Gitiles
Code Review Sign In
gerrit.omnirom.org / android_system_security / e34be6c439cba56778991026138f22c10718a65a
commite34be6c439cba56778991026138f22c10718a65a[log] [tgz]
authorRajesh Nyamagoud <nyamagoud@google.com>Tue Sep 17 23:23:03 2024 +0000
committerRajesh Nyamagoud <nyamagoud@google.com>Wed Sep 18 16:37:20 2024 +0000
tree13ea73dc257998879698d2414e3d794c36766919
parenta2621b4d6c64db40cfb008939611fa8ce19305ea [diff]
Manually verify the certificate with RSA-PSS & SHA1/SHA224 digests.

`x509_verify` not working with RSA-PSS & SHA1/SHA224 digests. BoringSSL
after https://boringssl-review.googlesource.com/c/boringssl/+/53865
does not support RSA-PSS with SHA1/SHA224 digests.

Bug: 270297780
Test: atest keystore2_crypto_test
Change-Id: Ibd570edce4294eeda7dea864686fe8fd022432d0
1 file changed
tree: 13ea73dc257998879698d2414e3d794c36766919
  1. fsverity/
  2. fsverity_init/
  3. identity/
  4. keystore/
  5. keystore-engine/
  6. keystore2/
  7. mls/
  8. ondevice-signing/
  9. prng_seeder/
  10. provisioner/
  11. rustfmt.toml ⇨ ../../build/soong/scripts/rustfmt.toml
  12. .clang-format
  13. .gitignore
  14. Android.bp
  15. METADATA
  16. MODULE_LICENSE_APACHE2
  17. NOTICE
  18. OWNERS
  19. PREUPLOAD.cfg