From 4c402e05224549d1ec4419db3b409172641e14c1 Mon Sep 17 00:00:00 2001
From: Tom Cooks <tommasogagliardi+github@gmail.com>
Date: Sun, 11 Oct 2026 06:00:55 -0400
Subject: Sign v2/v3-only with preserved alignment so F-Droid reproducibility
 passes

---
 tools/build-release.sh | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'tools/build-release.sh')

diff --git a/tools/build-release.sh b/tools/build-release.sh
index 588caa2..02e9dd2 100755
--- a/tools/build-release.sh
+++ b/tools/build-release.sh
@@ -38,8 +38,12 @@ OUT="releases/RECCoon-${VERSION}.apk"
 mkdir -p releases dist
 
 echo "==> Signing with $APKSIGNER"
+# v2/v3 only: no v1 (JAR) signature files, so the signed APK's content is
+# byte-identical to the unsigned build and F-Droid's reproducible check passes.
 "$APKSIGNER" sign --ks "$KS" --ks-key-alias "$ALIAS" \
     --ks-pass env:RECCOON_STORE_PASS --key-pass env:RECCOON_KEY_PASS \
+    --v1-signing-enabled false --v2-signing-enabled true --v3-signing-enabled true \
+    --alignment-preserved \
     --out "$OUT" "$UNSIGNED"
 cp "$OUT" dist/
 
-- 
cgit v1.2.3