commit 9c63fb59bdc51b8ec1e2e55014e53b29e0c3abe1
author Tao Bao <tbao@google.com> Tue Sep 13 11:13:48 2016 -0700
committer Tao Bao <tbao@google.com> Fri Sep 16 15:08:40 2016 -0700
tree 38ad6fd02a66150af357c66cf352622bab46fdc2
parent 4a6862e59b8d04b23b493aa6ecb05f5721967dc4

Add a script that verifies OTA package signature.

Currently it supports verifying packages signed with RSA algorithms
(v1-v4 as in bootable/recovery/verifier.cpp). No support for ECDSA (v5)
signed packages yet.

$ ./build/tools/releasetools/check_ota_package_signature.py \
    bootable/recovery/tests/testdata/testkey_v1.x509.pem \
    bootable/recovery/tests/testdata/otasigned_v1.zip

Package: bootable/recovery/tests/testdata/otasigned_v1.zip
Certificate: bootable/recovery/tests/testdata/testkey_v1.x509.pem
Comment length: 1738
Signed data length: 2269
Use SHA-256: False
Digest: 115e688ec3b77743070b743453e2fc6ce8754484

VERIFIED

Bug: 31523193
Test: Used the tool to verify existing packages (like above).

Change-Id: I71d3569e858c729cb64825c5c7688ededc397aa8