tree 47b57539baa73de9e4118a28ae49e7391490d6a8
parent 83df98e8d3e7b5d18ea593206f6acb10ba20b72d
author Seigo Nonaka <nona@google.com> 1666253709 +0900
committer Seigo Nonaka <nona@google.com> 1669108359 +0000

Check signature of updated font during boot

config_fontManagerServiceCert is a new config symbol that has
a list of der certificates to be used for font file verification.

After this change, the signature is stored next to the font file
and it is verified with the stored signature on boot time. If the
signature file is missing, e.g. due to device update, the updated
font file is discarded.

Bug: 242892591
Test: atest GtsFontHostTestCases
Test: atest UpdatableFontDirTest
Test: atest UpdatableSystemFontTest
Test: atest FontManagerTest
Test: Manually verified the font files can be updated
Change-Id: Ia4a6720b863163be523b845b883915185cee656c
Merged-In: Ia4a6720b863163be523b845b883915185cee656c