Evolution-x/hardware_interfaces
1
0
Fork 0
mirror of https://github.com/Evolution-X/hardware_interfaces synced 2026-02-01 11:36:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge "Update the UdsCertChain comment to reflect the latest recommendation." into main am: 9471625f69 am: dfbe1009ca

Browse Source 
Original change: https://android-review.googlesource.com/c/platform/hardware/interfaces/+/3207215

Change-Id: I127de33487e8b89f64f48d2695e88b4f4c2f1520
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Treehugger Robot
2024-08-07 00:35:40 +00:00
committed by Automerger Merge Worker
parent d1cdc8f6f2 dfbe1009ca
commit 19871c497b
1 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
security/rkp/aidl/android/hardware/security/keymint/generateCertificateRequestV2.cddl
View File

@@ -62,9 +62,13 @@ UdsCerts = {
SignerName = tstr
UdsCertChain = [
2* X509Certificate ; Root -> ... -> Leaf. "Root" is the vendor self-signed
; cert, "Leaf" contains UDS_Public. There may also be
; intermediate certificates between Root and Leaf.
+ X509Certificate ; Root -> ... -> Leaf. "Root" is the vendor self-signed
; cert, "Leaf" contains UDS_Public. It's recommended to
; have at least 3 certificates in the chain.
; The Root certificate is recommended to be generated in an air-gapped,
; HSM-based secure environment. The intermediate signing keys may be
; online, and should be rotated regularly (e.g. annually). Additionally,
; the intermediate certificates may contain product family identifiers.
]
; A bstr containing a DER-encoded X.509 certificate (RSA, NIST P-curve, or EdDSA)