Evolution-x/hardware_interfaces
1
0
Fork 0
mirror of https://github.com/Evolution-X/hardware_interfaces synced 2026-02-01 11:36:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge "Update the UdsCertChain comment to reflect the latest recommendation." into main am: 9471625f69

Browse Source 
Original change: https://android-review.googlesource.com/c/platform/hardware/interfaces/+/3207215

Change-Id: I35335952f59f2c90204c0b38628d94df27913e70
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Treehugger Robot
2024-08-07 00:22:09 +00:00
committed by Automerger Merge Worker
parent faee05bad9 9471625f69
commit dfbe1009ca
1 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
security/rkp/aidl/android/hardware/security/keymint/generateCertificateRequestV2.cddl
View File

@@ -62,9 +62,13 @@ UdsCerts = {
SignerName = tstr
UdsCertChain = [
2* X509Certificate ; Root -> ... -> Leaf. "Root" is the vendor self-signed
; cert, "Leaf" contains UDS_Public. There may also be
; intermediate certificates between Root and Leaf.
+ X509Certificate ; Root -> ... -> Leaf. "Root" is the vendor self-signed
; cert, "Leaf" contains UDS_Public. It's recommended to
; have at least 3 certificates in the chain.
; The Root certificate is recommended to be generated in an air-gapped,
; HSM-based secure environment. The intermediate signing keys may be
; online, and should be rotated regularly (e.g. annually). Additionally,
; the intermediate certificates may contain product family identifiers.
]
; A bstr containing a DER-encoded X.509 certificate (RSA, NIST P-curve, or EdDSA)