Build the Android certificate verifier from source with its upstream licenses. Restrict APKs to supported ARM64 and x86_64 devices. Lock Rust dependency resolution, verify the Gradle download, and add F-Droid listing metadata, privacy disclosures, and real device screenshots.
Changes
- Replace precompiled
rustls-platform-verifierAAR with vendored Kotlin source compiled from pinned upstream revisionv/0.7.0(revision996b1c9) - Remove
app/libs/rustls-platform-verifier-0.1.1.aar - Add
abiFiltersto restrict APKs toarm64-v8aandx86_64 - Pass
--lockedtocargo build; trackCargo.lockas a Gradle input - Fall back to
ANDROID_HOMEwhenANDROID_SDK_ROOTis unset in build script - Add Gradle wrapper
distributionSha256Sumfor verification - Update RIPEstat
User-Agentheader toHostLookup/0.2.1 Android - Add fastlane store listing metadata (title, descriptions, changelogs, icon, four device screenshots)
- Add
docs/FDROID.mdsubmission review anddocs/DEVICE_TEST.mdreport - Update README and THIRD_PARTY_NOTICES
Build
export ANDROID_SDK_ROOT=/path/to/Android/Sdk
./gradlew assembleReleaseThe unsigned APK is written to app/build/outputs/apk/release/app-release-unsigned.apk.