhuba ehamba phambili
- Uma ufuna ukusabalalisa uhlelo lwakho lokusebenza ngaphandle kwe-Google Play noma uhlele ukwenza kanjalo ngemuva kwesikhathi futhi ufuna ukusebenzisa ukhiye wokusayinda, unezinketho ezimbili:
- Vumela i-Google yenze ukhiye (kuyanconywa) bese ulanda i-APK esayindiwe, yomhlaba wonke, kusuka Kusihloli senqwaba ye-app ukusabalalisa ngaphandle kwe-Google Play.
- Noma ungase wenze ukhiye wokusayinda ofuna ukuwusebenzisa wawo wonke ama-app store, bese udlulisela ikhophi yawo ku-Google lapho ulungiselela ukungena ku-Play App Signing.
- Ukuze uvikele i-akhawunti yakho, vula ukuqinisekiswa kwezinyathelo ezi-2 kwama-akhawunti anokufinyelela ku-Play Console yakho.
- Ngemuva kokushicilela inqwaba ye-app kuthrekhi yokukhishwa, ungavakashela Isihloli senqwaba ye-app ukuze ufinyelele ama-APK afakekayo i-Google ewakhiqiza kusuka kwinqwaba ye-app yakho. Ungakwazi:
- Ukukopa futhi wabelane ngelinki yokwabelana kwe-app kwangaphakathi ekukuvumela ukuthi uhlole, ngokuthepha kanye, ukuthi yini i-Google Play engayifaka kusuka kunqwaba ye-app yakho kumadivayisi ahlukile.
- Dawuniloda i-APK esayindiwe, yendawo yonke. Le APK eyodwa isayindwe ngokhiye wokusayinda i-app ophethwe yi-Google futhi ongafakwa kunoma iyiphi idivayisi esekelwa yi-app yakho.
- Dawuniloda ingobo yomlando ye-ZIP nawo wonke ama-APK edivayisi ethile. Lawa ma-APK asayindwe ngokhiye wokusayinda i-app obanjwe yi-Google., Futhi ungafaka ama-APK kungobo yomlando ye-ZIP kudivayisi usebenzisa umyalo we-
adb install-multiple *.apk.
- Ngokuvikelwa okuthuthukisiwe, khiqiza ukhiye omusha wokulayisha ohlukile kusukela kukhiye wakho wokusayinda.
- Uma usebenzisa noma iyiphi i-Google API, ungafuna ukubhalisela ukhiye wokulayisha nezitifiketi zokhiye wokusayinda i-app ku-Google Cloud Console ye-app yakho.
- Uma usebenzisa Amalinki E-app ye-Android, qinisekisa ukuthi ubuyekeza okhiye kufayela elihambelanayo le-JSON Kumalinki Efa Ledijithali kuwebhusayithi yakho.
Ukhiye wokulayisha olahlekile noma owonakalisiwe?
Uma ulahlekelwe ukhiye wakho wokulayisha oyimfihlo, noma wonakalisiwe, ungadala omusha Umnikazi we-akhawunti yakho kanjiniyela angakwazi bese eqalisa ukusetha kabusha ukhiye ku-Play Console.
Ngemuva kokuthi ithimba lethu losekelo libhalise ukhiye omusha wokulayisha, umnikazi we-akhawunti nabaphathi bomhlaba bazothola umlayezo we-Inbox kanye ne-imeyili enolwazi olwengeziwe. Ungabe usubuyekeza izitolo zakho zokhiye uphinde ubhalisele ukhiye wakho nabahlinzeki be-API.
Umnikazi we-akhawunti angaphinda akhansele isicelo sokusetha kabusha ku-Play Console.
Okubalulekile: Ukusetha kabusha ukhiye wakho wokulayisha akuthinti ukhiye wokusayinda i-Google Play ewusebenzisela ukuphinda isayinde ama-APK ngaphambi kokuwaletha kubasebenzisi.
I-APK Signature Scheme v4
Amadivayisi we-Android 11 nangaphezulu asekela i-APK signature scheme v4 entsha. Ukusayina nge-App ye-Play kusebenzisa ukusayina nge-v4 kuma-app afanelekayo ukuze iwasize afinyelele izici zokusabalalisa ezithuthukisiwe ezitholakala kumadivayisi amasha. Asikho isenzo sikanjiniyela esidingekayo futhi akukho mthelela olindelekile wokusayina nge-v4 kubasebenzisi.
Okuqukethwe okuhlobene
- Funda mayelana nobuqotho kanye namasevisi okusayina ku-Play Console
- Funda mayelana nobuqotho kanye namasevisi okusayina kusayithi lonjiniyela be-Android