1.獲取APK的簽名信息

private String showUninstallAPKSignatures(String apkPath) { 
         String PATH_PackageParser = "android.content.pm.PackageParser"; 
         try { 
             // apk包的檔案路徑 
             // 這是一個Package 直譯器, 是隱藏的 
             // 建構函式的引數只有一個, apk檔案的路徑 
             // PackageParser packageParser = new PackageParser(apkPath); 
             Class pkgParserCls = Class.forName(PATH_PackageParser); 
             Class[] typeArgs = new Class[1]; 
             typeArgs[0] = String.class; 
             Constructor pkgParserCt = pkgParserCls.getConstructor(typeArgs); 
             Object[] valueArgs = new Object[1]; 
             valueArgs[0] = apkPath; 
             Object pkgParser = pkgParserCt.newInstance(valueArgs); 
             MediaApplication.logD(DownloadApk.class, "pkgParser:" + pkgParser.toString()); 
             // 這個是與顯示有關的, 裡面涉及到一些畫素顯示等等, 我們使用預設的情況 
             DisplayMetrics metrics = new DisplayMetrics(); 
             metrics.setToDefaults(); 
             // PackageParser.Package mPkgInfo = packageParser.parsePackage(new 
             // File(apkPath), apkPath, 
             // metrics, 0); 
             typeArgs = new Class[4]; 
             typeArgs[0] = File.class; 
             typeArgs[1] = String.class; 
             typeArgs[2] = DisplayMetrics.class; 
             typeArgs[3] = Integer.TYPE; 
             Method pkgParser_parsePackageMtd = pkgParserCls.getDeclaredMethod("parsePackage", 
                     typeArgs); 
             valueArgs = new Object[4]; 
             valueArgs[0] = new File(apkPath); 
             valueArgs[1] = apkPath; 
             valueArgs[2] = metrics; 
             valueArgs[3] = PackageManager.GET_SIGNATURES; 
             Object pkgParserPkg = pkgParser_parsePackageMtd.invoke(pkgParser, valueArgs); 
             
             typeArgs = new Class[2]; 
             typeArgs[0] = pkgParserPkg.getClass(); 
             typeArgs[1] = Integer.TYPE; 
             Method pkgParser_collectCertificatesMtd = pkgParserCls.getDeclaredMethod("collectCertificates", 
                     typeArgs); 
             valueArgs = new Object[2]; 
             valueArgs[0] = pkgParserPkg; 
             valueArgs[1] = PackageManager.GET_SIGNATURES; 
             pkgParser_collectCertificatesMtd.invoke(pkgParser, valueArgs); 
             // 應用程式資訊包, 這個公開的, 不過有些函式, 變數沒公開 
             Field packageInfoFld = pkgParserPkg.getClass().getDeclaredField("mSignatures"); 
             Signature[] info = (Signature[]) packageInfoFld.get(pkgParserPkg); 
             MediaApplication.logD(DownloadApk.class, "size:"+info.length); 
             MediaApplication.logD(DownloadApk.class, info[0].toCharsString()); 
             return info[0].toCharsString(); 
         } catch (Exception e) { 
             e.printStackTrace(); 
         } 
         return null; 
     }
 

獲取程式自身的簽名：

 private String getSign(Context context) { 
    PackageManager pm = context.getPackageManager(); 
    List<PackageInfo> apps = pm.getInstalledPackages(PackageManager.GET_SIGNATURES); 
    Iterator<PackageInfo> iter = apps.iterator(); 
    while(iter.hasNext()) { 
         PackageInfo packageinfo = iter.next(); 
         String packageName = packageinfo.packageName; 
         if (packageName.equals(instance.getPackageName())) { 
            MediaApplication.logD(DownloadApk.class, packageinfo.signatures[0].toCharsString()); 
            return packageinfo.signatures[0].toCharsString(); 
         } 
 } 
    return null; 
} 
 

對比2個方法的返回值來判斷APK升級包的簽名是否一致，一致就提示可以安裝。

2.獲取指定已安裝完整簽名信息,包括MD5指紋：

public void getSingInfo() {
	try {
		PackageInfo packageInfo = getPackageManager().getPackageInfo("com.sina,weibo", PackageManager.GET_SIGNATURES);
		Signature[] signs = packageInfo.signatures;
		Signature sign = signs[0];
		parseSignature(sign.toByteArray());
	} catch (Exception e) {
		e.printStackTrace();
	}
}
public void parseSignature(byte[] signature) {
	try {
		CertificateFactory certFactory = CertificateFactory.getInstance("X.509");
		X509Certificate cert = (X509Certificate) certFactory.generateCertificate(new ByteArrayInputStream(signature));
		String pubKey = cert.getPublicKey().toString();
		String signNumber = cert.getSerialNumber().toString();
		System.out.println("signName:" + cert.getSigAlgName());
		System.out.println("pubKey:" + pubKey);
		System.out.println("signNumber:" + signNumber);
		System.out.println("subjectDN:"+cert.getSubjectDN().toString());
	} catch (CertificateException e) {
		e.printStackTrace();
	}
}
 

D:>keytool  -list -alias 在匯出時程式的別名(-alias 這個命令，好像不用也行，沒有試，反正我一直都在使用) -keystore  tangshan.keystore(匯出時使用的證書名稱) -storepass 123456-keypass 123456

出的結果為：

在匯出時程式的別名, 2011-7-29, PrivateKeyEntry,

認證指紋 (MD5)： 90:13:AF:46:0A:DC:5C:6C:77:0E:AA:AF:DA:8A:AB:72