How to sign by platform key - DanielWorld/SoftwareTech GitHub Wiki

Platform Signed Key ๋งŒ๋“ค๊ธฐ

platform signing key๋ฅผ ๋งŒ๋“ค๊ธฐ ์œ„ํ•ด์„œ๋Š” ์ž„์˜์˜ ํด๋”(temp)๋ฅผ ๋งŒ๋“ค๊ณ  platform.pk8 ๊ทธ๋ฆฌ๊ณ  platform.x509.pem ๋ณต์‚ฌํ•œ๋‹ค.

  • AOSP์†Œ์Šค๋ฃจํŠธ\build\target\product\security\platform.pk8
  • AOSP์†Œ์Šค๋ฃจํŠธ\build\target\product\security\platform.x509.pem

(21.01.28 : ํ˜„์žฌ AOSP build ์†Œ์Šค๋ฃจํŠธ)

์ž„์˜์˜ ํด๋”๋กœ ์ด๋™ ํ›„ ์•„๋ž˜ ๋ช…๋ น์„ ์ˆœ์„œ๋Œ€๋กœ ์‹คํ–‰ํ•˜๋ฉด ๋ฐฐํฌ์šฉ platform.jks์„ ์–ป์„ ์ˆ˜ ์žˆ๋‹ค.

ํ‚ค ์„ค์ •์ •๋ณด (์˜ˆ์‹œ) -> ๋‹ค๋ฅธ ๊ฐ’์œผ๋กœ ์ ์šฉ๊ฐ€๋Šฅ

key store password: android
key alias: platform
key password: android
  • PK8 ์œ ํ˜•์˜ ํ‚ค ํŒŒ์ผ์„ PEM ์œ ํ˜• ํ‚ค๋กœ ๋ณ€ํ™˜
  • ํ‚ค์™€ ์ธ์ฆ์„œ๋ฅผ ํฌํ•จํ•˜๋Š” PKCS#12 ํฌ๋งท์˜ ์ €์žฅ์†Œ ์ƒ์„ฑ
  • PKCS312 ํฌ๋งท ์ €์žฅ์†Œ ํŒŒ์ผ์„ ์ž๋ฐ” ํ‚ค ์ €์žฅ์†Œ ํฌ๋งท์œผ๋กœ ๋ณ€ํ™˜
$ openssl pkcs8 -inform DER -nocrypt -in platform.pk8 -out platform.pem
$ openssl pkcs12 -export -in platform.x509.pem -inkey platform.pem -out platform.p12 -password pass:android -name platform
$ keytool -importkeystore -deststorepass android -destkeystore platform.jks -srcstoretype PKCS12 -srcstorepass android -srckeystore platform.p12

์ฐธ๊ณ