android查看签名信息

最新推荐文章于 2025-04-27 15:05:40 发布

dongpingwang

最新推荐文章于 2025-04-27 15:05:40 发布

阅读量522

点赞数

CC 4.0 BY-SA版权

分类专栏： Android开发文章标签： android

本文链接：https://blog.youkuaiyun.com/wangadping/article/details/129152350

Android开发专栏收录该内容

21 篇文章

订阅专栏

该文章详细介绍了如何通过Java的keytool工具以及Python脚本，从pk8和x509.pem文件生成jks存储，查看jks的SHA256摘要，以及从APK中提取并查看其SHA256签名信息。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

1.pk8和x509.pem生成jks

https://blog.youkuaiyun.com/laipigui905/article/details/112347159

2.查看jks sha256

keytool -list -v -keystore xxx.jks
输入密钥

3.查看apk sha256

解压apk
keytool -printcert -file xxx\META-INF\CERT.RSA

4.通过python查看一个apk的签名

# -*- coding: utf-8 -*-
#coding:utf-8

from cProfile import run
import os
from subprocess import call
import sys

import zipfile

# 解压出来的路径
def getExtractPath(apkPath):
    return apkPath + "_files/"

# 解压apk
def un_zip(apk_path, extract_path):
    print("unzip:", apk_path)
    zip_file = zipfile.ZipFile(apk_path)
    if os.path.isdir(extract_path):
        pass
    else:
        os.mkdir(extract_path)
    for names in zip_file.namelist():
        zip_file.extract(names, extract_path)
    zip_file.close()

# 获取签名信息
def getSignatureSha256(extractPath):
    certRSAPath = extractPath + "/META-INF/CERT.RSA"
    outputPath = extractPath + "/sign.txt"
    cmd = "keytool -printcert -file " + certRSAPath + " > " + outputPath
    call("keytool -printcert -file " + certRSAPath)
    return os.system(cmd)

# 读取sha256
def readSignatureSha256(extractPath):
     outputPath = extractPath + "/sign.txt"
     for line in open(outputPath):
          if(line.__contains__("SHA256")):
              return line.strip()    
              

argv = sys.argv[1:]
print(argv)
apkPath = argv[0]
extractPath = getExtractPath(apkPath)
un_zip(apkPath , extractPath)
getSignatureSha256(extractPath)
sha256 = readSignatureSha256(extractPath)
print(sha256)

在这里插入图片描述