commit 55b1078e2a1b56daa85edfd5000a5844d3c7914b
author dcashman <dcashman@google.com> Wed Apr 09 14:20:38 2014 -0700
committer dcashman <dcashman@google.com> Wed Jul 02 12:51:28 2014 -0700
tree 89e7ef4227a406bb29cbcb3f2b8b65d9539a4cb9
parent 5dfb86bb09a1c5eebd6522426c94b92c02154779

Initial work for key rotation.

Introduces the upgrade-keyset tag to AndroidManifest.xml. This specifies a
KeySet by which an apk must be signed in order to update the app. Multiple
upgrade KeySets may be specified, in which case one of them must be used to
sign the updating apk.  If no upgrade-keyset is specified, the current logic
involving signatures is used.

Current Key Rotation Design Decisions:
-Apps using a shared user id may not rotate keys.
-All acceptable upgrade keysets must be specified, including the key signing
the app.  This enables key rotation in one update, but also 'locks' an app if
an incorrect upgrade keyset is specified.
-Minimal changes to existing KeySet code.

Bug: 6967056
Change-Id: Ib9bb693d4e9ea1aec375291ecdc182554890d29c