为什么jarsigner可以签署Android apk？

Question

根据我在Java中的经验，jarsigner用于为JAVA归档（JAR）文件生成签名并验证签名JAR文件的签名。

令我惊讶的是，Android也使用jarsigner至sign the Android application package(APK)，这与JAR格式不同。

jarsigner不需要将二进制文件打包到JAR中吗？它如何在引擎盖下工作？

Answer 1

APK文件只是具有不同内容的zip文件。

Is there a difference between typical a ZIP file and an APK file?

从http://docs.oracle.com/javase/7/docs/technotes/tools/windows/jarsigner.html

The JAR feature enables the packaging of class files, images, sounds, and 
other digital data in a single file for faster and easier distribution. A tool 
named jar enables developers to produce JAR files. 

(Technically, any zip file can also be considered a JAR file, although when 
created by the jar command or processed by the jarsigner command, JAR files 
also contain a META-INF/MANIFEST.MF file.)