security/hakurei.app
security/hakurei.app
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity

move Vanadium key generation to before cert digest step

Browse Source
This commit is contained in:
inthewaves 2020-10-06 16:18:10 -07:00 committed by Daniel Micay
parent fa5276d158
commit d540be251e
1 changed files with 8 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
static/build.html
View File

@ -759,6 +759,14 @@ git checkout $CORRECT_BRANCH_OR_TAG</pre>
value):</p>
<pre>gclient sync -D --with_branch_heads -r $VERSION --jobs 32</pre>
<p>Generate a signing key for Vanadium if this is the initial build:</p>
<pre>keytool -genkey -v -keystore vanadium.keystore -storetype pkcs12 -alias vanadium -keyalg RSA -keysize 4096 -sigalg SHA512withRSA -validity 10000 -dname "cn=GrapheneOS"</pre>
<p>You will be prompted to enter a password which will be requested by the
<code>generate_release.sh</code> script for signing releases. You should back up
the generated keystore with your other keys.</p>
<p>Apply the GrapheneOS patches on top of the tagged release:</p>
@ -783,15 +791,6 @@ git am --whitespace=nowarn ../patches/*.patch</pre>
<pre>ninja -C out/Default/ trichrome_webview_64_32_apk trichrome_chrome_64_32_bundle trichrome_library_64_32_apk</pre>
<p>Generate a signing key for Vanadium if this is the initial build:</p>
<pre>cd ..
keytool -genkey -v -keystore vanadium.keystore -storetype pkcs12 -alias vanadium -keyalg RSA -keysize 4096 -sigalg SHA512withRSA -validity 10000 -dname "cn=GrapheneOS"
cd src</pre>
<p>You will be prompted to enter a password which will be requested by the script for
signing releases. You should back up the generated keystore with your other keys.</p>
<p>Generate TrichromeChrome.apk from the bundle and sign the apks:</p>
<pre>../generate_release.sh</pre>