Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Resign some APEX packages during the release build #204

Merged
merged 2 commits into from
Jul 23, 2024

Conversation

ceiba1985
Copy link
Contributor

@ceiba1985 ceiba1985 commented Jul 19, 2024

  1. Add a release key for APEX.
  2. Resign some APEX packages during the release build

Tracked-On: OAM-122509

Copy link

@shyjumon-n shyjumon-n left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Currently APEX packages are not resigned by a release key during
a release build. Need to add a release key specific for APEX.
This key is generated like this:
	openssl genrsa -out temp.pem 2048
	openssl req -new -x509 -key temp.pem -out \
	    apexkey.x509.pem -days 10000 -subj \
	    '/C=US/ST=California/L=Santa Clara/O=Intel, \
	    Inc./OU=Intel/CN=Intel/[email protected]'
	openssl pkcs8 -in temp.pem -topk8 -outform DER -out \
	    releasekey.pk8 -nocrypt
	avbtool extract_public_key --key foo.pem --output foo.avbpubkey

This key is only for test purpose and for production it needs to
be replaced with customer specific key

Tracked-On: OAM-122509
Signed-off-by: jizhenlo <[email protected]>
APEX packages currently are not resigned by a release key
during the release build. Need to resign them to pass the
CTS tests:
	testApexPubKeyIsNotWellKnownKey
	testPackageSignatures

Test done: These two cts cases can pass with patch.

Tracked-On: OAM-122509
Signed-off-by: jizhenlo <[email protected]>
@sysopenci sysopenci added Developer Approved and removed Pending Developer Approval Pending Developer Approval labels Jul 22, 2024
@sysopenci
Copy link

Android CI has started Engineering Build for this issue ,Please check the linked Tracked-On issue/Android CI Web for more details.

1 similar comment
@sysopenci
Copy link

Android CI has started Engineering Build for this issue ,Please check the linked Tracked-On issue/Android CI Web for more details.

@sysopenci
Copy link

FAILURE: Android CI has completed Engineering Build for this issue.Please check the linked Tracked-On issue/Android CI Web for more details.

@sysopenci sysopenci added Engineering Build Failed and removed Engineering Build Not Started Engineering Build Not Started labels Jul 22, 2024
@sysopenci
Copy link

Android CI has started Engineering Build for this issue ,Please check the linked Tracked-On issue/Android CI Web for more details.

@sysopenci
Copy link

FAILURE: Android CI has completed Engineering Build for this issue.Please check the linked Tracked-On issue/Android CI Web for more details.

@sysopenci
Copy link

SUCCESS: Android CI has completed Engineering Build for this issue.Please check the linked Tracked-On issue/Android CI Web for more details.

@sysopenci sysopenci added Engineering Build Successful Engineering Build Successful and removed Engineering Build Failed labels Jul 22, 2024
@sysopenci
Copy link

Android CI has started MERGE Build for this pr ,Please check the linked Tracked-On issue/Android CI Web for more details.

@sysopenci sysopenci merged commit e09dc24 into projectceladon:master Jul 23, 2024
34 of 36 checks passed
@sysopenci
Copy link

Android CI has completed MERGE Build for this pr, build is SUCCESS. Please check the linked Tracked-On issue/Android CI Web for more details. For Binaries: /cactus-absp-or-local/celadon-merge/682

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants