diff options
author | Victor Hsieh <victorhsieh@chromium.org> | 2016-09-09 14:05:25 -0700 |
---|---|---|
committer | Victor Hsieh <victorhsieh@chromium.org> | 2016-09-09 21:39:16 +0000 |
commit | b94145a309131f23d49a08dd94fc26247621da65 (patch) | |
tree | 9006b9e55e26688a1ed844c479114a67197726ea | |
parent | 6c18af501798c9b597839a3628c8374a2f8d7483 (diff) | |
download | vboot-b94145a309131f23d49a08dd94fc26247621da65.tar.gz |
Change debug key signatures
We switched to different debug keys so the signature needs to be
updated.
TEST=sign_official_image with the new recovery image, failed before this
change bug succeeded after.
BUG=chromium:645628
Change-Id: I58236222c26f90268de80dc99f22d84650e67bb7
Reviewed-on: https://chromium-review.googlesource.com/383900
Reviewed-by: Mike Frysinger <vapier@chromium.org>
Tested-by: Victor Hsieh <victorhsieh@chromium.org>
-rwxr-xr-x | scripts/image_signing/sign_android_image.sh | 16 |
1 files changed, 11 insertions, 5 deletions
diff --git a/scripts/image_signing/sign_android_image.sh b/scripts/image_signing/sign_android_image.sh index c647b960..dd8a6cde 100755 --- a/scripts/image_signing/sign_android_image.sh +++ b/scripts/image_signing/sign_android_image.sh @@ -40,19 +40,25 @@ choose_key() { keytool -printcert | awk '/^\s*SHA1:/ {print $2}') # Fingerprints below are generated by: - # $ keytool -file vendor/google/certs/cheetskeys/$NAME.x509.pem -printcert \ + # $ keytool -file vendor/google/certs/devkeys/$NAME.x509.pem -printcert \ # | grep SHA1: + # TODO(victorhsieh): deprecate the first part of the fingerprint when no + # release branches have system.raw.img built before Sep. 8, 2016. case "${sha1}" in - "AA:04:E0:5F:82:9C:7E:D1:B9:F8:FC:99:6C:5A:54:43:83:D9:F5:BC") + "AA:04:E0:5F:82:9C:7E:D1:B9:F8:FC:99:6C:5A:54:43:83:D9:F5:BC"| \ + "CD:21:AB:22:D1:D1:B6:38:8A:AC:EA:A5:2B:82:BE:3F:A4:E6:0C:58") echo "platform" ;; - "D4:C4:2D:E0:B9:1B:15:72:FA:7D:A7:21:E0:A6:09:94:B4:4C:B5:AE") + "D4:C4:2D:E0:B9:1B:15:72:FA:7D:A7:21:E0:A6:09:94:B4:4C:B5:AE"| \ + "60:C6:D1:64:36:D3:C8:62:22:BB:95:2E:8D:D3:A8:40:D9:AD:8D:7A") echo "media" ;; - "38:B6:2C:E1:75:98:E3:E1:1C:CC:F6:6B:83:BB:97:0E:2D:40:6C:AE") + "38:B6:2C:E1:75:98:E3:E1:1C:CC:F6:6B:83:BB:97:0E:2D:40:6C:AE"| \ + "E3:9B:7B:FB:E0:A6:7D:78:29:2F:6C:C6:2E:06:CA:27:A2:EB:F2:55") echo "shared" ;; - "EC:63:36:20:23:B7:CB:66:18:70:D3:39:3C:A9:AE:7E:EF:A9:32:42") + "EC:63:36:20:23:B7:CB:66:18:70:D3:39:3C:A9:AE:7E:EF:A9:32:42"| \ + "40:73:90:92:BD:52:D4:4C:C5:DE:96:A7:08:C1:38:5B:FE:3B:12:16") # The above fingerprint is from devkey. Translate to releasekey. echo "releasekey" ;; |