diff options
| author | 2024-12-17 17:52:26 +0000 | |
|---|---|---|
| committer | 2024-12-18 22:37:40 +0000 | |
| commit | 7701d5fe1221a7c653385ea52cae2d3580b2c6b5 (patch) | |
| tree | c603b055a787cf44fa3f18b1d27e7d02724dc1e1 /rust/binary.go | |
| parent | 6d0985ea189c715e25499c4115c1519cf8fc8a15 (diff) | |
Introduce a singleton module to collect apex certs
`all_apex_certs` will provide two kinds of output files:
1. x509 certificate in pem format
2. x509 certificate in der format
filenames of the certs are not part of `all_apex_certs` api. In fact,
the der certs will be named with int indexes.
This singleton module will be used by `CtsSecurityTestCases`
(specifically `PackageSignatureTest`) to enforce that the apexes are
signed with release keys.
To implement this, `ctx.ReverseDepenendcy` will be used in deps mutator
of apex. An alternative would have been to use `ctx.VisitAllDeps` in
`GenerateAndroidBuildActions` of the singleton, but this would make it
unusable in the cts test (circular dep).
Make has a similar implementation that collects the certs of apexes and
dists that file. This has been kept separate for now to prevent b/304914238
Bug: 329299639
Test: m nothing --no-skip-soong-tests
Change-Id: I742d8ae1ccc344a78ae04263382750508b2aedec
Diffstat (limited to 'rust/binary.go')
0 files changed, 0 insertions, 0 deletions