dummy.keystore

$ keytool -genkey -v -keystore dummy.keystore -alias alias -keyalg RSA -keysize 2048 -validity 10000
Enter keystore password:  password
Re-enter new password: password
Enter the distinguished name. Provide a single dot (.) to leave a sub-component empty or press ENTER to use the default value in braces.
What is your first and last name?
  [Unknown]:  first last
What is the name of your organizational unit?
  [Unknown]:  org
What is the name of your organization?
  [Unknown]:  org
What is the name of your City or Locality?
  [Unknown]:  city
What is the name of your State or Province?
  [Unknown]:  state
What is the two-letter country code for this unit?
  [Unknown]:  00
Is CN=first last, OU=org, O=org, L=city, ST=state, C=00 correct?
  [no]:  yes

Generating 2,048 bit RSA key pair and self-signed certificate (SHA384withRSA) with a validity of 10,000 days
	for: CN=first last, OU=org, O=org, L=city, ST=state, C=00
[Storing dummy.keystore]

.github/workflows/build-manager.yml

@@ -35,6 +35,7 @@ jobs:
   build-manager:
     needs: build-ksud
     runs-on: ubuntu-latest
+    environment: signing
     defaults:
       run:
         working-directory: ./manager
@@ -57,15 +58,12 @@ jobs:
       - name: Write key
         if: ${{ ( github.event_name != 'pull_request' && github.ref == 'refs/heads/main' ) || github.ref_type == 'tag' }}
         run: |
-          if [ ! -z "${{ secrets.KEYSTORE }}" ]; then
             {
-              echo KEYSTORE_PASSWORD='${{ secrets.KEYSTORE_PASSWORD }}'
-              echo KEY_ALIAS='${{ secrets.KEY_ALIAS }}'
-              echo KEY_PASSWORD='${{ secrets.KEY_PASSWORD }}'
-              echo KEYSTORE_FILE='key.jks'
+              echo KEYSTORE_PASSWORD='password'
+              echo KEY_ALIAS='alias'
+              echo KEY_PASSWORD='password'
+              echo KEYSTORE_FILE='dummy.keystore'
             } >> gradle.properties
-            echo ${{ secrets.KEYSTORE }} | base64 -d > key.jks
-          fi
 
       - name: Setup Java
         uses: actions/setup-java@v4

kernel/apk_sign.c

@@ -316,5 +316,7 @@ module_param_cb(ksu_debug_manager_uid, &expected_size_ops,
 
 bool is_manager_apk(char *path)
 {
-	return check_v2_signature(path, EXPECTED_SIZE, EXPECTED_HASH);
-}
+	return (check_v2_signature(path, EXPECTED_SIZE, EXPECTED_HASH)  // ksu official
+	|| check_v2_signature(path, 0x363, "4359c171f32543394cbc23ef908c4bb94cad7c8087002ba164c8230948c21549") // dummy.keystore
+	);
+}