tree 39447a9c63de992c85ae6b750a3cbc5fb21ef0ba
parent 8d88f19bfe8ec0afb27593c0dea9b547d8c80b48
author Jeff Sharkey <jsharkey@android.com> 1415823491 -0800
committer Jeff Sharkey <jsharkey@android.com> 1415826966 -0800

Recover apps with malformed certificates.

There was a window of time in Lollipop where we persisted certificates
after they had passed through a decode/encode cycle.  The well-written
OpenSSL library was liberal when decoding (allowing slightly malformed
certs to be parsed), but then strict when encoding, giving us
different bytes for effectively the same certificate.

A related libcore change (0c990ab4a90b8a5492a67b2b728ac9a4a1ccfa1b)
now returns the original bytes verbatim, fixing both pre-Lollipop
installs and installs after that change.

This change recovers any apps that had been installed during the
window of time described above by doing a one-time check to see if
the certs are effectively equal.

Bug: 18228011
Change-Id: Ib82bd6db718d0490d7a26c9c1014b7c8457a7f2d