platform_build/tools/releasetools/test_sign_apex.py

#
# Copyright (C) 2019 The Android Open Source Project
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#      http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#

import os.path

import common
import sign_apex
import test_utils


class SignApexTest(test_utils.ReleaseToolsTestCase):

  def setUp(self):
    self.testdata_dir = test_utils.get_testdata_dir()
    self.assertTrue(os.path.exists(self.testdata_dir))

    common.OPTIONS.search_path = test_utils.get_search_path()

  @test_utils.SkipIfExternalToolsUnavailable()
  def test_SignApexFile(self):
    foo_apex = os.path.join(self.testdata_dir, 'foo.apex')
    payload_key = os.path.join(self.testdata_dir, 'testkey_RSA4096.key')
    container_key = os.path.join(self.testdata_dir, 'testkey')
    signed_foo_apex = sign_apex.SignApexFile(
        'avbtool',
        foo_apex,
        payload_key,
        container_key,
        False)
    self.assertTrue(os.path.exists(signed_foo_apex))

  @test_utils.SkipIfExternalToolsUnavailable()
  def test_SignApexWithApk(self):
    test_apex = os.path.join(self.testdata_dir, 'has_apk.apex')
    payload_key = os.path.join(self.testdata_dir, 'testkey_RSA4096.key')
    container_key = os.path.join(self.testdata_dir, 'testkey')
    apk_keys = {'wifi-service-resources.apk': os.path.join(
        self.testdata_dir, 'testkey')}
    signed_test_apex = sign_apex.SignApexFile(
        'avbtool',
        test_apex,
        payload_key,
        container_key,
        False,
        apk_keys)
    self.assertTrue(os.path.exists(signed_test_apex))

  @test_utils.SkipIfExternalToolsUnavailable()
  def test_SignCompressedApexFile(self):
    apex = os.path.join(test_utils.get_current_dir(), 'com.android.apex.compressed.v1.capex')
    payload_key = os.path.join(self.testdata_dir, 'testkey_RSA4096.key')
    container_key = os.path.join(self.testdata_dir, 'testkey')
    signed_apex = sign_apex.SignApexFile(
        'avbtool',
        apex,
        payload_key,
        container_key,
        False,
        codename_to_api_level_map={'S': 31, 'Tiramisu' : 32})
    self.assertTrue(os.path.exists(signed_apex))

  @test_utils.SkipIfExternalToolsUnavailable()
  def test_SignApexWithSepolicy(self):
    test_apex = os.path.join(self.testdata_dir, 'sepolicy.apex')
    payload_key = os.path.join(self.testdata_dir, 'testkey_RSA4096.key')
    container_key = os.path.join(self.testdata_dir, 'testkey')
    sepolicy_key = os.path.join(self.testdata_dir, 'testkey_RSA4096.key')
    sepolicy_cert = os.path.join(self.testdata_dir, 'testkey.x509.pem')
    signed_test_apex = sign_apex.SignApexFile(
        'avbtool',
        test_apex,
        payload_key,
        container_key,
        False,
        None,
        sepolicy_key=sepolicy_key,
        sepolicy_cert=sepolicy_cert)
    self.assertTrue(os.path.exists(signed_test_apex))