commit | 14f0739a88e9502953b87d5e2da0231568d0e95d | [log] [tgz] |
---|---|---|
author | Alan Stokes <alanstokes@google.com> | Mon Sep 27 14:03:31 2021 +0100 |
committer | Alan Stokes <alanstokes@google.com> | Wed Sep 29 15:31:36 2021 +0100 |
tree | e0077095afc581f11e896089d7acf6333c87f393 | |
parent | 6b2d0a8a29db89f2f39fc359d54aacc6d73bf383 [diff] |
Add native code for cert munging. Compsvc returns a self-signed cert (from Keystore), but we only want the public key. Extracting this in Rust is non-trivial, so instead we use existing support in BoringSSL in native code. (The details are copied from compos_key_cmd.cpp, which in turn were copied from the now-deleted FakeCompOS in odsign.) We could alternatively do this in compsvc itself, but I was slightly more reluctant to introduce native code there. Bug: 186126194 Test: Run composd_cmd twice, check it accepts the key pair it generated. Change-Id: I3faab9a7ada149d7f2776c2fb4d2656837c95e6f
This repository contains userspace services related to running virtual machines on Android, especially protected virtual machines. See the getting started documentation and Microdroid README for more information.