Skip to content

v2.4.0

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 26 Oct 15:59
· 5 commits to main since this release
v2.4.0
3e8ec2b
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Rootless Store v2.4.0 发布：让每一次安装都值得信任

Welcome to Rootless Store v2.4.0!

This release turns installation from a simple action into a verified decision. Local packages now pass through signature verification before they can enter Rootless Store, and the confirmation sheet shows exactly who made a package and whether it can be trusted.

Rootless Store now also supports custom CA certificates. Packages signed by developers you choose to trust are recognized just like official ones, so self-hosted sources can enjoy the same verification experience.

欢迎来到 Rootless Store v2.4.0！

这次更新让“安装”从一个简单动作，变成一次经过验证的决定。本地包在进入 Rootless Store 之前，会先通过签名校验；确认面板会明确展示包的制作者以及它是否可信。

Rootless Store 现在还支持自定义 CA 证书。凡是你选择信任的开发者，他们签名的包也会像官方包一样被识别，自托管来源因此也能获得一致的验证体验。

What's New in v2.4.0

  • Local Package Installation with Signature Verification:

    • Local Plugin, Environment, and Magisk-style packages can now be selected and installed from the system file picker.
    • Every package is checked for its content and signature before installation, and the confirmation sheet shows the package name, developer, type, and signature status.
    • Packages signed by Rootless Store show a clear trusted state, unknown developers require manual confirmation, and a help link explains the verification chain.

  • Custom CA Certificate Management:

    • Import your own CA certificates to trust packages signed by the developers you choose.
    • PEM-encoded CMS signatures are now parsed correctly, including certificate chains from self-hosted sources.
    • Certificates are stored locally with a dedicated management screen, and the local database is upgraded automatically.

  • About Dialog and Developer Options:

    • A new About dialog in Settings shows version information and project social links.
    • Developer options are now available as a dedicated toggle in Settings.
    • Certificate management stays behind developer options, keeping the everyday settings screen simple.

v2.4.0 更新内容

  • 本地包安装与签名验证:

    • 现在可以从系统文件选择器中选择并安装本地 Plugin、Environment 和 Magisk 风格包。
    • 任何包安装前都会先检查包内容和签名；确认面板会展示包名称、开发者、类型和签名状态。
    • 由 Rootless Store 签名的包会显示明确的可信状态，未知开发者的包需要手动确认，帮助链接会解释完整的验证链条。

  • 自定义 CA 证书管理:

    • 可以导入自己的 CA 证书，信任你所选择的开发者签名的包。
    • PEM 编码的 CMS 签名现在可以正确解析，包括来自自托管来源的证书链。
    • 证书保存在本地并配有专门的管理界面，本地数据库会自动完成升级。

  • 关于弹窗与开发者选项:

    • 设置页新增“关于”弹窗，展示版本信息和项目社交链接。
    • 开发者选项现在作为设置页中的独立开关提供。
    • 证书管理入口保留在开发者选项之后，让日常设置页保持简洁。

Tips

  1. Packages built with the previous packaging method will not trigger the new verified installation screen; this is a developer-facing preview of the upcoming 3.0 functionality.
  2. Tap the version number in the About dialog 6 times in a row to enable Developer Options.
  3. Custom CA certificates can only be accessed and imported after Developer Options are enabled; once imported, packages signed with the corresponding self-signed certificate are treated as verified.
  4. Certificate issuance and cooperation channels are not open yet. If you need them, please wait a little longer.

提示

  1. 使用旧版本打包方式的包，不会唤起新的认证安装界面；这主要是一项面向开发者、为 3.0 版本准备的功能预览。
  2. 在「关于」弹窗中连续点击版本号 6 次，即可开启开发者选项。
  3. 自定义 CA 证书需要在开启开发者选项后才能进入和导入；导入完成后，对应自签名证书的安装包即可完成认证。
  4. 证书签发和合作渠道目前尚未开放，如有需要请再耐心等待一段时间。

Thanks

Thank you for continuing to use Rootless Store. With signature verification and custom CA certificates, every installation is now a decision you can see and control. We hope this makes the store a safer place to explore ideas — and a more trustworthy way to run them.

感谢大家持续使用 Rootless Store。有了签名验证和自定义 CA 证书，每一次安装都变成了看得见、控得住的决定。希望这让 Rootless Store 成为一个更安全地探索想法的地方，也更值得信任地运行它们。

Unit Tests

Module Passed ✅ Failed ❌ Skipped 🕔
:data 28 0 0
Assets 3
Loading