Evolution-x/hardware_interfaces
1
0
Fork 0
mirror of https://github.com/Evolution-X/hardware_interfaces synced 2026-02-01 11:36:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge "Update the UdsCertChain comment to reflect the latest recommendation." into main

Browse Source
This commit is contained in:
Treehugger Robot
2024-08-07 00:07:52 +00:00
committed by Gerrit Code Review
parent 2ab04e760b 2027a9b597
commit 9471625f69
1 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
security/rkp/aidl/android/hardware/security/keymint/generateCertificateRequestV2.cddl
View File

@@ -62,9 +62,13 @@ UdsCerts = {
SignerName = tstr
UdsCertChain = [
2* X509Certificate ; Root -> ... -> Leaf. "Root" is the vendor self-signed
; cert, "Leaf" contains UDS_Public. There may also be
; intermediate certificates between Root and Leaf.
+ X509Certificate ; Root -> ... -> Leaf. "Root" is the vendor self-signed
; cert, "Leaf" contains UDS_Public. It's recommended to
; have at least 3 certificates in the chain.
; The Root certificate is recommended to be generated in an air-gapped,
; HSM-based secure environment. The intermediate signing keys may be
; online, and should be rotated regularly (e.g. annually). Additionally,
; the intermediate certificates may contain product family identifiers.
]
; A bstr containing a DER-encoded X.509 certificate (RSA, NIST P-curve, or EdDSA)