Hi,

I'm looking for a way to get the certificates from a package that are  
used to sign it. Using the PackageInfo class it is possible to get the  
signatures. But what can I do with signatures if I don't get the  
public keys to verify these.

The next question I have where does the PackageInstaller verify the  
signed APK file? The PackageParser class loads the APK file into a  
JarFile object but does this automatically verify the signature?

Thanks for help
Lutz

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers-unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to