识别Andriod APK签名证书类型

转载请注明出处

根据已知Google证书的序列号来识别APK使用哪种证书签名的

目前只列出google原生签名，其他私有签名均视为presigned

#!/bin/bash

# Grab cert. info from APKs
# eric, 130628


CER_NAMES=(

# google key serial
google_platform
google_shared
google_media
google_testkey


# google devkeys
google_devkey
google_devkey_media
google_devkey_platform
google_devkey_shared


)


CER_SERIALS=(


# google key serial
B3998086D056CFFA
F2A73396BD38767A
F2B98E6123572C4E
936EACBE07F201DF


# google dev devkeys
BCDFE81405D5C69E
A1573D0F45BEA193
A3823FB27F6289B8
BE56E295629C3E3D


)


if [ -z $1 ]
then
   echo "usage: $0 <apks_dir>"
   exit 1
fi


echo "certificate, cert_serial, apk" >/dev/stderr


(
find $1 -name *.apk | while read apk
do
    # echo "=== $apk ==="
    apk_cert=$(unzip -p $apk META-INF/*.RSA | \
               openssl pkcs7 -inform DER -print_certs | \
  openssl x509 -noout -serial)


    if [ $? != 0 ]
    then
        echo "*** err: Cannot grab certs of '$apk'"
continue
    fi


    rsa_ser=${apk_cert#*=}

i=0
cert="presigned"
for v in ${CER_SERIALS[@]}
do
   if [ "$v" = "$rsa_ser" ]
   then
   cert=${CER_NAMES[$i]}
# echo "$i === $cert"
break
fi
i=$((i+1))
done

    echo "$cert, $rsa_ser, $apk"


done
) | sort


exit 0