Update android_binary_analysis.pdf.html

This commit is contained in:
Tiago Rodrigo Lampert
2019-08-01 21:06:22 -03:00
committed by GitHub
parent e49e295e67
commit 233e9da585
@@ -177,19 +177,19 @@ body {
{{ certinfo | safe}}
{% if issued == "good" %}
<strong>Certicate Status: </strong><span class="label label-success">Good</span>
<strong>Certificate Status: </strong><span class="label label-success">Good</span>
{% elif issued == "bad" %}
<strong>Certicate Status: </strong><span class="label label-danger">Bad</span>
<strong>Certificate Status: </strong><span class="label label-danger">Bad</span>
<strong>Description:</strong>App Signed by 'Android Debug' Certificate.
Production ready applications should not be signed with 'Android Debug' Certificate.
{% elif issued == "missing" %}
<strong>Certicate Status: </strong><span class="label label-warning">Certificate not found</span>
<strong>Certificate Status: </strong><span class="label label-warning">Certificate not found</span>
{% elif issued == "bad hash" and sha256Digest is True %}
<strong>Certicate Status: </strong><span class="label label-warning">Warning</span>
<strong>Certificate Status: </strong><span class="label label-warning">Warning</span>
<strong>Description:</strong>The app is signed with `SHA1withRSA`. SHA1 hash algorithm is known to have collision issues.
<strong>Note:</strong>The manifest indicates `SHA256withRSA` is in use. Be sure to manually confirm this issue.
{% elif issued == "bad hash" %}
<strong>Certicate Status: </strong><span class="label label-danger">Bad</span>
<strong>Certificate Status: </strong><span class="label label-danger">Bad</span>
<strong>Description:</strong>The app is signed with `SHA1withRSA`. SHA1 hash algorithm is known to have collision issues.
{% endif %}
</pre>