-
Notifications
You must be signed in to change notification settings - Fork 51
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Resign some APEX packages during the release build #204
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
Currently APEX packages are not resigned by a release key during a release build. Need to add a release key specific for APEX. This key is generated like this: openssl genrsa -out temp.pem 2048 openssl req -new -x509 -key temp.pem -out \ apexkey.x509.pem -days 10000 -subj \ '/C=US/ST=California/L=Santa Clara/O=Intel, \ Inc./OU=Intel/CN=Intel/[email protected]' openssl pkcs8 -in temp.pem -topk8 -outform DER -out \ releasekey.pk8 -nocrypt avbtool extract_public_key --key foo.pem --output foo.avbpubkey This key is only for test purpose and for production it needs to be replaced with customer specific key Tracked-On: OAM-122509 Signed-off-by: jizhenlo <[email protected]>
APEX packages currently are not resigned by a release key during the release build. Need to resign them to pass the CTS tests: testApexPubKeyIsNotWellKnownKey testPackageSignatures Test done: These two cts cases can pass with patch. Tracked-On: OAM-122509 Signed-off-by: jizhenlo <[email protected]>
Android CI has started Engineering Build for this issue ,Please check the linked Tracked-On issue/Android CI Web for more details. |
1 similar comment
Android CI has started Engineering Build for this issue ,Please check the linked Tracked-On issue/Android CI Web for more details. |
FAILURE: Android CI has completed Engineering Build for this issue.Please check the linked Tracked-On issue/Android CI Web for more details. |
Android CI has started Engineering Build for this issue ,Please check the linked Tracked-On issue/Android CI Web for more details. |
FAILURE: Android CI has completed Engineering Build for this issue.Please check the linked Tracked-On issue/Android CI Web for more details. |
SUCCESS: Android CI has completed Engineering Build for this issue.Please check the linked Tracked-On issue/Android CI Web for more details. |
Android CI has started MERGE Build for this pr ,Please check the linked Tracked-On issue/Android CI Web for more details. |
Android CI has completed MERGE Build for this pr, build is SUCCESS. Please check the linked Tracked-On issue/Android CI Web for more details. For Binaries: /cactus-absp-or-local/celadon-merge/682 |
Tracked-On: OAM-122509