diff options
Diffstat (limited to 'scripts/image_signing/sign_official_build.sh')
| -rwxr-xr-x | scripts/image_signing/sign_official_build.sh | 9 |
1 files changed, 6 insertions, 3 deletions
diff --git a/scripts/image_signing/sign_official_build.sh b/scripts/image_signing/sign_official_build.sh index f18c62eb..551a6996 100755 --- a/scripts/image_signing/sign_official_build.sh +++ b/scripts/image_signing/sign_official_build.sh @@ -575,6 +575,7 @@ resign_firmware_payload() { do local key_suffix='' local extra_args=() + rootkey="${KEY_DIR}/root_key.vbpubk" # If there are OEM specific keys available, we're going to use them. # Otherwise, we're going to ignore key_id from the config file and @@ -593,11 +594,14 @@ resign_firmware_payload() { "${model_name}" fi key_suffix=".loem${key_index}" - mkdir -p "${shellball_dir}/keyset" + shellball_keyset_dir="${shellball_dir}/keyset" + mkdir -p "${shellball_keyset_dir}" extra_args+=( - --loemdir "${shellball_dir}/keyset" + --loemdir "${shellball_keyset_dir}" --loemid "${model_name}" ) + rootkey="${KEY_DIR}/root_key${key_suffix}.vbpubk" + cp "${rootkey}" "${shellball_keyset_dir}/rootkey.${model_name}" fi info "Signing firmware image ${image} for model ${model_name} " \ @@ -628,7 +632,6 @@ resign_firmware_payload() { ${image_path} \ ${temp_fw} - rootkey="${KEY_DIR}/root_key${key_suffix}.vbpubk" # For development phases, when the GBB can be updated still, set the # recovery and root keys in the image. |