Play Store Error “You uploaded an APK that is signed with an insecure certificate”

Question

I'm trying to upload a game to Play Store developed in Unity3D. I've already signed the apk using Unity's in built method with all the required parameters but I'm getting this error while trying to upload the APK on Play Store

You uploaded an APK that is signed with an insecure certificate. RSA or DSA key size must be at least 2048 bits.

Answer 1

Having same mistake right now... New application too... It seems that we need to create keystrokes manually

cd "C:\Program Files (x86)\Java\jre6\bin" (where Java installed)
keytool -genkey -v -keystore my-release-key.keystore -alias alias_name -keyalg RSA -keysize 2048 -validity 10000

UPD: Yes it helped

Answer 2

I contacted Google Support, and they did confirm that this was a bug. I did a live chat, and that person mentioned its a bug they started seeing today, and no action is required on my part. He couldn't tell me when it ll be fixed.

I noticed that I was able to upload an APK to an existing app with the non 2048 bit release key, and it only complained for a new app.

Answer 3

I just contacted Google Support about this and they said the following:

Currently there is an internal bug which is the cause for this issue. I'm very sorry for the inconvenience, however there currently isn't any update on the matter as of yet.

They said they would email me with an update once there is one and I will post it here when I receive the email.

I would suggest not generating a new certificate if you've already published apps with the current one you are attempting to use.

Answer 4

Finally Google fixed this bug! It's working fine now as earlier.