Update AndroidBuild.java for AAB Jar Signing(V1 Signature)

[rupeshkumar22]

Hi @codeanticode @ranaaditya
I found that just Jar signing (V1 signature Scheme) would be sufficient to build bundles that would be uploadable on Play Console. Not sure as I don't have access to the play console But I tried comparing the signing information of the Jar Signed Bundle generated from this PR and the signed bundle generated from Android Studio. I found that both the bundles are signed with the same signing algorithm.

Android Mode Generated Bundle's Signing Information

C:\Users\xyz> keytool -printcert -jarfile C:\Users\xyz\Documents\Processing\sketch_220405a\buildBundle.220405.1115\sketch_220405a_release_signed_v1.aab
Signer #1:
Signature:
Certificate fingerprints:
         SHA1: 24:E4:***
         SHA256: 05:30:***
Signature algorithm name: SHA256withRSA
Subject Public Key Algorithm: 2048-bit RSA key
Version: 3

Android Studio Generated Bundle's Signing Information

Signer #1:
Signature:
Certificate fingerprints:
         SHA1: DA:08:***
         SHA256: 2D:A9:***
Signature algorithm name: SHA256withRSA
Subject Public Key Algorithm: 2048-bit RSA key
Version: 3

I thought of signing aab with bundletool but it's not included in SDK and the size of bundletool-all.jar is around 26 mb where as AndroidMode itself is around 13 MB. Later found that Jar Signing(V1 signature scheme) would be sufficient.

Can you confirm if the generated signed bundle is uploadable on Play Console? @codeanticode

Thanks,
Rupesh

[codeanticode]

@rupesh-kumar-lpu Awesome, thanks for looking into this. I will review as soon as I can.

[rupeshkumar22]

I will wait for your review @codeanticode , Furthermore, I faced an issue while using existing V2Signing on APK it showed an error while exporting APK So I commented that code in the PR and just used V1(Jar Signing) on APK and AAB. I will try to look into it but if it does not fits well there is an alternative of using APKSigner.bat which is also present in build tools folder of SDK along with zipalign binary and APKSigner.bat can be executed similar to that of zipalign with a runtime execute task or process builder task. Let me know if it seems a better option, I can create another PR for that @codeanticode

[codeanticode]

Ok appears that uploading the aab with V1 signing is enough! (but API level needs to be updated to 30, I will look into that next)