Android打包时签名文件keystore的MD5值

些SDK提供方需要我们提供打包APK时使用的包名和签名文件(xxxxxx.jks这个文件)MD5值，然后SDK服务端应该会进行比对保证商户调用的合法性。不然光靠包名是可以伪造的，怎么获取签名文件的MD5值？

方法一：

原先通过命令keytool -list -v -keystore test.jks 可以查看md5值，但是发现现在查看不了，只有SHA1和SHA256的

方法二：改成从androidstudio查看

在app的build.gradle中配置你们签名文件，怎么生成签名文件？

build-->Generate signed bundle\APK-->next -->Create  new

android{

signingConfigs {
    release {
        keyAlias 'test'
        storePassword '666666'
        keyPassword '666666'
        storeFile file('E:\\test.jks')
    }
    debug {
        keyAlias 'test'
        storePassword '666666'
        keyPassword '666666'
        storeFile file('E:\\test.jks')
    }
}
}

右侧gradle Tasks里面双击signingReport就可以查看签名文件的MD5值了
 

获取后去掉 ：

方法三：从PackageInfo类中获取

package com.chinapay.umsfacesdkdemo.utils; import android.content.Context;import android.content.pm.PackageInfo;import android.content.pm.PackageManager;import android.content.pm.Signature;import android.util.Log; import java.security.MessageDigest;import java.util.ArrayList;import java.util.HashMap;  public class AppSigning {    public final static String MD5 = "MD5";    public final static String SHA1 = "SHA1";    public final static String SHA256 = "SHA256";    private static HashMap> mSignMap = new HashMap<>();         public static ArrayList getSignInfo(Context context, String type) {        if (context == null || type == null) {            return null;        }        String packageName = context.getPackageName();        if (packageName == null) {            return null;        }        if (mSignMap.get(type) != null) {            return mSignMap.get(type);        }        ArrayList mList = new ArrayList();        try {            Signature[] signs = getSignatures(context, packageName);            for (Signature sig : signs) {                String tmp = "error!";                if (MD5.equals(type)) {                    tmp = getSignatureByteString(sig, MD5);                } else if (SHA1.equals(type)) {                    tmp = getSignatureByteString(sig, SHA1);                } else if (SHA256.equals(type)) {                    tmp = getSignatureByteString(sig, SHA256);                }                mList.add(tmp);            }        } catch (Exception e) {            Log.e("e", e.getMessage());        }        mSignMap.put(type, mList);        return mList;    }         public static String getSha1(Context context) {        String res = "";        ArrayList mlist = getSignInfo(context, SHA1);        if (mlist != null && mlist.size() != 0) {            res = mlist.get(0);        }        return res;    }         public static String getMD5(Context context) {        String res = "";        ArrayList mlist = getSignInfo(context, MD5);        if (mlist != null && mlist.size() != 0) {            res = mlist.get(0);        }        return res;    }         public static String getSHA256(Context context) {        String res = "";        ArrayList mlist = getSignInfo(context, SHA256);        if (mlist != null && mlist.size() != 0) {            res = mlist.get(0);        }        return res;    }         private static Signature[] getSignatures(Context context, String packageName) {        PackageInfo packageInfo = null;        try {            packageInfo = context.getPackageManager().getPackageInfo(packageName, PackageManager.GET_SIGNATURES);            return packageInfo.signatures;        } catch (Exception e) {            Log.e("e", e.toString());        }        return null;    }         private static String getSignatureString(Signature sig, String type) {        byte[] hexBytes = sig.toByteArray();        String fingerprint = "error!";        try {            MessageDigest digest = MessageDigest.getInstance(type);            if (digest != null) {                byte[] digestBytes = digest.digest(hexBytes);                StringBuilder sb = new StringBuilder();                for (byte digestByte : digestBytes) {                    sb.append((Integer.toHexString((digestByte & 0xFF) | 0x100)).substring(1, 3));                }                fingerprint = sb.toString();            }        } catch (Exception e) {            Log.e("e", e.toString());         }         return fingerprint;    }         private static String getSignatureByteString(Signature sig, String type) {        byte[] hexBytes = sig.toByteArray();        String fingerprint = "error!";        try {            MessageDigest digest = MessageDigest.getInstance(type);            if (digest != null) {                byte[] digestBytes = digest.digest(hexBytes);                StringBuilder sb = new StringBuilder();                for (byte digestByte : digestBytes) {                    sb.append(((Integer.toHexString((digestByte & 0xFF) | 0x100)).substring(1, 3)).toUpperCase());                    sb.append(":");                }                fingerprint = sb.substring(0, sb.length() - 1).toString();            }        } catch (Exception e) {            Log.e("e", e.toString());        }         return fingerprint;    }}

 调用上面的 String md5=AppSigning.getMD5(MainActivity.this)就可以了

来源地址：https://blog.csdn.net/u012028250/article/details/129709475