diff options
| author | Gaurav Shah <gauravsh@chromium.org> | 2010-11-05 13:07:27 -0700 |
|---|---|---|
| committer | Gaurav Shah <gauravsh@chromium.org> | 2010-11-05 13:07:27 -0700 |
| commit | baa09de3a426936de697895b95641254ebf2c01f (patch) | |
| tree | fad696f09ea5eb13e9f19bffe989d31c5d0721e2 /scripts | |
| parent | e557278cdbba0ad343b0c756db286f699b8f00ee (diff) | |
| download | vboot-baa09de3a426936de697895b95641254ebf2c01f.tar.gz | |
sign_official_build install mode should use the installer kernel data key
Earlier we used to reuse the recovery kernel data key in the installer, however now we make them different, and so installer keyblock nolonger corresponds to the recovery kernel data key. This CL fixes that.
BUG=7202
TEST=manually tested by using the new key generation scripts, and verifying that the old install signing no longer worked. Making the fix again makes the image verify only in dev mode.
Change-Id: Ic83e90397132da9f88b36e69198773350eb3691f
Review URL: http://codereview.chromium.org/4527004
Diffstat (limited to 'scripts')
| -rwxr-xr-x | scripts/image_signing/sign_official_build.sh | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/scripts/image_signing/sign_official_build.sh b/scripts/image_signing/sign_official_build.sh index 4fa9f2dd..f8bf23c7 100755 --- a/scripts/image_signing/sign_official_build.sh +++ b/scripts/image_signing/sign_official_build.sh @@ -390,7 +390,7 @@ sign_for_recovery() { # Generate the factory install image. sign_for_factory_install() { ${SCRIPT_DIR}/resign_image.sh ${INPUT_IMAGE} ${OUTPUT_IMAGE} \ - ${KEY_DIR}/recovery_kernel_data_key.vbprivk \ + ${KEY_DIR}/installer_kernel_data_key.vbprivk \ ${KEY_DIR}/installer_kernel.keyblock echo "Signed factory install image output to ${OUTPUT_IMAGE}" } @@ -438,7 +438,7 @@ elif [ "${TYPE}" == "install" ]; then resign_firmware_payload ${INPUT_IMAGE} update_rootfs_hash ${INPUT_IMAGE} \ ${KEY_DIR}/installer_kernel.keyblock \ - ${KEY_DIR}/recovery_kernel_data_key.vbprivk \ + ${KEY_DIR}/installer_kernel_data_key.vbprivk \ 2 sign_for_factory_install else |