cherish-priv_keys-template

Usage

croot && git clone https://github.com/CherishOS/vendor_cherish-priv_keys-template vendor/cherish-priv/keys

cd vendor/cherish-priv/keys

./keys.sh

Testing

Included check_keys.py script checks whether all apk/apex/capex files in the build out are signed with keys within its directory. Be aware that some targets are expected to be signed with vendor key, for example com.android.apex.cts.shim.v1_prebuilt.

$ ./check_keys.py ~/cherish/out/target/product/lynx
/home/ab/cherish/out/target/product/lynx/obj/ETC/com.android.apex.cts.shim.v1_prebuilt_intermediates/com.android.apex.cts.shim.apex is signed with an unknown key!