[GH-ISSUE #6] F-Droid release? #2

Open
opened 2026-10-13 21:04:54 +00:00 by bsakaguchi · 6 comments
Owner

Originally created by @alexandervlpl on GitHub (May 21, 2024).
Original GitHub issue: https://github.com/amnezia-vpn/amneziawg-android/issues/6

Great work! It would be nice to see an F-Droid release. This makes the app harder to block and increases confidence that it's open source and respects privacy.

Originally created by @alexandervlpl on GitHub (May 21, 2024). Original GitHub issue: https://github.com/amnezia-vpn/amneziawg-android/issues/6 Great work! It would be nice to see an F-Droid release. This makes the app harder to block and increases confidence that it's open source and respects privacy.
Author
Owner

@marek22k commented on GitHub (Aug 24, 2024):

Maybe you could also release it on IzzyOnDroid? @IzzySoft

<!-- gh-comment-id:2308379862 --> @marek22k commented on GitHub (Aug 24, 2024): Maybe you could also release it on IzzyOnDroid? @IzzySoft
Author
Owner

@IzzySoft commented on GitHub (Aug 25, 2024):

I could take a look if there were an app description and some screenshots. We can hardly list an app without at least a proper description, right? 😉

<!-- gh-comment-id:2309025737 --> @IzzySoft commented on GitHub (Aug 25, 2024): I could take a look if there were an app description and some screenshots. We can hardly list an app without at least a proper description, right? :wink:
Author
Owner

@marek22k commented on GitHub (Aug 27, 2024):

Maybe you can use the description from the Google Play app store?
https://play.google.com/store/apps/details?id=org.amnezia.awg

<!-- gh-comment-id:2312546864 --> @marek22k commented on GitHub (Aug 27, 2024): Maybe you can use the description from the Google Play app store? https://play.google.com/store/apps/details?id=org.amnezia.awg
Author
Owner

@IzzySoft commented on GitHub (Aug 27, 2024):

That could indeed be done, thanks for the pointer! But checking the APK, I see 2 issues here:

SigningBlock blobs:
-------------------
0x6dff800d (SOURCE_STAMP_V2_BLOCK; GOOGLE)

So this APK was not signed by the developer. And right:

Number of signers: 1
Signer #1 certificate DN: CN=Android, OU=Android, O=Google Inc., L=Mountain View, ST=California, C=US
Signer #1 certificate SHA-256 digest: 76e3a7128368b69e24f752247cee4dbfe9bda4870d95e829cdb99548eb339f90
Signer #1 certificate SHA-1 digest: 3968d4868d2c2b671e64b21203e0b1868d6782d9
Signer #1 certificate MD5 digest: 58ebc8102516e6ca0a2daf3b97b74e70
Signer #1 key algorithm: RSA
Signer #1 key size (bits): 4096

@pokamest would it be possible to provide an APK you've signed yourself with your own key, which then also would come without that blob? Google is not exactly known for transparency, so with them having signed your APK we cannot be sure what else they might have added.

<!-- gh-comment-id:2313103667 --> @IzzySoft commented on GitHub (Aug 27, 2024): That could indeed be done, thanks for the pointer! But checking the APK, I see 2 issues here: ``` SigningBlock blobs: ------------------- 0x6dff800d (SOURCE_STAMP_V2_BLOCK; GOOGLE) ``` So this APK was not signed by the developer. And right: ``` Number of signers: 1 Signer #1 certificate DN: CN=Android, OU=Android, O=Google Inc., L=Mountain View, ST=California, C=US Signer #1 certificate SHA-256 digest: 76e3a7128368b69e24f752247cee4dbfe9bda4870d95e829cdb99548eb339f90 Signer #1 certificate SHA-1 digest: 3968d4868d2c2b671e64b21203e0b1868d6782d9 Signer #1 certificate MD5 digest: 58ebc8102516e6ca0a2daf3b97b74e70 Signer #1 key algorithm: RSA Signer #1 key size (bits): 4096 ``` @pokamest would it be possible to provide an APK you've signed yourself with your own key, which then also would come without that blob? Google is not exactly known for transparency, so with them having signed your APK we cannot be sure what else they might have added.
Author
Owner

@wzrayyy commented on GitHub (Nov 5, 2025):

+1, automatic updates without having to rely on Google would be nice

<!-- gh-comment-id:3490775767 --> @wzrayyy commented on GitHub (Nov 5, 2025): +1, automatic updates without having to rely on Google would be nice
Author
Owner

@tarbib commented on GitHub (Dec 29, 2025):

+1

<!-- gh-comment-id:3697122212 --> @tarbib commented on GitHub (Dec 29, 2025): +1
Sign in to join this conversation.
No labels
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
amnezia-vpn/amneziawg-android#2
No description provided.