Add a dumpsys implementation for attestation_verification service.
Example output: $ adb shell dumpsys attestation_verification AttestationVerificationManagerService Event Log: Verification #2 [2024-04-25 22:09:52] Result: FAILURE(2) Certificate Chain Valid (inc. Trust Anchor): FAILURE Verification #1 [2024-04-25 22:08:37] Result: FAILURE(2) Certificate Chain Valid (inc. Trust Anchor): FAILURE Seeing a result from dumpsys that doesn't fail will need to wait until there is a user-signed build to test on a locked device. However, here's an example output from a unit test: 04-25 15:23:23.954 408 467 D AVFTest : Verification #1 [2024-04-25 22:23:23] 04-25 15:23:23.954 408 467 D AVFTest : Result: FAILURE(2) 04-25 15:23:23.954 408 467 D AVFTest : Certificate Chain Valid (inc. Trust Anchor): OK 04-25 15:23:23.954 408 467 D AVFTest : Local Binding: OK 04-25 15:23:23.954 408 467 D AVFTest : Binding Type: 3 04-25 15:23:23.954 408 467 D AVFTest : System Ownership: FAILURE 04-25 15:23:23.954 408 467 D AVFTest : KeyStore Attestation Parameters 04-25 15:23:23.954 408 467 D AVFTest : OS Version >= 10: OK 04-25 15:23:23.954 408 467 D AVFTest : OS Patch Level in Range: OK 04-25 15:23:23.954 408 467 D AVFTest : Attestation Version >= 3: OK 04-25 15:23:23.954 408 467 D AVFTest : Keymaster Version >= 4: OK 04-25 15:23:23.954 408 467 D AVFTest : Keymaster HW-Backed: OK 04-25 15:23:23.954 408 467 D AVFTest : Key is HW Backed: OK 04-25 15:23:23.954 408 467 D AVFTest : Boot State is VERIFIED: OK 04-25 15:23:23.954 408 467 D AVFTest : Verified Boot is LOCKED: OK 04-25 15:23:23.954 408 467 D AVFTest : Key Boot Level in Range: OK 04-25 15:23:23.954 408 467 D AVFTest : Key Vendor Patch Level in Range: OK Bug: 335498868 Test: atest AttestationVerificationTest Change-Id: Iea0b19b3c3a25c5800ebd6fad85c0829a2cfa2b1 Flag: android.security.dump_attestation_verifications
Showing
- services/core/java/com/android/server/security/AttestationVerificationManagerService.java 76 additions, 1 deletion...erver/security/AttestationVerificationManagerService.java
- services/core/java/com/android/server/security/AttestationVerificationPeerDeviceVerifier.java 192 additions, 31 deletions...r/security/AttestationVerificationPeerDeviceVerifier.java
- tests/AttestationVerificationTest/src/com/android/server/security/AttestationVerificationPeerDeviceVerifierTest.kt 90 additions, 41 deletions...security/AttestationVerificationPeerDeviceVerifierTest.kt
Loading
Please register or sign in to comment