Store the signature blob as part of the update checkpoint.
If a signed update is interrupted after the download phase, then on resume we
don't re-download the signature blob from the server and fail the update due to
missing signature. This patch makes it so that the signature blob is stored and
restored as part of the update state checkpoint.
Some alternatives that we may want to consider in the future are:
- Redownload the signature blob from the server and re-verify it.
- Verify the signature as soon as it's received and don't checkpoint the blob
and the signed sha-256 context.
BUG=chromium-os:15711
TEST=unit tests, tested manually interrupting updates on the device
Reviewed-on: http://gerrit.chromium.org/gerrit/1594
Tested-by: Darin Petkov <petkov@chromium.org>
Reviewed-by: Andrew de los Reyes <adlr@chromium.org>
(cherry picked from commit 4f0a07bc1bc46c3c1ac36ba57d693c61a71227ce)
Change-Id: I07ed754bdd0398c42b122874dfeb9e462d2f45b4
Reviewed-on: http://gerrit.chromium.org/gerrit/1652
Tested-by: Darin Petkov <petkov@chromium.org>
Reviewed-by: Ryan Cairns <rtc@chromium.org>
4 files changed
