61fc692d66
DSU installation service fetches a key revocation list (key blacklist).
Revocation list is a https URL specified in a resource string.
Fetched result is cached in HttpResponseCache to save bandwidth, and the
cached result is always forced validated with server to ensure freshness.
In other words, fetching a revocation list is done via a "conditional GET",
such http GET returns a brief (304 NOT MODIFIED) response if ours cache is
still valid, else the server sends a (200 OK) response with new data.
TODO: Compare the installed DSU image's public key with the revocation
list and boot-ramdisk. If the public key is revoked then abort installation.
Bug: 128892201
Test: atest DynamicSystemInstallationServiceTests
Test: adb shell am start-activity \
-n com.android.dynsystem/com.android.dynsystem.VerificationActivity \
-a android.os.image.action.START_INSTALL \
--el KEY_USERDATA_SIZE 8589934592 \
-d file:///storage/emulated/0/Download/aosp_arm64-dsu_test.zip \
--es KEY_PUBKEY key1
Change-Id: I29ae088acb1bd23336ec09654f38b4fc464316d8
16 lines
370 B
Plaintext
16 lines
370 B
Plaintext
android_test {
|
|
name: "DynamicSystemInstallationServiceTests",
|
|
|
|
srcs: ["src/**/*.java"],
|
|
static_libs: [
|
|
"androidx.test.runner",
|
|
"androidx.test.rules",
|
|
"mockito-target-minus-junit4",
|
|
],
|
|
|
|
resource_dirs: ["res"],
|
|
platform_apis: true,
|
|
instrumentation_for: "DynamicSystemInstallationService",
|
|
certificate: "platform",
|
|
}
|