查看apk签名 和 keystore 的信息

1、查看 keystore

$ keytool -list -v -keystore debug.keystore

$ keytool -list -v -keystore debug.keystore 
Enter keystore password:  

*****************  WARNING WARNING WARNING  *****************
* The integrity of the information stored in your keystore  *
* has NOT been verified!  In order to verify its integrity, *
* you must provide your keystore password.                  *
*****************  WARNING WARNING WARNING  *****************

Keystore type: JKS
Keystore provider: SUN

Your keystore contains 1 entry

Alias name: androiddebugkey
Creation date: Apr 8, 2015
Entry type: PrivateKeyEntry
Certificate chain length: 1
Certificate[1]:
Owner: CN=Android Debug, O=Android, C=US
Issuer: CN=Android Debug, O=Android, C=US
Serial number: 509aeb88
Valid from: Wed Apr 08 20:48:48 CST 2015 until: Fri Mar 31 20:48:48 CST 2045
Certificate fingerprints:
     MD5:  38:43:E1:B6:AB:F2:7F:80:93:CD:E5:EF:75:B9:A5:6C
     SHA1: 9D:53:DB:6C:DA:D4:08:B3:D4:A6:E5:26:17:BD:80:FA:5A:E4:4F:AB
     SHA256: D5:FF:04:4A:A2:F8:A4:EA:2A:44:53:28:0C:20:16:45:E8:71:AC:B1:74:76:F6:B4:01:90:86:83:73:E0:B0:8A
     Signature algorithm name: SHA256withRSA
     Version: 3

Extensions: 

#1: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: B2 FF B2 0D 9C 54 BA BA   A2 EF E3 BA E2 47 90 7F  .....T.......G..
0010: 17 8A 35 A8                                        ..5.
]
]

*******************************************

2、查看三方应用或是系统应用签名

打开待查看的apk，将其中META-INF文件夹解压出来，得到其中的CERT.RSA文件

$ keytool -printcert -file META-INF/CERT.RSA

打开待查看的apk，将其中META-INF文件夹解压出来，得到其中的CERT.RSA文件
$ keytool -printcert -file META-INF/CERT.RSA

Owner: CN=Android Debug, O=Android, C=US


Issuer: CN=Android Debug, O=Android, C=US


Serial number: 514ab2e1


Valid from: Thu Mar 21 15:12:33 CST 2013 until: Sat Mar 14 15:12:33 CST 2043


Certificate fingerprints:


MD5:  E0:F4:90:EE:CD:77:17:0E:B8:C4:AC:64:B2:F6:FC:83


SHA1: 7F:E5:11:D8:37:4F:DA:D7:75:EA:A5:8C:47:06:85:95:6D:1D:3F:2B


Signature algorithm name: SHA1withRSA


Version: 3

3、给空白包签名 （注意 alias 值）

jarsigner -verbose -keystore [keystorePath] -signedjar [apkOut] [apkIn] [alias]

jarsigner命令格式：-verbose输出详细信息 -keystore密钥库位置 -signedjar要生成的文件 要签名的文件 密钥库文件
keystorePath参数代表keyStore的绝对路径，如D:\keystore
apkOut参数代表签名后的apk路径，如D:\signed.apk
apkin参数代表在腾讯应用中心下载的未签名apk，默认名称为tap_unsign.apk
alias参数代表签名用的alias名称（创建keyStore时所填写），如timdong

$ jarsigner -verbose -keystore debug.keystore -signedjar test2.apk tap_unsign1.apk timdong

Enter Passphrase for keystore: 

   adding: META-INF/MANIFEST.MF

   adding: META-INF/ANDROIDD.SF

   adding: META-INF/ANDROIDD.RSA

  signing: res/drawable/ic_launcher.png

  signing: res/layout/main.xml

  signing: AndroidManifest.xml

  signing: resources.arsc

  signing: classes.dex