Mathew Inwood 96c419f906 Implement signature check.
Currently, we just have debug keys, and always fail verification on
user builds. Production keys will be added later.

This CL also includes some helper scripts:
- Used to generate debug keys, for the record
- To sign data using the debug keys
- To verify base64 encoded data, used for debugging

Test: atest CtsSignedConfigHostTestCases
Note: The test also relies on some other changes going in too; it has
been verified with all relevant change in place, but will not pass at
HEAD quite yet.

Bug: 110509075
Change-Id: I8bd420c44a0a523cbefb21f90c49550c25beb0a6
2018-12-11 17:06:27 +00:00

8 lines
250 B
Bash
Executable File

#!/bin/bash
# This script acts as a record of how the debug key was generated. There should
# be no need to run it again.
openssl ecparam -name prime256v1 -genkey -noout -out debug_key.pem
openssl ec -in debug_key.pem -pubout -out debug_public.pem