android so 文件存私密数据，且防止 so文件未知应用盗用

以你之姓@ 2022-08-07 05:38 59阅读 0赞

有时候我们需要在客户端 存放一些 保密的数据，比如 服务端的IP 端口，接口的地址，授权的key 等等，如果我们直接写在java中，别人反编译就能看到，那么我们可以把这些数据 存在  so文件中，这样别人就不可能会看到了，顺便 so里面验证 app的签名 来防止别人盗用so文件,

下面的例子是 在so里面获取我的客户端key

1.jni的java文件   JNI.java

**\[java\]** [ view plain][view plain] [copy][view plain] [print][view plain] [?][view plain]

1.  package com.android.jni;  
2.    
3.  import android.content.Context;  
4.    
5.  public class JNI \{  
6.    
7.       static\{  
8.           System.loadLibrary("auth");  
9.       \}  
10.        
11.      /\*\* 
12.       \* 获取api 调用授权 key 
13.       \* @param signature 应用签名信息，防止http 接口  授权 key 被盗用 
14.       \* @return 
15.       \*/  
16.      public native String getAuthKey(Context context);  
17.        
18. \}

package com.android.jni;
    
    import android.content.Context;
    
    public class JNI {
    
    	 static{
    		 System.loadLibrary("auth");
    	 }
    	 
    	 /**
    	  * 获取api 调用授权 key
    	  * @param signature 应用签名信息，防止http 接口  授权 key 被盗用
    	  * @return
    	  */
    	 public native String getAuthKey(Context context);
    	 
    }

**\[java\]** [ view plain][view plain] [copy][view plain] [print][view plain] [?][view plain] [![在CODE上查看代码片][CODE]][CODE_CODE] [![派生到我的代码片][ico_fork.svg]][ico_fork.svg 1]

2. .h头文件   com\_android\_jni\_JNI.h

**\[cpp\]** [ view plain][view plain] [copy][view plain] [print][view plain] [?][view plain]

1.  /\* DO NOT EDIT THIS FILE - it is machine generated \*/  
2.  \#include <jni.h>  
3.  /\* Header for class com\_android\_jni\_JNI \*/  
4.    
5.  \#ifndef \_Included\_com\_android\_jni\_JNI  
6.  \#define \_Included\_com\_android\_jni\_JNI  
7.  \#ifdef \_\_cplusplus  
8.  extern "C" \{  
9.  \#endif  
10. /\* 
11.  \* Class:     com\_android\_jni\_JNI 
12.  \* Method:    getAuthKey 
13.  \* Signature: (Landroid/content/pm/Signature;)Ljava/lang/String; 
14.  \*/  
15. JNIEXPORT jstring JNICALL Java\_com\_android\_jni\_JNI\_getAuthKey  
16.   (JNIEnv \*, jobject, jobject);  
17.   
18. \#ifdef \_\_cplusplus  
19. \}  
20. \#endif  
21. \#endif

/* DO NOT EDIT THIS FILE - it is machine generated */
    #include <jni.h>
    /* Header for class com_android_jni_JNI */
    
    #ifndef _Included_com_android_jni_JNI
    #define _Included_com_android_jni_JNI
    #ifdef __cplusplus
    extern "C" {
    #endif
    /*
     * Class:     com_android_jni_JNI
     * Method:    getAuthKey
     * Signature: (Landroid/content/pm/Signature;)Ljava/lang/String;
     */
    JNIEXPORT jstring JNICALL Java_com_android_jni_JNI_getAuthKey
      (JNIEnv *, jobject, jobject);
    
    #ifdef __cplusplus
    }
    #endif
    #endif

3. so的 c++实现   com\_android\_jni\_JNI.cpp

**\[cpp\]** [ view plain][view plain] [copy][view plain] [print][view plain] [?][view plain] [![在CODE上查看代码片][CODE]][CODE_CODE] [![派生到我的代码片][ico_fork.svg]][ico_fork.svg 1]

1.  \#include <jni.h>  
2.  \#include <string.h>  
3.  \#include <stdio.h>  
4.  \#include <com\_android\_jni\_JNI.h>  
5.  /\*\* 
6.   \* http api 授权 key ，由服务端提供 
7.   \*/  
8.  const char\* AUTH\_KEY = "0CC175B9C0F1B6A831C399E269772661";  
9.    
10. /\*\* 
11.  \* 发布的app 签名,只有和本签名一致的app 才会返回合法的 授权 key 
12.  \*/  
13. const char\* RELEASE\_SIGN ="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";  
14.   
15. /\*\* 
16.  \* 拿到传入的app  的 签名信息，对比合法的app 签名，防止so文件被未知应用盗用 
17.  \*/  
18. static jclass contextClass;  
19. static jclass signatureClass;  
20. static jclass packageNameClass;  
21. static jclass packageInfoClass;  
22. JNIEXPORT jstring JNICALL Java\_<span style="font-family: Arial, Helvetica, sans-serif;">com\_android\_jni</span><span style="font-family: Arial, Helvetica, sans-serif;">\_JNI\_getAuthKey(</span>  
23.         JNIEnv \* env, jobject obj, jobject contextObject) \{  
24.   
25.     jmethodID getPackageManagerId = (env)->GetMethodID(contextClass, "getPackageManager","()Landroid/content/pm/PackageManager;");  
26.     jmethodID getPackageNameId = (env)->GetMethodID(contextClass, "getPackageName","()Ljava/lang/String;");  
27.     jmethodID signToStringId = (env)->GetMethodID(signatureClass, "toCharsString","()Ljava/lang/String;");  
28.     jmethodID getPackageInfoId = (env)->GetMethodID(packageNameClass, "getPackageInfo","(Ljava/lang/String;I)Landroid/content/pm/PackageInfo;");  
29.     jobject packageManagerObject =  (env)->CallObjectMethod(contextObject, getPackageManagerId);  
30.     jstring packNameString =  (jstring)(env)->CallObjectMethod(contextObject, getPackageNameId);  
31.     jobject packageInfoObject = (env)->CallObjectMethod(packageManagerObject, getPackageInfoId,packNameString, 64);  
32.     jfieldID signaturefieldID =(env)->GetFieldID(packageInfoClass,"signatures", "\[Landroid/content/pm/Signature;");  
33.     jobjectArray signatureArray = (jobjectArray)(env)->GetObjectField(packageInfoObject, signaturefieldID);  
34.     jobject signatureObject =  (env)->GetObjectArrayElement(signatureArray,0);  
35.   
36.     const char\* signStrng =  (env)->GetStringUTFChars((jstring)(env)->CallObjectMethod(signatureObject, signToStringId),0);  
37.     if(strcmp(signStrng,RELEASE\_SIGN)==0)//签名一致  返回合法的 api key，否则返回错误  
38.     \{  
39.        return (env)->NewStringUTF(AUTH\_KEY);  
40.     \}else  
41.     \{  
42.        return (env)->NewStringUTF("error");  
43.     \}  
44.   
45. \}  
46.   
47.   
48. JNIEXPORT jint JNICALL JNI\_OnLoad (JavaVM\* vm,void\* reserved)\{  
49.   
50.      JNIEnv\* env = NULL;  
51.      jint result=-1;  
52.      if(vm->GetEnv((void\*\*)&env, JNI\_VERSION\_1\_4) != JNI\_OK)  
53.        return result;  
54.   
55.      contextClass = (jclass)env->NewGlobalRef((env)->FindClass("android/content/Context"));  
56.      signatureClass = (jclass)env->NewGlobalRef((env)->FindClass("android/content/pm/Signature"));  
57.      packageNameClass = (jclass)env->NewGlobalRef((env)->FindClass("android/content/pm/PackageManager"));  
58.      packageInfoClass = (jclass)env->NewGlobalRef((env)->FindClass("android/content/pm/PackageInfo"));  
59.   
60.      return JNI\_VERSION\_1\_4;  
61.  \}

[view plain]: http://blog.csdn.net/xx753277/article/details/37567951#
[CODE]: https://code.csdn.net/assets/CODE_ico.png
[CODE_CODE]: https://code.csdn.net/snippets/422554
[ico_fork.svg]: https://code.csdn.net/assets/ico_fork.svg
[ico_fork.svg 1]: https://code.csdn.net/snippets/422554/fork