{"action":"closed","issue":{"url":"https://api.github.com/repos/MobSF/Mobile-Security-Framework-MobSF/issues/476","repository_url":"https://api.github.com/repos/MobSF/Mobile-Security-Framework-MobSF","labels_url":"https://api.github.com/repos/MobSF/Mobile-Security-Framework-MobSF/issues/476/labels{/name}","comments_url":"https://api.github.com/repos/MobSF/Mobile-Security-Framework-MobSF/issues/476/comments","events_url":"https://api.github.com/repos/MobSF/Mobile-Security-Framework-MobSF/issues/476/events","html_url":"https://github.com/MobSF/Mobile-Security-Framework-MobSF/issues/476","id":257372665,"number":476,"title":"[ Possible BUG or enhancement needed in MOBSF] Certificate and Signing","user":{"login":"superpoussin22","id":27353689,"avatar_url":"https://avatars1.githubusercontent.com/u/27353689?v=4","gravatar_id":"","url":"https://api.github.com/users/superpoussin22","html_url":"https://github.com/superpoussin22","followers_url":"https://api.github.com/users/superpoussin22/followers","following_url":"https://api.github.com/users/superpoussin22/following{/other_user}","gists_url":"https://api.github.com/users/superpoussin22/gists{/gist_id}","starred_url":"https://api.github.com/users/superpoussin22/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/superpoussin22/subscriptions","organizations_url":"https://api.github.com/users/superpoussin22/orgs","repos_url":"https://api.github.com/users/superpoussin22/repos","events_url":"https://api.github.com/users/superpoussin22/events{/privacy}","received_events_url":"https://api.github.com/users/superpoussin22/received_events","type":"User","site_admin":false},"labels":[{"id":172209009,"url":"https://api.github.com/repos/MobSF/Mobile-Security-Framework-MobSF/labels/enhancement","name":"enhancement","color":"84b6eb","default":true}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2017-09-13T13:03:42Z","updated_at":"2017-12-15T17:13:46Z","closed_at":"2017-12-15T17:13:46Z","author_association":"CONTRIBUTOR","body":"Hi,\r\n\r\nJust a little question regarding MobSF and apk signature.\r\n\r\nyou can use an SHA1 certificate to sign the apk but use sha256 for signing the apk .\r\n\r\nMobsf will see that the certificate use SHA1 ans report a bad state which is good regarding the certificate  but don't reflect how files are hashed.\r\n\r\nI think mobsf should inspect the MANIFEST.MF file or better ht .SF to have apksigner information\r\n\r\nWhat do you think ?\r\n\r\nPS: What will define the signature algorithm used by apksigner is mostly the MinSDK version \r\n"}}
{"actor":{"display_login":"ajinabraham"}}