Support for dev package name

GrapheneOS · Jan 5, 2025 · d0398c6 · d0398c6
1 parent ccace99
commit d0398c6
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/src/main/java/app/attestation/server/AttestationProtocol.java b/src/main/java/app/attestation/server/AttestationProtocol.java
@@ -554,6 +554,11 @@ private static Verified verifyStateless(final Certificate[] certificates,
                 throw new GeneralSecurityException("invalid Auditor app signing key");
             }
             appVariant = AUDITOR_APP_VARIANT_DEBUG;
+        } else if (packageName != null && packageName.startsWith("app.attestation.auditor.dev")) {
+            if (!"79F16FC09C581E7CA8C407F4F65449C82675D3090E91D0B38ED3BD771C10053F".equals(signatureDigest)) {
+                throw new GeneralSecurityException("invalid Auditor app signing key");
+            }
+            appVariant = AUDITOR_APP_VARIANT_DEBUG;
         } else {
             throw new GeneralSecurityException("invalid Auditor app package name: " + packageName);
         }