數字簽名 – Android應用的“./META-INF/CERT.RSA”檔案中包含什麼?
我是新的加密證書,我試圖找出一個Android應用程式的“./META-INF”資料夾下的“CERT.RSA”檔案的元件.
據我瞭解,“CERT.RSA”用於驗證同一目錄下的“CERT.SF”檔案的簽名.它應該由證書元資訊(主題,發行者,系列號等)組成,由開發者私鑰簽名的“CERT.SF”簽名,以及用於驗證簽名的公鑰.
如何從“CERT.RSA”檔案匯出上述元件?特別是,如何從“CERT.RSA”中檢索公鑰?
我試圖使用以下命令來顯示簽名證書.當人們談論簽名證書時,是(以下輸出)公鑰還是簽名簽名?
>> openssl pkcs7 -inform DER -print_certs -out cert.pem -in CERT.RSA >> cat cert.pem subject=/C=SE/ST=Kista/L=Kista/O=Javsym/OU=Mobile Visuals/CN=Eyvind Almqvist issuer=/C=SE/ST=Kista/L=Kista/O=Javsym/OU=Mobile Visuals/CN=Eyvind Almqvist -----BEGIN CERTIFICATE----- MIICWzCCAcSgAwIBAgIETVPFgjANBgkqhkiG9w0BAQUFADBxMQswCQYDVQQGEwJT RTEOMAwGA1UECBMFS2lzdGExDjAMBgNVBAcTBUtpc3RhMQ8wDQYDVQQKEwZKYXZz eW0xFzAVBgNVBAsTDk1vYmlsZSBWaXN1YWxzMRgwFgYDVQQDEw9FeXZpbmQgQWxt cXZpc3QwIBcNMTEwMjEwMTEwMTIyWhgPMjA2MTAxMjgxMTAxMjJaMHExCzAJBgNV BAYTAlNFMQ4wDAYDVQQIEwVLaXN0YTEOMAwGA1UEBxMFS2lzdGExDzANBgNVBAoT BkphdnN5bTEXMBUGA1UECxMOTW9iaWxlIFZpc3VhbHMxGDAWBgNVBAMTD0V5dmlu ZCBBbG1xdmlzdDCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAjwLlwflQ2zoC 1EeCkICSqYTSkdv6Xj0YCqoQsuLJw0pwDbz5qRos61Ub0ZxWCa4TfXu1NJmuD4j+ LwQYvAR6JO985y4zjH1Ee5qZmHDC5yoSRko6P8B4KfmBm8E8CryhUjN7vNLUfG2o XrmXK+g5KKTx3wzWlb4+AdAS7/NlDVkCAwEAATANBgkqhkiG9w0BAQUFAAOBgQAS CxdfvR/LHPlULkCsoGw9/Q2ZhsTlPr7fZw32sef9vnz1hqd6iMDsLC2c34yRVJfb t6dZCVO9/gWMURIZ7NmT36uBFAUB+XkGK+5/ot3YEJicEwmk/Nvj1Tzo3PjBX3ZD lLBpEPgc3IUOhgMyzDR+ytgFlH0MkDps6FApunUpiQ== -----END CERTIFICATE-----
通過使用以下命令,我可以獲得此證書的元資訊:
>> keytool -printcert -file CERT.RSA Owner: CN=Eyvind Almqvist, OU=Mobile Visuals, O=Javsym, L=Kista, ST=Kista, C=SE Issuer: CN=Eyvind Almqvist, OU=Mobile Visuals, O=Javsym, L=Kista, ST=Kista, C=SE Serial number: 4d53c582 Valid from: Thu Feb 10 06:01:22 EST 2011 until: Fri Jan 28 06:01:22 EST 2061 Certificate fingerprints: MD5:58:94:63:63:C1:ED:4C:02:CE:90:CE:64:DA:D7:4A:E4 SHA1: 17:5C:44:E3:A6:1A:F2:4F:A5:78:6E:C7:F0:42:4C:AD:E6:F5:CA:DF Signature algorithm name: SHA1withRSA Version: 3
有沒有其他工具/命令,我可以用來從“CERT.RSA”獲取更完整的資訊?
非常感謝任何投入!
一旦你有cert.pem檔案,你可以通過使用以下命令獲取公鑰:
openssl x509 -in cert.pem -noout -text
問候,
朱塞佩
http://stackoverflow.com/questions/22494486/what-is-contained-in-meta-inf-cert-rsa-file-for-an-android-app