Add public update key as default.
This adds the key, and makes it default.
BUG=chromium:237064
TEST=Ran tool manually.
Change-Id: I0c47515980dd0349e6d427524b933ff812b61318
Reviewed-on: https://gerrit.chromium.org/gerrit/49704
Tested-by: Don Garrett <dgarrett@chromium.org>
Reviewed-by: Don Garrett <dgarrett@chromium.org>
Commit-Queue: Don Garrett <dgarrett@chromium.org>
diff --git a/scripts/paycheck.py b/scripts/paycheck.py
index 26e5ec5..3fc65dc 100755
--- a/scripts/paycheck.py
+++ b/scripts/paycheck.py
@@ -48,6 +48,9 @@
'Update Engine. Use --check to verify a payload prior to '
'applying it.'))
+ default_key = os.path.join(lib_dir,
+ 'update_payload/update-payload-key.pub.pem')
+
check_opts = optparse.OptionGroup(parser, 'Payload integrity checking')
check_opts.add_option('-c', '--check', action='store_true', default=False,
help=('force payload integrity check (e.g. before '
@@ -68,7 +71,9 @@
'available values: ' +
', '.join(update_payload.CHECKS_TO_DISABLE)))
check_opts.add_option('-k', '--key', metavar='FILE',
- help='public key to be used for signature verification')
+ help='Override standard key used for signature '
+ 'validation',
+ default=default_key)
check_opts.add_option('-m', '--meta-sig', metavar='FILE',
help='verify metadata against its signature')
parser.add_option_group(check_opts)