gitlab-ci: punt reworking index-v1.jar verify

The index-v1.jar tests need to verify its SHA1 signature.  Java's default
is to treat SHA1 as unsigned.  Ideally, our code would use apksig to verify
those JAR sigs so that it would use the apksigner rules for whether a SHA1
signature is valid.

https://android.googlesource.com/platform/tools/apksig/+/master/src/main/java/com/android/apksig/internal/apk/v1/V1SchemeVerifier.java
This commit is contained in:
Hans-Christoph Steiner 2023-02-08 16:06:34 +01:00
parent 22d6dbfd32
commit d7dc001b9b
1 changed files with 3 additions and 0 deletions

View File

@ -58,6 +58,9 @@ workflow:
test_lint_pmd_checkstyle:
<<: *test-template
script:
# index-v1.jar tests need SHA1 support still, TODO use apksig to validate JAR sigs
- sed -i 's,SHA1 denyAfter 20[0-9][0-9],SHA1 denyAfter 2024,'
/usr/lib/jvm/default-java/conf/security/java.security
# always report on lint errors to the build log
- sed -i -e 's,textReport .*,textReport true,' app/build.gradle
# the tasks "lint", "test", etc don't always include everything