android获取APK签名信息及MD5指纹

最新推荐文章于 2023-09-21 17:00:23 发布

mldxs

最新推荐文章于 2023-09-21 17:00:23 发布

阅读量2.2k

点赞数

分类专栏： android

android 专栏收录该内容

116 篇文章 3 订阅

订阅专栏

http://www.g78.net/android-apk-signatures

1.获取APK的签名信息

 
   01private String showUninstallAPKSignatures(String apkPath) { 
 
   02         String PATH_PackageParser = "android.content.pm.PackageParser"; 
 
   03         try { 
 
   04             // apk包的文件路径 
 
   05             // 这是一个Package 解释器, 是隐藏的 
 
   06             // 构造函数的参数只有一个, apk文件的路径 
 
   07             // PackageParser packageParser = new PackageParser(apkPath); 
 
   08             Class pkgParserCls = Class.forName(PATH_PackageParser); 
 
   09             Class[] typeArgs = new Class[1]; 
 
   10             typeArgs[0] = String.class; 
 
   11             Constructor pkgParserCt = pkgParserCls.getConstructor(typeArgs); 
 
   12             Object[] valueArgs = new Object[1]; 
 
   13             valueArgs[0] = apkPath; 
 
   14             Object pkgParser = pkgParserCt.newInstance(valueArgs); 
 
   15             MediaApplication.logD(DownloadApk.class, "pkgParser:" + pkgParser.toString()); 
 
   16             // 这个是与显示有关的, 里面涉及到一些像素显示等等, 我们使用默认的情况 
 
   17             DisplayMetrics metrics = new DisplayMetrics();  
 
   18             metrics.setToDefaults(); 
 
   19             // PackageParser.Package mPkgInfo = packageParser.parsePackage(new 
 
   20             // File(apkPath), apkPath, 
 
   21             // metrics, 0); 
 
   22             typeArgs = new Class[4]; 
 
   23             typeArgs[0] = File.class; 
 
   24             typeArgs[1] = String.class; 
 
   25             typeArgs[2] = DisplayMetrics.class; 
 
   26             typeArgs[3] = Integer.TYPE; 
 
   27             Method pkgParser_parsePackageMtd = pkgParserCls.getDeclaredMethod("parsePackage", 
 
   28                     typeArgs); 
 
   29             valueArgs = new Object[4]; 
 
   30             valueArgs[0] = new File(apkPath);  
 
   31             valueArgs[1] = apkPath; 
 
   32             valueArgs[2] = metrics; 
 
   33             valueArgs[3] = PackageManager.GET_SIGNATURES; 
 
   34             Object pkgParserPkg = pkgParser_parsePackageMtd.invoke(pkgParser, valueArgs); 
 
   35              
 
   36             typeArgs = new Class[2]; 
 
   37             typeArgs[0] = pkgParserPkg.getClass(); 
 
   38             typeArgs[1] = Integer.TYPE; 
 
   39             Method pkgParser_collectCertificatesMtd = pkgParserCls.getDeclaredMethod("collectCertificates", 
 
   40                     typeArgs); 
 
   41             valueArgs = new Object[2]; 
 
   42             valueArgs[0] = pkgParserPkg; 
 
   43             valueArgs[1] = PackageManager.GET_SIGNATURES; 
 
   44             pkgParser_collectCertificatesMtd.invoke(pkgParser, valueArgs); 
 
   45             // 应用程序信息包, 这个公开的, 不过有些函数, 变量没公开 
 
   46             Field packageInfoFld = pkgParserPkg.getClass().getDeclaredField("mSignatures"); 
 
   47             Signature[] info = (Signature[]) packageInfoFld.get(pkgParserPkg); 
 
   48             MediaApplication.logD(DownloadApk.class, "size:"+info.length);  
 
   49             MediaApplication.logD(DownloadApk.class, info[0].toCharsString()); 
 
   50             return info[0].toCharsString(); 
 
   51         }  catch (Exception e) { 
 
   52             e.printStackTrace(); 
 
   53         }  
 
   54         return null; 
 
   55     }

获取程序自身的签名：

 
   01private String getSign(Context context) { 
 
   02    PackageManager pm = context.getPackageManager(); 
 
   03    List<PackageInfo> apps = pm.getInstalledPackages(PackageManager.GET_SIGNATURES); 
 
   04    Iterator<PackageInfo> iter = apps.iterator(); 
 
   05    while(iter.hasNext()) { 
 
   06         PackageInfo packageinfo = iter.next(); 
 
   07         String packageName = packageinfo.packageName; 
 
   08         if (packageName.equals(instance.getPackageName())) { 
 
   09            MediaApplication.logD(DownloadApk.class, packageinfo.signatures[0].toCharsString()); 
 
   10            return packageinfo.signatures[0].toCharsString(); 
 
   11         }  
 
   12 } 
 
   13    return null; 
 
   14}

对比2个方法的返回值来判断APK升级包的签名是否一致，一致就提示可以安装。

2.获取指定已安装完整签名信息,包括MD5指纹：

 
   01public void getSingInfo() {
 
   02    try {
 
   03        PackageInfo packageInfo = getPackageManager().getPackageInfo("com.sina,weibo", PackageManager.GET_SIGNATURES);
 
   04        Signature[] signs = packageInfo.signatures;
 
   05        Signature sign = signs[0];
 
   06        parseSignature(sign.toByteArray());
 
   07    }  catch (Exception e) {
 
   08        e.printStackTrace();
 
   09    }
 
   10}
 
   11public void parseSignature(byte[] signature) {
 
   12    try {
 
   13        CertificateFactory certFactory = CertificateFactory.getInstance("X.509");
 
   14        X509Certificate cert = (X509Certificate) certFactory.generateCertificate(new ByteArrayInputStream(signature));
 
   15        String pubKey = cert.getPublicKey().toString();
 
   16        String signNumber = cert.getSerialNumber().toString();
 
   17        System.out.println("signName:" + cert.getSigAlgName());
 
   18        System.out.println("pubKey:" + pubKey);
 
   19        System.out.println("signNumber:" + signNumber);
 
   20        System.out.println("subjectDN:"+cert.getSubjectDN().toString());
 
   21    }  catch (CertificateException e) {
 
   22        e.printStackTrace();
 
   23    }
 
   24}

3.如何查看指定证书的指纹

`1`	`D:>keytool -list -alias` `在导出时程序的别名(-alias` `这个命令，好像不用也行，没有试，反正我一直都在使用) -keystore tangshan.keystore(导出时使用的证书名称) -storepass 123456-keypass 123456`

2

3 出的结果为：

4