I have a cheap Chinese tablet (Ainol Novo 7 Tornado). It comes from the factory rooted but with the 3e system recovery.
Here is the scenario (simplied to avoid complications):
Using update.zip from manufacturer, I can update the ROM (no signature failure)
I unzip the update.zip file and delete the CERT.RSA, CERT.SF, and MANIFEST.MF files and rezip (exact same structure just minus these files)
I sign the zip using any one of about 10 different tools including SignAPKtic and Zip Signer 2 (on device) (all state success with no errors)
I try to install the "new" update.zip, I get a failure verifying the signature in 3e
It seems as if is locked and requires the manufacturers signature. However, when I use 'jarsigner' to look at the signature, it is signed using the same google certs that all of the signers use. When comparing the output of 'jarsigner' on the original and the resigned version, they appear the same with the exception of the order in which contents are listed.
Does anyone have any idea what could be happening here? I have been struggling with this for over a week.
Thanks,
Jonathan
Related
I got clockworkmod working fine, but I am unable to loan ROMs. Whenever I downloand a ROM it opens in muiltiple files and it also happens with TNT, Thi is where Im stuck
Step 3.
Copy whatever ROM you wish to install (it should be a .zip file) to the ROMs folder on your tablet. (Leave it zipped, Clockwork will install it from the .zip file as is). trying to get VEGan 5.1 final
Note: If the ROM you downloaded has multiple files, look for the one named “update.zip” and rename it to whatever you want (something to help you differentiate it from other ROMs), then copy that to the tablet. If an “update.zip” doesn’t exist, and you’re lost…read through that ROM’s thread and see if anybody else asked about it…if not then you probably should (on that ROM’s thread…each one is different).
I cant fiqure how to get the update.zip. When I do open the files i get 3 files
META_INF,boot, and system. I tried to copy and paste all three files in the ROMs, but it never show the update.zip
You don't need an update.zip with clockworkmod recovery... you just need the rom that is zipped and can be named anything.
Stop unzipping the rom you are downloading and just copy it to your device. Install that with clockworkmod recovery.
Sent from my Viewsonic 10" GTab...
novicexda said:
I got clockworkmod working fine, but I am unable to loan ROMs. Whenever I downloand a ROM it opens in muiltiple files and it also happens with TNT, Thi is where Im stuck
Step 3.
Copy whatever ROM you wish to install (it should be a .zip file) to the ROMs folder on your tablet. (Leave it zipped]/B], Clockwork will install it from the .zip file as is). trying to get VEGan 5.1 final
Note: If the ROM you downloaded has multiple files, look for the one named “update.zip” and rename it to whatever you want (something to help you differentiate it from other ROMs), then copy that to the tablet. If an “update.zip” doesn’t exist, and you’re lost…read through that ROM’s thread and see if anybody else asked about it…if not then you probably should (on that ROM’s thread…each one is different).
I cant fiqure how to get the update.zip. When I do open the files i get 3 files
META_INF,boot, and system. I tried to copy and paste all three files in the ROMs, but it never show the update.zip
Click to expand...
Click to collapse
you've answered your own question, the rar or zip file you downloaded might be in diff names, but always leave it in zip format. if in rar, unrar and the zip file should be in it.
in clockwork recovery, you can update by update.zip or choose your own zip
tcrews said:
You don't need an update.zip with clockworkmod recovery... you just need the rom that is zipped and can be named anything.
Stop unzipping the rom you are downloading and just copy it to your device. Install that with clockworkmod recovery.
Sent from my Viewsonic 10" GTab...
Click to expand...
Click to collapse
That is my problem, if automaticly unzips when it downloads. I am not sure if its my windows setting becaue I am unable to download TNT lite because I keep getting " windows can no opem" message. Is there a way i can prevent it from unzipping? Thanks BTW
maybe use a diff browser to download or right click on link and "save as"
You might be hitting open instead of save ...
down load it direct to your Gtab
Download the file directly to your tab. Use ES file explorer to move it to your SD card if necessary. Reboot in to clock work - choose file from SD card-select it and install.
Hi,
I've crosscompiled a couple of useful command line applications (including binutils, gcc, make) to Android -- they work fine if I just move all the files to an Android device, or run them from an SD card etc.
Now I'm wondering what the best way to package them is -- last time I checked, an APK couldn't contain files in /system/bin or the likes, so if I want stuff installed in standard locations, that rules out using an APK (obviously that could be worked around by creating an empty app and just including all related files in the data storage area, and live with the fact that the files aren't where they ideally belong, as long as PATH is set correctly, shouldn't matter too much -- or do any devices mount the data area with the "noexec" bit?).
The other possibility I've considered is just making it a zip file to be installed through custom recoveries - unfortunately I'm running into problems there: trying to use ClockworkMod Recovery 6.0.1.0 on a Galaxy Nexus to install the zip file results in "Installing update..." immediately followed by "Installation aborted." -- that's despite the fact that signature verification works fine when enabled (I've used signing-tools to sign the zip file. Other than the META-INF directory created by signing-tools, the zip file contains system/bin/gcc, system/bin/make and friends). Am I doing anything wrong there?
And, of course, is there a third, even better, way to package command line tools that I'm missing?
Hello!!!
I need to replace a few files from a Firmware update image. I tried two ways ways:
1- editing straight in WinRAR
2- Unzipping, editing and compressing again
In both cases the IMG file looked right. test for problems runs fine, no issues, but when I try to update the device it won't pass on package check and the operation is aborted. I tried to save in both ZIP and IMG extensions, doesn't work in either one.
IMHO it must be related to checksum error. How can it be fixed?
The device is a Geniatech Media Center ARTV1220 running Android 4.2.2
Any clues?
Hi
I have mounted and modified some og the apk in a system.img and saved changes.I then re zipped the udate.zip folder with the new system.img.
When i try to install with update.zip i get the following error e:signature verification failed and i am guessing that i need to sign the new update.zip
but for this to work im guessing that the signing needs to be the same as the unmodded firmware is this right?
In the zip file there is META-INF , Cert.rsa cert.sf and mainfest.mf do i need to sign the actual zip with these or the modified system.img and how would i sign with original signature as every guide i have read about signing requre pk8 and pem files. Would i need to convert cert.rsa and cert.sf to pem file.
Any help with this would be apreshiated as i am only new here and in modding and still trying to get my head around it
thanks
Hey guys
I tried to change the ROM from my chinese Mi Box to the US version with a guide
But I made something wrong and ended up in the stock-recovery
luckily I was able to update the Box from the recovery with a update.zip (which is for the MDZ-19-AB US version)
Everything worked fine, but I was greedy and wanted to update with the same procedure to Android TV 8.0 and I soft-bricked the device but I can still get into the recovery
I tried to go back to Android TV 7.0 with the update.zip but the update checks if ("ro.product.device") is equal to "once" which was "once" but after the 8.0 update is somehow empty
I even tried tho unbrick it with a guide and the USB burning tool but that doesnt work either
I tried to take the update.zip remove the check form the updater-script and zip it and even sign it (with multiple different tools) but I am unable to get it working (either "footer is wrong" or "failed to verify whole-file signature" error comes up)
TL/DR: Can someone take the update.zip remove the check for the device in the updater script(first line), zip and sign it properly so I can update it with the stock-recovery?
it seems like I am unable to do it myself
please PM me if you can help I'n not allowed to add outside-links :crying:
remo_94 said:
Hey guys
I tried to change the ROM from my chinese Mi Box to the US version with a guide
But I made something wrong and ended up in the stock-recovery
luckily I was able to update the Box from the recovery with a update.zip (which is for the MDZ-19-AB US version)
Everything worked fine, but I was greedy and wanted to update with the same procedure to Android TV 8.0 and I soft-bricked the device but I can still get into the recovery
I tried to go back to Android TV 7.0 with the update.zip but the update checks if ("ro.product.device") is equal to "once" which was "once" but after the 8.0 update is somehow empty
I even tried tho unbrick it with a guide and the USB burning tool but that doesnt work either
I tried to take the update.zip remove the check form the updater-script and zip it and even sign it (with multiple different tools) but I am unable to get it working (either "footer is wrong" or "failed to verify whole-file signature" error comes up)
TL/DR: Can someone take the update.zip remove the check for the device in the updater script(first line), zip and sign it properly so I can update it with the stock-recovery?
it seems like I am unable to do it myself
please PM me if you can help I'n not allowed to add outside-links :crying:
Click to expand...
Click to collapse
that would be nice if anyone actually had the keys needed to sign it to pass verification lol
remo_94 said:
Hey guys :crying:
Click to expand...
Click to collapse
Hey, you can extract the updater-script from the package, edit it, then repack it to the same zip(preserving the signature)
Ricky Divjakovski said:
Hey, you can extract the updater-script from the package, edit it, then repack it to the same zip(preserving the signature)
Click to expand...
Click to collapse
wouldnt that break the whole file signature?
elliwigy said:
wouldnt that break the whole file signature?
Click to expand...
Click to collapse
Pretty sure it doesnt aslong as you repack with the update method, same way your able to mod certain apps inside/system preserving the signature
But.. im pretty sure ive got amlogics keys somewhere though
Ricky Divjakovski said:
Pretty sure it doesnt aslong as you repack with the update method, same way your able to mod certain apps inside/system preserving the signature
But.. im pretty sure ive got amlogics keys somewhere though
Click to expand...
Click to collapse
I guess with the "update method" you mean just edit the file in the archive without extracting and repacking.
I tried with WinRAR and 7-zip, I tried editing it inside the archive and saving the changes, I tried extracting editing and repacking it, I even edited the MANIFEST.MF to the new SHA-1 value of the update-script but I only get "failed to verify whole-file signature"
I thought it was enough if I sign my update.zip with the Android testkeys isn't that possible?
remo_94 said:
I guess with the "update method" you mean just edit the file in the archive without extracting and repacking.
I tried with WinRAR and 7-zip, I tried editing it inside the archive and saving the changes, I tried extracting editing and repacking it, I even edited the MANIFEST.MF to the new SHA-1 value of the update-script but I only get "failed to verify whole-file signature"
I thought it was enough if I sign my update.zip with the Android testkeys isn't that possible?
Click to expand...
Click to collapse
Ill look more into it tonight