7f414d94fc4f6bd34325f3865b51e8d11acb52ad - LeafOS-Project/android_frameworks_base

commit	7f414d94fc4f6bd34325f3865b51e8d11acb52ad	[log] [tgz]
author	Bo Zhu <bozhu@google.com>	Wed Feb 28 09:28:19 2018 -0800
committer	Bo Zhu <bozhu@google.com>	Wed Feb 28 11:58:30 2018 -0800
tree	0cd582a6fb1a4e8b44717c23e358fffae53a7b10
parent	b1d5004cf59ff4d48dc72c8df761280801458653 [diff]

Check the public-key signature of the whole certificate file before
accepting the certificates

This change requires an additional param to the initRecoveryService()
API to take in the public-key signature.

Bug: 73904566
Test: adb shell am instrument -w -e package \
com.android.server.locksettings.recoverablekeystore \
com.android.frameworks.servicestests/android.support.test.runner.AndroidJUnitRunner

Change-Id: I2aeead1fda51b6cd8df71ed3b5066342ebc8d5ea

api/system-current.txt[diff]
core/java/android/security/keystore/recovery/RecoveryController.java[diff]
core/java/android/security/keystore/recovery/RecoverySession.java[diff]
core/java/com/android/internal/widget/ILockSettings.aidl[diff]
services/core/java/com/android/server/locksettings/LockSettingsService.java[diff]
services/core/java/com/android/server/locksettings/recoverablekeystore/RecoverableKeyStoreManager.java[diff]
services/tests/servicestests/src/com/android/server/locksettings/recoverablekeystore/RecoverableKeyStoreManagerTest.java[diff]
services/tests/servicestests/src/com/android/server/locksettings/recoverablekeystore/TestData.java[diff]

8 files changed

tree: 0cd582a6fb1a4e8b44717c23e358fffae53a7b10