Hi everybody. After having read about DivestOS in other topics, I decided it would be easier to discuss everything about it here in this topic. Thanks @anon43585658 for this Custom ROM. I gave it a shot this Friday (FP3 with upgraded cameras). So far everything is great. I have been using Lineage O…

ok, thanks Is this really bad, or not? Don’t know… What do you do in DivestOS?

test-keys basically means verified boot is doing absolutely nothing. Here is how DivestOS handles it: DivestOS-Build/Generate_Signing_Keys.sh at master · Divested-Mobile/DivestOS-Build · GitHub DivestOS-Build/Generate_Verified_Boot_Hashes.sh at master · Divested-Mobile/DivestOS-Build · GitHub Div…

@SkewedZeppelin Thanks for explaining What’s about calyxOS and the brand new version for FP4 They are using a key, too. Also only test key? Can you test this, too, please. Would be interesting… And more then that What is FP doing on their ROM? In FPOS? Just test keys, too?

CalyxOS for FP4 is correct as it should be: python verify_signature.py -f boot.img -v vbmeta.img Boot Signature Tool v1.6 (c) B.Kerler 2017-2019 ---------------------------------------------- Kernel=0x00001000, length=0x023D8000 Ramdisk=0x023D9000, length=0x0018A000 Second=0x02563000, length=0x00…

And for the finale we see Fairphone shipping test-keys in production somehow: FP4.FP3R.A.099.20220112_factory.zip: python verify_signature.py -f boot.img -v vbmeta.img Boot Signature Tool v1.6 (c) B.Kerler 2017-2019 ---------------------------------------------- Kernel=0x00001000, length=0x023DC0…

@anon43585658 How can i interpret this: Snipped from google doc: Device State, User-settable root of trust: If an user-settable root of trust is set, the device should allow a version of Android signed with either the built-in root of trust or the user-settable root of trust to boot. what diff…

@anon43585658 maybe I may have a stement?

@anon9231953 In the case you install a properly signed ROM on such a broken bootloader, the verified boot should be functional. I am more concerned about the ROMs signing verified boot metadata with test- keys. If you could get EDL access you can very likely swap out the system without trigger…

@anon43585658 Can you test newest iodé build? https://github.com/vincentvidal/iode_ota/releases/download/v1/iode-2.4-20220405-FP4.zip signed with own key instead of test-keys got yellow bootscreen now: that a different OS will be booted… thanks

@anon9231953 iode-2.4-20220405-FP4 appears correct like DivestOS and CalyxOS now.

Fairphone Community Forum

Bootloader // AVB keys used in ROMs for Fairphone 3+4

Discuss The Products

fp4, fp3

show post in topic

Home
Categories
Guidelines
Terms of Service
Privacy Policy

Powered by Discourse, best viewed with JavaScript enabled