How to know programmatically if an app is signed with a Debug or Export certificate?

Question

As the title explains, I would like to know if there's a way (code) to know that the produced app (.apk) is signed with a Debug certificate or Export certificate? I would like to check this inside my app so that i can enable/disable some features depending on the type of certificate.

I wonder how Google verifies this information at the time when we upload an app in Market through Developer Console?

any suggestion/code would be appreciated.

Possible duplicate of [How to check if APK is signed or "debug build"?](http://stackoverflow.com/questions/7085644/how-to-check-if-apk-is-signed-or-debug-build) — grebulon, Jan 25 '17 at 10:50

score 2 · Answer 1 · answered Mar 02 '12 at 14:17

2

I use

final PackageInfo info = mContext.getPackageManager().getPackageInfo(mContext.getPackageName(), 0);
ApplicationUtils.DEBUG_ENABLED = (info.applicationInfo.flags & ApplicationInfo.FLAG_DEBUGGABLE) != 0;

to enable/disable debug logging.

answered Mar 02 '12 at 14:17

techi.services

8,473
4
39
42

which package contains `ApplicationUtils`? – waqaslam Mar 02 '12 at 14:22
`ApplicationUtils` is my own class of static variables/functions that is initialized in `Application.onCreate`. – techi.services Mar 02 '12 at 14:26
1

The debug flag is automatically set for you when the APK is built with a debug key so you don't need to set it in the manifest. – techi.services Mar 02 '12 at 14:33
1

@Vinay, you can just use `BuildConfig.DEBUG` now. – techi.services Aug 07 '14 at 15:57

score 1 · Accepted Answer · answered Mar 06 '12 at 20:12

1

I found this resource, which describes what you are trying to solve. This page describes how to get information about a keystore in code.

http://daniel-codes.blogspot.com/2011/04/detecting-keystore-signature-in-code.html

answered Mar 06 '12 at 20:12

Booger

18,579
7
55
72

404 - Not Found – Hamidreza Sadegh Nov 01 '16 at 14:18
This answer gives an example of how to do it: http://stackoverflow.com/a/11535593/2603965 – grebulon Jan 25 '17 at 10:49

Booger · Answer 3 · 2012-03-02T14:23:13.567

0

You will only be able to deploy your app to the Android Market with your Export certificate.

The AM will reject your APK if it is not signed with the same certificate you used when you uploaded your first APK.

It looks like you can get info about the Public key from the: javax.security.auth.Subject package (try the getPublicCredentials() method). I haven't used it myself.

edited Mar 02 '12 at 14:23

answered Mar 02 '12 at 14:15

Booger

18,579
7
55
72

Yes, i know that we need to update app with the same certificate. But what I'm looking for is the certificate information with in the app, like name, company, organization, isDebug, etc. – waqaslam Mar 02 '12 at 14:21

onit · Answer 4 · 2012-03-02T14:25:04.533

0

The company name is called Android Debug for the debug key.

Run jarsigner -verbose -certs -verify against the debug and the signed apks. You will see for the debug apk, the CN field is called Android Debug. For your signed apk, it is the name of the key signer.

This is probably how Google and other markets check the key when uploading to the market. Like others said, you will not be able to upload an app signed with a debug key to the market, so I don't know why you would need to check this.

edited Mar 02 '12 at 14:25

answered Mar 02 '12 at 14:18

onit

6,306
3
24
31

as i said, i'm not talking about uploading or updating app on market. I just wanted to know these fields with in the code. Is there any possibility? – waqaslam Mar 02 '12 at 14:26

How to know programmatically if an app is signed with a Debug or Export certificate?

4 Answers4