commit 14f0739a88e9502953b87d5e2da0231568d0e95d
author Alan Stokes <alanstokes@google.com> Mon Sep 27 14:03:31 2021 +0100
committer Alan Stokes <alanstokes@google.com> Wed Sep 29 15:31:36 2021 +0100
tree e0077095afc581f11e896089d7acf6333c87f393
parent 6b2d0a8a29db89f2f39fc359d54aacc6d73bf383

Add native code for cert munging.

Compsvc returns a self-signed cert (from Keystore), but we only want
the public key. Extracting this in Rust is non-trivial, so instead we
use existing support in BoringSSL in native code. (The details are
copied from compos_key_cmd.cpp, which in turn were copied from the
now-deleted FakeCompOS in odsign.)

We could alternatively do this in compsvc itself, but I was slightly
more reluctant to introduce native code there.

Bug: 186126194
Test: Run composd_cmd twice, check it accepts the key pair it generated.
Change-Id: I3faab9a7ada149d7f2776c2fb4d2656837c95e6f

compos/composd/Android.bp

diff --git a/compos/composd/Android.bp b/compos/composd/Android.bp
index 30d07ab..0a25f05 100644
--- a/compos/composd/Android.bp
+++ b/compos/composd/Android.bp
@@ -15,6 +15,7 @@
         "libanyhow",
         "libbinder_rs",
         "libcompos_common",
+        "libcomposd_native_rust",
         "libnum_traits",
         "liblog_rust",
     ],