commit ab49446e3d08dc8cf8928c3d3b6f292513af5566
author Alex Deymo <deymo@google.com> Mon Nov 30 17:07:36 2015 -0300
committer Gerrit Code Review <noreply-gerritcodereview@google.com> Wed Dec 02 06:44:19 2015 +0000
tree 9c41cd64943d7a6c23bcdb6e39ea1b31b5bdc2da
parent b15a0b8eaf18c9e9341706df9f4ab59ce595a67c

Restrict update_engine SSL certs.

update_engine connects over SSL only with Google servers, so we
restrict the list of SSL certificates to a smaller list, used by
Google.

Bug: 25089263
Test: mma
Change-Id: I73dbbd18dd99a61fa3bd66dbb57d0ff1ab78160d

Android.mk

diff --git a/Android.mk b/Android.mk
index 936feba..6270772 100644
--- a/Android.mk
+++ b/Android.mk
@@ -314,7 +314,8 @@
 LOCAL_MODULE := update_engine
 LOCAL_MODULE_CLASS := EXECUTABLES
 LOCAL_REQUIRED_MODULES := \
-    bspatch
+    bspatch \
+    cacerts_google
 LOCAL_CPP_EXTENSION := .cc
 LOCAL_CLANG := true
 LOCAL_CFLAGS := $(ue_common_cflags)