summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorVictor Hsieh <victorhsieh@chromium.org>2016-09-09 14:05:25 -0700
committerVictor Hsieh <victorhsieh@chromium.org>2016-09-09 21:39:16 +0000
commitb94145a309131f23d49a08dd94fc26247621da65 (patch)
tree9006b9e55e26688a1ed844c479114a67197726ea
parent6c18af501798c9b597839a3628c8374a2f8d7483 (diff)
downloadvboot-b94145a309131f23d49a08dd94fc26247621da65.tar.gz
Change debug key signatures
We switched to different debug keys so the signature needs to be updated. TEST=sign_official_image with the new recovery image, failed before this change bug succeeded after. BUG=chromium:645628 Change-Id: I58236222c26f90268de80dc99f22d84650e67bb7 Reviewed-on: https://chromium-review.googlesource.com/383900 Reviewed-by: Mike Frysinger <vapier@chromium.org> Tested-by: Victor Hsieh <victorhsieh@chromium.org>
-rwxr-xr-xscripts/image_signing/sign_android_image.sh16
1 files changed, 11 insertions, 5 deletions
diff --git a/scripts/image_signing/sign_android_image.sh b/scripts/image_signing/sign_android_image.sh
index c647b960..dd8a6cde 100755
--- a/scripts/image_signing/sign_android_image.sh
+++ b/scripts/image_signing/sign_android_image.sh
@@ -40,19 +40,25 @@ choose_key() {
keytool -printcert | awk '/^\s*SHA1:/ {print $2}')
# Fingerprints below are generated by:
- # $ keytool -file vendor/google/certs/cheetskeys/$NAME.x509.pem -printcert \
+ # $ keytool -file vendor/google/certs/devkeys/$NAME.x509.pem -printcert \
# | grep SHA1:
+ # TODO(victorhsieh): deprecate the first part of the fingerprint when no
+ # release branches have system.raw.img built before Sep. 8, 2016.
case "${sha1}" in
- "AA:04:E0:5F:82:9C:7E:D1:B9:F8:FC:99:6C:5A:54:43:83:D9:F5:BC")
+ "AA:04:E0:5F:82:9C:7E:D1:B9:F8:FC:99:6C:5A:54:43:83:D9:F5:BC"| \
+ "CD:21:AB:22:D1:D1:B6:38:8A:AC:EA:A5:2B:82:BE:3F:A4:E6:0C:58")
echo "platform"
;;
- "D4:C4:2D:E0:B9:1B:15:72:FA:7D:A7:21:E0:A6:09:94:B4:4C:B5:AE")
+ "D4:C4:2D:E0:B9:1B:15:72:FA:7D:A7:21:E0:A6:09:94:B4:4C:B5:AE"| \
+ "60:C6:D1:64:36:D3:C8:62:22:BB:95:2E:8D:D3:A8:40:D9:AD:8D:7A")
echo "media"
;;
- "38:B6:2C:E1:75:98:E3:E1:1C:CC:F6:6B:83:BB:97:0E:2D:40:6C:AE")
+ "38:B6:2C:E1:75:98:E3:E1:1C:CC:F6:6B:83:BB:97:0E:2D:40:6C:AE"| \
+ "E3:9B:7B:FB:E0:A6:7D:78:29:2F:6C:C6:2E:06:CA:27:A2:EB:F2:55")
echo "shared"
;;
- "EC:63:36:20:23:B7:CB:66:18:70:D3:39:3C:A9:AE:7E:EF:A9:32:42")
+ "EC:63:36:20:23:B7:CB:66:18:70:D3:39:3C:A9:AE:7E:EF:A9:32:42"| \
+ "40:73:90:92:BD:52:D4:4C:C5:DE:96:A7:08:C1:38:5B:FE:3B:12:16")
# The above fingerprint is from devkey. Translate to releasekey.
echo "releasekey"
;;