Using PackageInfo.signatures to get public ke

by Yuliy Pisetsky » Fri, 16 Jul 2010 06:35:17 GMT


Sponsored Links
 Hi,

I was wondering if there's any more detail that can be extracted from
PackageInfo.signatures. For instance, can we extract the public key
that was used to sign the package? (and trust that the OS had already
verified that the APK was indeed signed with the corresponding private
key). What I'd want to do is to be able to have a list of trusted
partners that are allowed to call my app, with those partners all
having separate keys. I'd have a database of partners and their public
keys available somehow (embedded or on a web site), and would be able
to make security decisions based on who the caller is (while reducing
the risk of the user making an incorrect decision and granting an app
which shouldn't have that access the permission to call my app.

-Yuliy



Other Threads

1. Just trying to capture screenshots

I followed all instructions, but when I get to the point of double
clicking the ddms.bat file, I see the command prompt pop up and then
nothing. I have tried running as an admin with the same results. What
am I doing wrong?

Notes:
I have downloaded and updated android sdk
I have downloaded and installed java_ee_sdk-5_08-jdk-6u17-windows

Sorry if this is posted under something else, but I only got one
result for "ddms"

--

2. failed on Ubuntu 9.10 x64

I had to fix some unmentioned things on my ubuntu before make even did
something, but now I got stuck on

/bin/bash: line 0: cd: development/tools/layoutopt/app/src/resources:
No such file or directory
host Executable: aapt (out/host/linux-x86/obj/EXECUTABLES/
aapt_intermediates/aapt)
/usr/bin/ld: skipping incompatible /usr/lib/gcc/x86_64-linux-gnu/
4.4.1/../../../libz.so when searching for -lz

It looks like there is something wrong with gcc, do I have to
downgrade it to some version?

-- 
unsubscribe: android-porting+unsubscr...@googlegroups.com
website: 

3. Merge gives odd z order hiding between custom views

4. String arrays do not allow illegal java names as values.

5. ContactsContract.CommonDataKinds.Phone.HAS_PHONE_NUMBER

6. what kind of Java in Android

7. Mod: Mohon buat Filter, subject: Delivered: For Man Only