blob: fed4a543823cfc1202c8e165e58f2d87d41cf866 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
|
#!/bin/sh
#
# Copyright (C) 2016 Wolfgang Wiedmeyer <wolfgit@wiedmeyer.de>
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see <http://www.gnu.org/licenses/>.
#
# resigns your images with your keys and also generates keys for you
# puts everything in out/dist
# most information taken from here:
# https://source.android.com/devices/tech/ota/sign_builds.html
# final check if recovery has the right key:
# java -jar out/host/linux-x86/framework/dumpkey.jar vendor/replicant-security/releasekey.x509.pem
# in recovery: adb shell cat /res/keys
# both outputs should match
# also /system/etc/security/otacerts.zip should only contain your release key
set -e
DEVICE=$1
BASEDIR=$(pwd)
KEY_DIR=$BASEDIR/vendor/replicant-security
if [ -z ${OUT_DIR_COMMON_BASE+x} ]
then
OUT_DIR=$BASEDIR/"out"
else
OUT_DIR=$OUT_DIR_COMMON_BASE/${PWD##*/}
fi
TARGET_DIR=$OUT_DIR/target/product/$DEVICE
TARGET_FILES=$TARGET_DIR/obj/PACKAGING/target_files_intermediates/*-target_files-*.zip
DIST_OUT_DIR=$OUT_DIR/"dist"/$DEVICE
RELEASE=replicant-6.0
generate_keys () {
# keys default values
KEY_C=AU
KEY_ST=Some-State
KEY_O="Internet Widgits Pty Ltd"
echo "No keys present. Generating them now."
echo
echo "You are about to be asked to enter information that will be incorporated"
echo "into your certificate requests."
echo "What you are about to enter is what is called a Distinguished Name or a DN."
echo "There are quite a few fields but you can leave some blank."
echo "For some fields there will be a default value."
read -p "Country Name (2 letter code) [AU]:" KEY_CN
read -p "State or Province Name (full name) [Some-State]:" KEY_ST
read -p "Locality Name (eg, city) []:" KEY_L
read -p "Organization Name (eg, company) [Internet Widgits Pty Ltd]:" KEY_O
read -p "Organizational Unit Name (eg, section) []:" KEY_OU
read -p "Common Name (e.g. your name) []:" KEY_CN
read -p "Email Address []:" KEY_EA
SUBJECT="/C=$KEY_C/ST=$KEY_ST/L=$KEY_L/O=$KEY_O/OU=$KEY_OU/CN=$KEY_CN \
/emailAddress=$KEY_EA"
mkdir $KEY_DIR
for x in releasekey platform shared media; do \
./development/tools/make_key $KEY_DIR/$x "$SUBJECT" || true; \
done
}
if [ "$DEVICE" = "" ]
then
echo "Usage: $0 [DEVICE]"
exit 1
fi
if ! [ -d "$TARGET_DIR" ]
then
echo "The build directory for $DEVICE does not exist."
exit 1
fi
if ! [ -f $TARGET_FILES ]
then
echo "No files to sign. Make sure the build for $DEVICE completed successfully."
exit 1
fi
if ! [ -d "$KEY_DIR" ]
then
generate_keys
fi
mkdir -p $DIST_OUT_DIR
# -o option replaces the test keys with the created ones
# -p makes sure the script finds signapk.jar
if [ "$DEVICE" = "i9100" ] || [ "$DEVICE" = "n7000" ]
then
python $BASEDIR/device/samsung/galaxys2-common/releasetools/galaxys2_sign_target_files_apks \
-s device/samsung/galaxys2-common/releasetools/extensions/releasetools.py \
-o \
-p $OUT_DIR/host/linux-x86 \
-d $KEY_DIR $TARGET_FILES \
$DIST_OUT_DIR/signed-target_files-$DEVICE.zip
python $BASEDIR/build/tools/releasetools/ota_from_target_files \
-s device/samsung/galaxys2-common/releasetools/extensions/releasetools.py \
-k $KEY_DIR/releasekey \
-p $OUT_DIR/host/linux-x86 \
$DIST_OUT_DIR/signed-target_files-$DEVICE.zip \
$DIST_OUT_DIR/$RELEASE-$DEVICE.zip
else
python $BASEDIR/build/tools/releasetools/sign_target_files_apks \
-o \
-p $OUT_DIR/host/linux-x86 \
-d $KEY_DIR $TARGET_FILES \
$DIST_OUT_DIR/signed-target_files-$DEVICE.zip
python $BASEDIR/build/tools/releasetools/ota_from_target_files \
-k $KEY_DIR/releasekey \
-p $OUT_DIR/host/linux-x86 \
$DIST_OUT_DIR/signed-target_files-$DEVICE.zip \
$DIST_OUT_DIR/$RELEASE-$DEVICE.zip
fi
python $BASEDIR/build/tools/releasetools/img_from_target_files \
-z \
$DIST_OUT_DIR/signed-target_files-$DEVICE.zip \
$DIST_OUT_DIR/signed-img-$DEVICE.zip
# get the recovery from the signed-img.zip
unzip -o -j $DIST_OUT_DIR/signed-img-$DEVICE.zip recovery.img -d $DIST_OUT_DIR
mv $DIST_OUT_DIR/recovery.img $DIST_OUT_DIR/recovery-$DEVICE.img
echo
echo "Finished successfully. Install zip and recovery:"
echo "$DIST_OUT_DIR/$RELEASE-$DEVICE.zip"
echo "$DIST_OUT_DIR/recovery-$DEVICE.img"
|
