chenxiaolong / DualBootPatcher

Patches Android ROMs for dual boot support
https://dbp.noobdev.io
Other
529 stars 467 forks source link

mbtool: Only allow daemon connections from APKs signed with the same key #1377

Closed chenxiaolong closed 5 years ago

chenxiaolong commented 5 years ago

Previously, custom builds of mbtool allowed daemon connections from "official" builds of the app. There's no reason for the daemon to trust any certificate other than the one corresponding to the private key that signed itself, so this commit removes all hardcoded trusted certificates.

Signed-off-by: Andrew Gunnerson andrewgunnerson@gmail.com