forked from openkylin/platform_build
Merge changes from topic 'ab_sideload'
* changes: Replace OTA sideload verification key when signing A/B devices. Install the update-payload-key in the recovery image as well.
This commit is contained in:
commit
3750ed3e17
|
@ -776,6 +776,10 @@ $(TARGET_OUT_ETC)/update_engine/update-payload-key.pub.pem: $(addsuffix .x509.pe
|
|||
$(hide) rm -f $@
|
||||
$(hide) mkdir -p $(dir $@)
|
||||
$(hide) openssl x509 -pubkey -noout -in $< > $@
|
||||
|
||||
ALL_DEFAULT_INSTALLED_MODULES += $(TARGET_RECOVERY_ROOT_OUT)/etc/update_engine/update-payload-key.pub.pem
|
||||
$(TARGET_RECOVERY_ROOT_OUT)/etc/update_engine/update-payload-key.pub.pem: $(TARGET_OUT_ETC)/update_engine/update-payload-key.pub.pem
|
||||
$(hide) cp -f $< $@
|
||||
endif
|
||||
endif
|
||||
|
||||
|
|
|
@ -255,6 +255,7 @@ def ProcessTargetFiles(input_tf_zip, output_tf_zip, misc_info,
|
|||
elif (OPTIONS.replace_ota_keys and
|
||||
info.filename in (
|
||||
"BOOT/RAMDISK/res/keys",
|
||||
"BOOT/RAMDISK/etc/update_engine/update-payload-key.pub.pem",
|
||||
"RECOVERY/RAMDISK/res/keys",
|
||||
"SYSTEM/etc/security/otacerts.zip",
|
||||
"SYSTEM/etc/update_engine/update-payload-key.pub.pem")):
|
||||
|
@ -510,6 +511,10 @@ def ReplaceOtaKeys(input_tf_zip, output_tf_zip, misc_info):
|
|||
output_tf_zip,
|
||||
"SYSTEM/etc/update_engine/update-payload-key.pub.pem",
|
||||
pubkey)
|
||||
common.ZipWriteStr(
|
||||
output_tf_zip,
|
||||
"BOOT/RAMDISK/etc/update_engine/update-payload-key.pub.pem",
|
||||
pubkey)
|
||||
|
||||
return new_recovery_keys
|
||||
|
||||
|
|
Loading…
Reference in New Issue