Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

contains unsafe cryptographic encryption patterns #245

Closed
niypoo opened this issue Apr 23, 2020 · 19 comments
Closed

contains unsafe cryptographic encryption patterns #245

niypoo opened this issue Apr 23, 2020 · 19 comments

Comments

@niypoo
Copy link

niypoo commented Apr 23, 2020

Google play give me a alert after upload a internal test version

Your app contains unsafe cryptographic encryption patterns. Please see this Google Help Center article for details.
https://support.google.com/faqs/answer/9450925
Vulnerable classes:

l.a.a.b.a

so I have suspicions in flutter_background_geolocation due to it need a key and I been correct I removed the package and upload new version without flutter_background_geolocation and alert has disappear.

@christocracy
Copy link
Member

Ignore, this is from a new encryption feature Config.encrypt that you’re not using.

@niypoo
Copy link
Author

niypoo commented Apr 23, 2020

okay , how can ignore this alert ! and using package without alert !?

@christocracy
Copy link
Member

Pretend you never saw it.

@niypoo
Copy link
Author

niypoo commented Apr 23, 2020

you mean the google play alert !?

@christocracy
Copy link
Member

Yes, I mean the play store alert. Ignore it, forget about it!! It is of no consequence to you since you’re not using the plugin’s encryption feature!!

@niypoo
Copy link
Author

niypoo commented Apr 23, 2020

Yes, I mean the play store alert. Ignore it, forget about it!! It is of no consequence to you since you’re not using the plugin’s encryption feature!!

Okay I hope you are right and google not give me a sweet suspend :D ,
If i have another question - not issue - is here a right place. !

@christocracy
Copy link
Member

The first place to seek tech support is exactly this, posting an issue.

@niypoo
Copy link
Author

niypoo commented Apr 23, 2020

If I want use only geofence class and not use any zgeolocation functions` I must integration Android like here
https://github.com/transistorsoft/flutter_background_geolocation/blob/master/help/INSTALL-ANDROID.md

and I hope is there any "promo code" :)

@christocracy
Copy link
Member

If I want use only geofence class and not use any zgeolocation functions` I must integration Android like here

Yes. Please keep your questions on topic. This closed issue is titled "contains unsafe cryptographic encryption patterns".

and I hope is there any "promo code" :)

Sorry, there are no discounts.

@murven
Copy link

murven commented Nov 4, 2020

@christocracy
Google review is preventing our build from going to the store because of this issue.
I have been looking inside the code to see where exactly the encryption is happening so that I can comment that code out to pass the review, since we are not using this feature. Could you please point me to the place in the code where this encryption is performed? We are using the paid version of the plugin, please let me know if you need me to pass purchase information. Thanks!

@christocracy
Copy link
Member

Show me what Google play console said.

@murven
Copy link

murven commented Nov 4, 2020

Error
Errors found. Fix before releasing to production.
Security and trust
Unsafe Encryption
error
Error
Security
Your app contains unsafe cryptographic encryption patterns. Please see this Google Help Center article for details.

a.a.a.b.a

@christocracy
Copy link
Member

Show me a screenshot of this.

@murven
Copy link

murven commented Nov 4, 2020

image

@murven
Copy link

murven commented Nov 7, 2020

@christocracy Update: you were correct, in the end, Google ignored this, even when it was marked as an error and let the app go into the store. I just wanted to leave this here for anyone else reading.

@Digisolfze
Copy link

dear,
when deploy app in google play console shows an error below :
bluefig error

@mohammadrezaberenji
Copy link

@murven I faced same issue, and we got rejection. would you tell me what did you do for publishing in console again after this message?

@akshayjain14
Copy link

@mohammadrezaberenji : Any solution , We are also facing same issue ?

@christocracy
Copy link
Member

What version of the plugin are you using? Cryptographic stuff was ripped out ages ago.

If you’re using a recent version of this plugin, then it’s not due to the plugin at all.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

6 participants