Private Key Generator script for AOSP

Usage

git clone https://github.com/AndroidOne-Experience/aosp_vendor_priv-keys.git vendor/priv-keys

cd vendor/priv-keys

./keys.sh

Testing

Included check_keys.py script checks whether all apk/apex/capex files in the build out are signed with keys within its directory. Be aware that some targets are expected to be signed with vendor key, for example com.android.apex.cts.shim.v1_prebuilt.

Inside the source directory

$ ./check_keys.py ../../out/target/product/<device_codename>
../../out/target/product/<device_codename>/obj/ETC/com.android.apex.cts.shim.v1_prebuilt_intermediates/com.android.apex.cts.shim.apex is signed with an unknown key!