JSSE and BC CertificateParser

README.md

@@ -62,15 +62,14 @@ try(ApkFile apkFile = new ApkFile(new File(filePath))) {
 }
 ```
 
-##### 4. Get certificate and verify apk signature
+##### 4. Get Apk Sign info
+
+To get apk signer certificate info and other messages, using:
 
 ```java
 try(ApkFile apkFile = new ApkFile(new File(filePath))) {
-    ApkSignStatus signStatus = apkFile.verifyApk();
-    List<CertificateMeta> certs = apkFile.getCertificateMetas();
-    for (CertificateMeta certificateMeta : certs) {
-        System.out.println(certificateMeta.getSignAlgorithm());
-    }
+    List<ApkSigner> signers = apkFile.getApkSingers(); // apk v1 signers
+    List<ApkV2Signer> v2signers = apkFile.getApkV2Singers(); // apk v2 signers
 }
 ```
 

pom.xml

@@ -61,11 +61,13 @@
             <groupId>org.bouncycastle</groupId>
             <artifactId>bcprov-jdk15on</artifactId>
             <version>1.58</version>
+            <optional>true</optional>
         </dependency>
         <dependency>
             <groupId>org.bouncycastle</groupId>
             <artifactId>bcpkix-jdk15on</artifactId>
             <version>1.58</version>
+            <optional>true</optional>
         </dependency>
         <dependency>
             <groupId>junit</groupId>

src/main/java/net/dongliu/apk/parser/AbstractApkFile.java

@@ -127,7 +127,7 @@ public List<ApkSigner> getApkSingers() throws IOException, CertificateException
     private void parseCertificates() throws IOException, CertificateException {
         this.apkSigners = new ArrayList<>();
         for (CertificateFile file : getAllCertificateData()) {
-            CertificateParser parser = new CertificateParser(file.getData());
+            CertificateParser parser = CertificateParser.getInstance(file.getData());
             List<CertificateMeta> certificateMetas = parser.parse();
             apkSigners.add(new ApkSigner(file.getPath(), certificateMetas));
         }
@@ -339,9 +339,11 @@ private void parseResourceTable() throws IOException {
     }
 
     /**
-     * Check apk sign.
-     * TODO:Now only use jar-sign, apk-signing v2 not supported
+     * Check apk sign. This method only use apk v1 scheme verifier
+     *
+     * @deprecated using google official ApkVerifier of apksig lib instead.
      */
+    @Deprecated
     public abstract ApkSignStatus verifyApk() throws IOException;
 
     @Override

src/main/java/net/dongliu/apk/parser/ApkFile.java

@@ -71,7 +71,13 @@ protected ByteBuffer fileData() throws IOException {
     }
 
 
+    /**
+     * {@inheritDoc}
+     *
+     * @deprecated using google official ApkVerifier of apksig lib instead.
+     */
     @Override
+    @Deprecated
     public ApkSignStatus verifyApk() throws IOException {
         ZipEntry entry = zf.getEntry("META-INF/MANIFEST.MF");
         if (entry == null) {

src/main/java/net/dongliu/apk/parser/ApkParsers.java

@@ -13,6 +13,20 @@
  */
 public class ApkParsers {
 
+    private static boolean useBouncyCastle;
+
+    public static boolean useBouncyCastle() {
+        return useBouncyCastle;
+    }
+
+    /**
+     * Use BouncyCastle instead of JSSE to parse X509 certificate.
+     * If want to use BouncyCastle, you will also need to add bcprov and bcpkix lib to your project.
+     */
+    public static void useBouncyCastle(boolean useBouncyCastle) {
+        ApkParsers.useBouncyCastle = useBouncyCastle;
+    }
+
     /**
      * Get apk meta info for apk file
      *

src/main/java/net/dongliu/apk/parser/Main.java

@@ -11,7 +11,7 @@
 public class Main {
     public static void main(String[] args) throws IOException, CertificateException {
         try (ApkFile apkFile = new ApkFile(args[0])) {
-            System.out.println(apkFile.getApkV2Singers().get(0).getCertificateMetas());
+            System.out.println(apkFile.getApkSingers().get(0).getCertificateMetas());
         }
     }
 }