如何读取APK中的签名信息

最新推荐文章于 2025-09-05 16:08:13 发布

原创最新推荐文章于 2025-09-05 16:08:13 发布 · 2.5k 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#string #import #null #system #byte

本文介绍了一种通过Java代码在Android环境中获取已安装应用程序的签名信息的方法，包括证书的颁发者、主题及公钥等详细信息，并记录了这些信息以便进行跟踪分析。

import java.security.cert.CertificateException; import java.security.cert.CertificateFactory; import java.security.cert.X509Certificate; PackageManager pckMan = getPackageManager(); String issuerDN = null; String subjectDN = null; String publickey = null; boolean isSystemApp = false; List<PackageInfo> packs = pckMan.getInstalledPackages(PackageManager.GET_SIGNATURES); int count = packs.size(); for (int i = 0; i < count; i++) { isSystemApp = false; PackageInfo pi = packs.get(i); if (pi.versionName == null) continue; if ((pi.applicationInfo.flags & ApplicationInfo.FLAG_SYSTEM) > 0) { isSystemApp = true; } try { byte[] signature = pi.signatures[0].toByteArray(); String hash = md5(signature); CertificateFactory certFactory = CertificateFactory.getInstance("X.509"); X509Certificate cert = (X509Certificate) certFactory.generateCertificate( new ByteArrayInputStream(signature)); String appname = pi.applicationInfo.loadLabel(pckMan).toString(); Log.d("TRACK", appname); issuerDN = cert.getIssuerDN().toString(); Log.d("TRACK", issuerDN); subjectDN = cert.getSubjectDN().toString(); Log.d("TRACK", subjectDN); publickey = cert.getPublicKey().toString(); Log.d("TRACK", publickey); Log.d("TRACK-HASH", hash); } catch (CertificateException e) { e.printStackTrace(); } }