Well there is a PackageParser class inside the core which reads the Certificates. But there seems to be no interface to get them via the standard API. Do I have to let my app parse the package it self?

Am 23.03.2009 um 18:09 schrieb Lutz Schönemann:


Hi,

I'm looking for a way to get the certificates from a package that are
used to sign it. Using the PackageInfo class it is possible to get the
signatures. But what can I do with signatures if I don't get the
public keys to verify these.

The next question I have where does the PackageInstaller verify the
signed APK file? The PackageParser class loads the APK file into a
JarFile object but does this automatically verify the signature?

Thanks for help
Lutz

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers-unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en
-~----------~----~----~----~------~----~------~--~---



Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to