4.3.1.4 创建/使用内部内容供应器

内部内容供应器禁止除内部应用以外的应用使用。

下面展示了如何实现内部内容供应器的示例代码。

要点（创建内容供应器）：

  1. 定义内部签名权限。

  2. 需要内部签名权限。

  3. 将导出属性显式设置为true。

  4. 验证内部签名权限是否由内部应用定义。

  5. 验证参数的安全性，即使这是来自内部应用的请求。

  6. 由于请求应用是内部的，因此可以返回敏感信息。

  7. 导出 APK 时，请使用与请求应用相同的开发者密钥对 APK 进行签名。

AndroidManifest.xml

  1. <?xml version="1.0" encoding="utf-8"?>
  2. <manifest xmlns:android="http://schemas.android.com/apk/res/android"
  3.     package="org.jssec.android.provider.inhouseprovider">
  4.     <!-- *** POINT 1 *** Define an in-house signature permission -->
  5.     <permission
  6.     android:name="org.jssec.android.provider.inhouseprovider.MY_PERMISSION"
  7.     android:protectionLevel="signature" />
  8.     <application
  9.         android:icon="@drawable/ic_launcher"
  10.         android:label="@string/app_name" >
  11.         <!-- *** POINT 2 *** Require the in-house signature permission -->
  12.         <!-- *** POINT 3 *** Explicitly set the exported attribute to true. -->
  13.         <provider
  14.         android:name=".InhouseProvider"
  15.         android:authorities="org.jssec.android.provider.inhouseprovider"
  16.         android:permission="org.jssec.android.provider.inhouseprovider.MY_PERMISSION"
  17.         android:exported="true" />
  18.     </application>
  19. </manifest>

InhouseProvider.java

  1. package org.jssec.android.provider.inhouseprovider;
  3. import org.jssec.android.shared.SigPerm;
  4. import org.jssec.android.shared.Utils;
  5. import android.content.ContentProvider;
  6. import android.content.ContentUris;
  7. import android.content.ContentValues;
  8. import android.content.Context;
  9. import android.content.UriMatcher;
  10. import android.database.Cursor;
  11. import android.database.MatrixCursor;
  12. import android.net.Uri;
  14. public class InhouseProvider extends ContentProvider {
  16.     public static final String AUTHORITY = "org.jssec.android.provider.inhouseprovider";
  17.     public static final String CONTENT_TYPE = "vnd.android.cursor.dir/vnd.org.jssec.contenttype";
  18.     public static final String CONTENT_ITEM_TYPE = "vnd.android.cursor.item/vnd.org.jssec.contenttype";
  19.     // Expose the interface that the Content Provider provides.
  21.     public interface Download {
  22.         public static final String PATH = "downloads";
  23.         public static final Uri CONTENT_URI = Uri.parse("content://" + AUTHORITY + "/" + PATH);
  24.     }
  26.     public interface Address {
  27.         public static final String PATH = "addresses";
  28.         public static final Uri CONTENT_URI = Uri.parse("content://" + AUTHORITY + "/" + PATH);
  29.     }
  31.     // UriMatcher
  32.     private static final int DOWNLOADS_CODE = 1;
  33.     private static final int DOWNLOADS_ID_CODE = 2;
  34.     private static final int ADDRESSES_CODE = 3;
  35.     private static final int ADDRESSES_ID_CODE = 4;
  36.     private static UriMatcher sUriMatcher;
  38.     static {
  39.         sUriMatcher = new UriMatcher(UriMatcher.NO_MATCH);
  40.         sUriMatcher.addURI(AUTHORITY, Download.PATH, DOWNLOADS_CODE);
  41.         sUriMatcher.addURI(AUTHORITY, Download.PATH + "/#", DOWNLOADS_ID_CODE);
  42.         sUriMatcher.addURI(AUTHORITY, Address.PATH, ADDRESSES_CODE);
  43.         sUriMatcher.addURI(AUTHORITY, Address.PATH + "/#", ADDRESSES_ID_CODE);
  44.     }
  46.     // Since this is a sample program,
  47.     // query method returns the following fixed result always without using database.
  48.     private static MatrixCursor sAddressCursor = new MatrixCursor(new String[] { "_id", "city" });
  50.     static {
  51.         sAddressCursor.addRow(new String[] { "1", "New York" });
  52.         sAddressCursor.addRow(new String[] { "2", "London" });
  53.         sAddressCursor.addRow(new String[] { "3", "Paris" });
  54.     }
  56.     private static MatrixCursor sDownloadCursor = new MatrixCursor(new String[] { "_id", "path" });
  58.     static {
  59.         sDownloadCursor.addRow(new String[] { "1", "/sdcard/downloads/sample.jpg" });
  60.         sDownloadCursor.addRow(new String[] { "2", "/sdcard/downloads/sample.txt" });
  61.     }
  63.     // In-house Signature Permission
  64.     private static final String MY_PERMISSION = "org.jssec.android.provider.inhouseprovider.MY_PERMISSION";
  65.     // In-house certificate hash value
  66.     private static String sMyCertHash = null;
  68.     private static String myCertHash(Context context) {
  69.         if (sMyCertHash == null) {
  70.             if (Utils.isDebuggable(context)) {
  71.                 // Certificate hash value of "androiddebugkey" in the debug.keystore.
  72.                 sMyCertHash = "0EFB7236 328348A9 89718BAD DF57F544 D5CCB4AE B9DB34BC 1E29DD26 F77C8255";
  73.             } else {
  74.                 // Certificate hash value of "my company key" in the keystore.
  75.                 sMyCertHash = "D397D343 A5CBC10F 4EDDEB7C A10062DE 5690984F 1FB9E88B D7B3A7C2 42E142CA";
  76.             }
  77.         }
  78.         return sMyCertHash;
  79.     }
  81.     @Override
  82.     public boolean onCreate() {
  83.         return true;
  84.     }
  86.     @Override
  87.     public String getType(Uri uri) {
  88.         switch (sUriMatcher.match(uri)) {
  89.             case DOWNLOADS_CODE:
  90.             case ADDRESSES_CODE:
  91.                 return CONTENT_TYPE;
  92.             case DOWNLOADS_ID_CODE:
  93.             case ADDRESSES_ID_CODE:
  94.                 return CONTENT_ITEM_TYPE;
  95.             default:
  96.                 throw new IllegalArgumentException("Invalid URI:" + uri);
  97.         }
  98.     }
  100.     @Override
  101.     public Cursor query(Uri uri, String[] projection, String selection,
  102.         String[] selectionArgs, String sortOrder) {
  103.         // *** POINT 4 *** Verify if the in-house signature permission is defined by an in-house application.
  104.         if (!SigPerm.test(getContext(), MY_PERMISSION, myCertHash(getContext()))) {
  105.             throw new SecurityException("The in-house signature permission is not declared by in-house application.");
  106.         }
  107.         // *** POINT 5 *** Handle the received request data carefully and securely,
  108.         // even though the data came from an in-house application.
  109.         // Here, whether uri is within expectations or not, is verified by UriMatcher#match() and switch case.
  110.         // Checking for other parameters are omitted here, due to sample.
  111.         // Refer to "3.2 Handle Input Data Carefully and Securely."
  112.         // *** POINT 6 *** Sensitive information can be returned since the requesting application is inhouse.
  113.         // It depends on application whether the query result has sensitive meaning or not.
  114.         switch (sUriMatcher.match(uri)) {
  115.             case DOWNLOADS_CODE:
  116.             case DOWNLOADS_ID_CODE:
  117.                 return sDownloadCursor;
  118.             case ADDRESSES_CODE:
  119.             case ADDRESSES_ID_CODE:
  120.                 return sAddressCursor;
  121.             default:
  122.                 throw new IllegalArgumentException("Invalid URI:" + uri);
  123.         }
  124.     }
  126.     @Override
  127.     public Uri insert(Uri uri, ContentValues values) {
  128.         // *** POINT 4 *** Verify if the in-house signature permission is defined by an in-house application.
  129.         if (!SigPerm.test(getContext(), MY_PERMISSION, myCertHash(getContext()))) {
  130.             throw new SecurityException("The in-house signature permission is not declared by in-house application.");
  131.         }
  132.         // *** POINT 5 *** Handle the received request data carefully and securely,
  133.         // even though the data came from an in-house application.
  134.         // Here, whether uri is within expectations or not, is verified by UriMatcher#match() and switch case.
  135.         // Checking for other parameters are omitted here, due to sample.
  136.         // Refer to "3.2 Handle Input Data Carefully and Securely."
  137.         // *** POINT 6 *** Sensitive information can be returned since the requesting application is inhouse.
  138.         // It depends on application whether the issued ID has sensitive meaning or not.
  139.         switch (sUriMatcher.match(uri)) {
  140.             case DOWNLOADS_CODE:
  141.                 return ContentUris.withAppendedId(Download.CONTENT_URI, 3);
  142.             case ADDRESSES_CODE:
  143.                 return ContentUris.withAppendedId(Address.CONTENT_URI, 4);
  144.             default:
  145.                 throw new IllegalArgumentException("Invalid URI:" + uri);
  146.         }
  147.     }
  149.     @Override
  150.     public int update(Uri uri, ContentValues values, String selection,
  151.         String[] selectionArgs) {
  152.         // *** POINT 4 *** Verify if the in-house signature permission is defined by an in-house application.
  153.         if (!SigPerm.test(getContext(), MY_PERMISSION, myCertHash(getContext()))) {
  154.             throw new SecurityException("The in-house signature permission is not declared by in-house application.");
  155.         }
  156.         // *** POINT 5 *** Handle the received request data carefully and securely,
  157.         // even though the data came from an in-house application.
  158.         // Here, whether uri is within expectations or not, is verified by UriMatcher#match() and switch case.
  159.         // Checking for other parameters are omitted here, due to sample.
  160.         // Refer to "3.2 Handle Input Data Carefully and Securely."
  161.         // *** POINT 6 *** Sensitive information can be returned since the requesting application is inhouse.
  162.         // It depends on application whether the number of updated records has sensitive meaning or not.
  163.         switch (sUriMatcher.match(uri)) {
  164.             case DOWNLOADS_CODE:
  165.                 return 5; // Return number of updated records
  166.             case DOWNLOADS_ID_CODE:
  167.                 return 1;
  168.             case ADDRESSES_CODE:
  169.                 return 15;
  170.             case ADDRESSES_ID_CODE:
  171.                 return 1;
  172.             default:
  173.                 throw new IllegalArgumentException("Invalid URI:" + uri);
  174.         }
  175.     }
  177.     @Override
  178.     public int delete(Uri uri, String selection, String[] selectionArgs) {
  179.         // *** POINT 4 *** Verify if the in-house signature permission is defined by an in-house application.
  180.         if (!SigPerm.test(getContext(), MY_PERMISSION, myCertHash(getContext()))) {
  181.             throw new SecurityException("The in-house signature permission is not declared by in-house application.");
  182.         }
  183.         // *** POINT 5 *** Handle the received request data carefully and securely,
  184.         // even though the data came from an in-house application.
  185.         // Here, whether uri is within expectations or not, is verified by UriMatcher#match() and switch case.
  186.         // Checking for other parameters are omitted here, due to sample.
  187.         // Refer to "3.2 Handle Input Data Carefully and Securely."
  188.         // *** POINT 6 *** Sensitive information can be returned since the requesting application is inhouse.
  189.         // It depends on application whether the number of deleted records has sensitive meaning or not.
  190.         switch (sUriMatcher.match(uri)) {
  191.             case DOWNLOADS_CODE:
  192.                 return 10; // Return number of deleted records
  193.             case DOWNLOADS_ID_CODE:
  194.                 return 1;
  195.             case ADDRESSES_CODE:
  196.                 return 20;
  197.             case ADDRESSES_ID_CODE:
  198.                 return 1;
  199.             default:
  200.                 throw new IllegalArgumentException("Invalid URI:" + uri);
  201.         }
  202.     }
  203. }

SigPerm.java

  1. package org.jssec.android.shared;
  3. import android.content.Context;
  4. import android.content.pm.PackageManager;
  5. import android.content.pm.PackageManager.NameNotFoundException;
  6. import android.content.pm.PermissionInfo;
  8. public class SigPerm {
  10.     public static boolean test(Context ctx, String sigPermName, String correctHash) {
  11.         if (correctHash == null) return false;
  12.         correctHash = correctHash.replaceAll(" ", "");
  13.         return correctHash.equals(hash(ctx, sigPermName));
  14.     }
  16.     public static String hash(Context ctx, String sigPermName) {
  17.         if (sigPermName == null) return null;
  18.         try {
  19.             // Get the package name of the application which declares a permission named sigPermName.
  20.             PackageManager pm = ctx.getPackageManager();
  21.             PermissionInfo pi;
  22.             pi = pm.getPermissionInfo(sigPermName, PackageManager.GET_META_DATA);
  23.             String pkgname = pi.packageName;
  24.             // Fail if the permission named sigPermName is not a Signature Permission
  25.             if (pi.protectionLevel != PermissionInfo.PROTECTION_SIGNATURE) return null;
  26.             // Return the certificate hash value of the application which declares a permission named sigPermName.
  27.             return PkgCert.hash(ctx, pkgname);
  28.         } catch (NameNotFoundException e) {
  29.             return null;
  30.         }
  31.     }
  32. }

PkgCert.java

  1. package org.jssec.android.shared;
  3. import java.security.MessageDigest;
  4. import java.security.NoSuchAlgorithmException;
  5. import android.content.Context;
  6. import android.content.pm.PackageInfo;
  7. import android.content.pm.PackageManager;
  8. import android.content.pm.PackageManager.NameNotFoundException;
  9. import android.content.pm.Signature;
  11. public class PkgCert {
  13.     public static boolean test(Context ctx, String pkgname, String correctHash) {
  14.         if (correctHash == null) return false;
  15.         correctHash = correctHash.replaceAll(" ", "");
  16.         return correctHash.equals(hash(ctx, pkgname));
  17.     }
  19.     public static String hash(Context ctx, String pkgname) {
  20.         if (pkgname == null) return null;
  21.         try {
  22.             PackageManager pm = ctx.getPackageManager();
  23.             PackageInfo pkginfo = pm.getPackageInfo(pkgname, PackageManager.GET_SIGNATURES);
  24.             if (pkginfo.signatures.length != 1) return null; // Will not handle multiple signatures.
  25.             Signature sig = pkginfo.signatures[0];
  26.             byte[] cert = sig.toByteArray();
  27.             byte[] sha256 = computeSha256(cert);
  28.             return byte2hex(sha256);
  29.         } catch (NameNotFoundException e) {
  30.             return null;
  31.         }
  32.     }
  34.     private static byte[] computeSha256(byte[] data) {
  35.         try {
  36.             return MessageDigest.getInstance("SHA-256").digest(data);
  37.         } catch (NoSuchAlgorithmException e) {
  38.             return null;
  39.         }
  40.     }
  41.     private static String byte2hex(byte[] data) {
  42.         if (data == null) return null;
  43.         final StringBuilder hexadecimal = new StringBuilder();
  44.         for (final byte b : data) {
  45.             hexadecimal.append(String.format("%02X", b));
  46.         }
  47.         return hexadecimal.toString();
  48.     }
  49. }

要点 7：导出 APK 时，请使用与请求应用相同的开发者密钥对 APK 进行签名。

4.3.1.4.md - 图1

下面是使用内部内容供应器的活动示例。

要点（使用内容个供应器）：

  1. 声明使用内部签名权限。

  2. 验证内部签名权限是否由内部应用定义。

  3. 验证目标应用是否使用内部证书签名。

  4. 由于目标应用是内部应用，因此可以发送敏感信息。

  5. 即使数据来自内部应用，也要小心并安全地处理收到的结果数据。

  6. 导出 APK 时，请使用与目标应用相同的开发人员密钥对 APK 进行签名。

AndroidManifest.xml

  1. <?xml version="1.0" encoding="utf-8"?>
  2. <manifest xmlns:android="http://schemas.android.com/apk/res/android"
  3.     package="org.jssec.android.provider.inhouseuser">
  4.     <!-- *** POINT 8 *** Declare to use the in-house signature permission. -->
  5.     <uses-permission
  6.     android:name="org.jssec.android.provider.inhouseprovider.MY_PERMISSION" />
  7.     <application
  8.         android:icon="@drawable/ic_launcher"
  9.         android:label="@string/app_name" >
  10.         <activity
  11.             android:name=".InhouseUserActivity"
  12.             android:label="@string/app_name"
  13.             android:exported="true" >
  14.             <intent-filter>
  15.                 <action android:name="android.intent.action.MAIN" />
  16.                 <category android:name="android.intent.category.LAUNCHER" />
  17.             </intent-filter>
  18.         </activity>
  19.     </application>
  20. </manifest>

InhouseUserActivity.java

  1. package org.jssec.android.provider.inhouseuser;
  3. import org.jssec.android.shared.PkgCert;
  4. import org.jssec.android.shared.SigPerm;
  5. import org.jssec.android.shared.Utils;
  6. import android.app.Activity;
  7. import android.content.ContentValues;
  8. import android.content.Context;
  9. import android.content.pm.PackageManager;
  10. import android.content.pm.ProviderInfo;
  11. import android.database.Cursor;
  12. import android.net.Uri;
  13. import android.os.Bundle;
  14. import android.view.View;
  15. import android.widget.TextView;
  17. public class InhouseUserActivity extends Activity {
  19.     // Target Content Provider Information
  20.     private static final String AUTHORITY = "org.jssec.android.provider.inhouseprovider";
  22.     private interface Address {
  23.         public static final String PATH = "addresses";
  24.         public static final Uri CONTENT_URI = Uri.parse("content://" + AUTHORITY + "/" + PATH);
  25.     }
  27.     // In-house Signature Permission
  28.     private static final String MY_PERMISSION = "org.jssec.android.provider.inhouseprovider.MY_PERMISSION";
  29.     // In-house certificate hash value
  30.     private static String sMyCertHash = null;
  32.     private static String myCertHash(Context context) {
  33.         if (sMyCertHash == null) {
  34.             if (Utils.isDebuggable(context)) {
  35.                 // Certificate hash value of "androiddebugkey" in the debug.keystore.
  36.                 sMyCertHash = "0EFB7236 328348A9 89718BAD DF57F544 D5CCB4AE B9DB34BC 1E29DD26 F77C8255";
  37.             } else {
  38.                 // Certificate hash value of "my company key" in the keystore.
  39.                 sMyCertHash = "D397D343 A5CBC10F 4EDDEB7C A10062DE 5690984F 1FB9E88B D7B3A7C2 42E142CA";
  40.             }
  41.         }
  42.         return sMyCertHash;
  43.     }
  45.     // Get package name of target content provider.
  46.     private static String providerPkgname(Context context, Uri uri) {
  47.         String pkgname = null;
  48.         PackageManager pm = context.getPackageManager();
  49.         ProviderInfo pi = pm.resolveContentProvider(uri.getAuthority(), 0);
  50.         if (pi != null) pkgname = pi.packageName;
  51.         return pkgname;
  52.     }
  54.     public void onQueryClick(View view) {
  55.         logLine("[Query]");
  56.         // *** POINT 9 *** Verify if the in-house signature permission is defined by an in-house application.
  57.         if (!SigPerm.test(this, MY_PERMISSION, myCertHash(this))) {
  58.             logLine(" The in-house signature permission is not declared by in-house application.");
  59.             return;
  60.         }
  61.         // *** POINT 10 *** Verify if the destination application is signed with the in-house certificate.
  62.         String pkgname = providerPkgname(this, Address.CONTENT_URI);
  63.         if (!PkgCert.test(this, pkgname, myCertHash(this))) {
  64.             logLine(" The target content provider is not served by in-house applications.");
  65.             return;
  66.         }
  67.         Cursor cursor = null;
  68.         try {
  69.             // *** POINT 11 *** Sensitive information can be sent since the destination application is in-house one.
  70.             cursor = getContentResolver().query(Address.CONTENT_URI, null, null, null, null);
  71.             // *** POINT 12 *** Handle the received result data carefully and securely,
  72.             // even though the data comes from an in-house application.
  73.             // Omitted, since this is a sample. Please refer to "3.2 Handling Input Data Carefully and Securely."
  74.                 if (cursor == null) {
  75.             logLine(" null cursor");
  76.             } else {
  77.                 boolean moved = cursor.moveToFirst();
  78.                 while (moved) {
  79.                     logLine(String.format(" %d, %s", cursor.getInt(0), cursor.getString(1)));
  80.                     moved = cursor.moveToNext();
  81.                 }
  82.             }
  83.         } finally {
  84.             if (cursor != null) cursor.close();
  85.         }
  86.     }
  88.     public void onInsertClick(View view) {
  89.         logLine("[Insert]");
  90.         // *** POINT 9 *** Verify if the in-house signature permission is defined by an in-house application.
  91.         String correctHash = myCertHash(this);
  92.         if (!SigPerm.test(this, MY_PERMISSION, correctHash)) {
  93.             logLine(" The in-house signature permission is not declared by in-house application.");
  94.             return;
  95.         }
  96.         // *** POINT 10 *** Verify if the destination application is signed with the in-house certificate.
  97.         String pkgname = providerPkgname(this, Address.CONTENT_URI);
  98.         if (!PkgCert.test(this, pkgname, correctHash)) {
  99.             logLine(" The target content provider is not served by in-house applications.");
  100.             return;
  101.         }
  102.         // *** POINT 11 *** Sensitive information can be sent since the destination application is in-house one.
  103.         ContentValues values = new ContentValues();
  104.         values.put("city", "Tokyo");
  105.         Uri uri = getContentResolver().insert(Address.CONTENT_URI, values);
  106.         // *** POINT 12 *** Handle the received result data carefully and securely,
  107.         // even though the data comes from an in-house application.
  108.         // Omitted, since this is a sample. Please refer to "3.2 Handling Input Data Carefully and Securely."
  109.         logLine(" uri:" + uri);
  110.     }
  112.     public void onUpdateClick(View view) {
  113.         logLine("[Update]");
  114.         // *** POINT 9 *** Verify if the in-house signature permission is defined by an in-house application.
  115.         String correctHash = myCertHash(this);
  116.         if (!SigPerm.test(this, MY_PERMISSION, correctHash)) {
  117.             logLine(" The in-house signature permission is not declared by in-house application.");
  118.             return;
  119.         }
  120.         // *** POINT 10 *** Verify if the destination application is signed with the in-house certificate.
  121.         String pkgname = providerPkgname(this, Address.CONTENT_URI);
  122.         if (!PkgCert.test(this, pkgname, correctHash)) {
  123.             logLine(" The target content provider is not served by in-house applications.");
  124.             return;
  125.         }
  126.         // *** POINT 11 *** Sensitive information can be sent since the destination application is in-house one.
  127.         ContentValues values = new ContentValues();
  128.         values.put("city", "Tokyo");
  129.         String where = "_id = ?";
  130.         String[] args = { "4" };
  131.         int count = getContentResolver().update(Address.CONTENT_URI, values, where, args);
  132.         // *** POINT 12 *** Handle the received result data carefully and securely,
  133.         // even though the data comes from an in-house application.
  134.         // Omitted, since this is a sample. Please refer to "3.2 Handling Input Data Carefully and Securely."
  135.         logLine(String.format(" %s records updated", count));
  136.     }
  138.     public void onDeleteClick(View view) {
  139.         logLine("[Delete]");
  140.         // *** POINT 9 *** Verify if the in-house signature permission is defined by an in-house application.
  141.         String correctHash = myCertHash(this);
  142.         if (!SigPerm.test(this, MY_PERMISSION, correctHash)) {
  143.             logLine(" The target content provider is not served by in-house applications.");
  144.             return;
  145.         }
  146.         // *** POINT 10 *** Verify if the destination application is signed with the in-house certificat
  147.         e.
  148.         String pkgname = providerPkgname(this, Address.CONTENT_URI);
  149.         if (!PkgCert.test(this, pkgname, correctHash)) {
  150.             logLine(" The target content provider is not served by in-house applications.");
  151.             return;
  152.         }
  153.         // *** POINT 11 *** Sensitive information can be sent since the destination application is in-ho
  154.         use one.
  155.         int count = getContentResolver().delete(Address.CONTENT_URI, null, null);
  156.         // *** POINT 12 *** Handle the received result data carefully and securely,
  157.         // even though the data comes from an in-house application.
  158.         // Omitted, since this is a sample. Please refer to "3.2 Handling Input Data Carefully and Securely."
  159.         logLine(String.format(" %s records deleted", count));
  160.     }
  162.     private TextView mLogView;
  164.     @Override
  165.     public void onCreate(Bundle savedInstanceState) {
  166.         super.onCreate(savedInstanceState);
  167.         setContentView(R.layout.main);
  168.         mLogView = (TextView)findViewById(R.id.logview);
  169.     }
  171.     private void logLine(String line) {
  172.         mLogView.append(line);
  173.         mLogView.append("¥n");
  174.     }
  175. }

SigPerm.java

  1. package org.jssec.android.shared;
  3. import android.content.Context;
  4. import android.content.pm.PackageManager;
  5. import android.content.pm.PackageManager.NameNotFoundException;
  6. import android.content.pm.PermissionInfo;
  8. public class SigPerm {
  10.     public static boolean test(Context ctx, String sigPermName, String correctHash) {
  11.         if (correctHash == null) return false;
  12.         correctHash = correctHash.replaceAll(" ", "");
  13.         return correctHash.equals(hash(ctx, sigPermName));
  14.     }
  16.     public static String hash(Context ctx, String sigPermName) {
  17.         if (sigPermName == null) return null;
  18.         try {
  19.             // Get the package name of the application which declares a permission named sigPermName.
  20.             PackageManager pm = ctx.getPackageManager();
  21.             PermissionInfo pi;
  22.             pi = pm.getPermissionInfo(sigPermName, PackageManager.GET_META_DATA);
  23.             String pkgname = pi.packageName;
  24.             // Fail if the permission named sigPermName is not a Signature Permission
  25.             if (pi.protectionLevel != PermissionInfo.PROTECTION_SIGNATURE) return null;
  26.             // Return the certificate hash value of the application which declares a permission named sigPermName.
  27.             return PkgCert.hash(ctx, pkgname);
  28.         } catch (NameNotFoundException e) {
  29.             return null;
  30.         }
  31.     }
  32. }

PkgCert.java

  1. package org.jssec.android.shared;
  3. import java.security.MessageDigest;
  4. import java.security.NoSuchAlgorithmException;
  5. import android.content.Context;
  6. import android.content.pm.PackageInfo;
  7. import android.content.pm.PackageManager;
  8. import android.content.pm.PackageManager.NameNotFoundException;
  9. import android.content.pm.Signature;
  11. public class PkgCert {
  13.     public static boolean test(Context ctx, String pkgname, String correctHash) {
  14.         if (correctHash == null) return false;
  15.         correctHash = correctHash.replaceAll(" ", "");
  16.         return correctHash.equals(hash(ctx, pkgname));
  17.     }
  19.     public static String hash(Context ctx, String pkgname) {
  20.         if (pkgname == null) return null;
  21.         try {
  22.             PackageManager pm = ctx.getPackageManager();
  23.             PackageInfo pkginfo = pm.getPackageInfo(pkgname, PackageManager.GET_SIGNATURES);
  24.             if (pkginfo.signatures.length != 1) return null; // Will not handle multiple signatures.
  25.             Signature sig = pkginfo.signatures[0];
  26.             byte[] cert = sig.toByteArray();
  27.             byte[] sha256 = computeSha256(cert);
  28.             return byte2hex(sha256);
  29.         } catch (NameNotFoundException e) {
  30.             return null;
  31.         }
  32.     }
  34.     private static byte[] computeSha256(byte[] data) {
  35.         try {
  36.             return MessageDigest.getInstance("SHA-256").digest(data);
  37.         } catch (NoSuchAlgorithmException e) {
  38.             return null;
  39.         }
  40.     }
  42.     private static String byte2hex(byte[] data) {
  43.         if (data == null) return null;
  44.         final StringBuilder hexadecimal = new StringBuilder();
  45.         for (final byte b : data) {
  46.             hexadecimal.append(String.format("%02X", b));
  47.         }
  48.         return hexadecimal.toString();
  49.     }
  50. }

要点 13：导出 APK 时，请使用与请求应用相同的开发者密钥对 APK 进行签名。

4.3.1.4.md - 图2