Files
build/target/product/security/Android.bp
Justin Yun d13b9a24bc Move otacerts module from Android.mk to Android.bp
Remove the otacerts module defined in Android.mk. Instead, provide
variables to soong.

Bug: 335364209
Test: Define "PRODUCT_DEFAULT_DEV_CERTIFICATE := \
                 build/make/target/product/security/testkey" and
      m aosp_cf_system_x86_64
Change-Id: I99a484e04984da8bd7f58deecd90c880de16fd71
2024-07-04 14:49:23 +09:00

40 lines
1.2 KiB
Plaintext

// AOSP test certificate
package {
// See: http://go/android-license-faq
default_applicable_licenses: ["Android-Apache-2.0"],
}
android_app_certificate {
name: "aosp-testkey",
certificate: "testkey",
}
// Certificate for CTS tests that rely on UICC hardware conforming to the
// updated CTS UICC card specification introduced in 2021. See
// //cts/tests/tests/carrierapi/Android.bp for more details.
android_app_certificate {
name: "cts-uicc-2021-testkey",
certificate: "cts_uicc_2021",
}
// Google-owned certificate for CTS testing, since we can't trust arbitrary keys
// on release devices.
prebuilt_etc {
name: "fsverity-release-cert-der",
src: "fsverity-release.x509.der",
sub_dir: "security/fsverity",
filename_from_src: true,
}
// otacerts: A keystore with the authorized keys in it, which is used to verify
// the authenticity of downloaded OTA packages.
// This module zips files defined in PRODUCT_DEFAULT_DEV_CERTIFICATE and
// PRODUCT_EXTRA_OTA_KEYS for system or PRODUCT_EXTRA_RECOVERY_KEYS for recovery
// image
otacerts_zip {
name: "otacerts",
recovery_available: true,
relative_install_path: "security",
filename: "otacerts.zip",
}