DroidGuard invoke engineGetCertificateChain! Throwing exception...

[ahronshor]

Some devices fail the integrity check with log

Problem

I have used the PIF module to root many devices successfully, and it has worked very well. However, recently I encountered a problem with several devices where they fail the integrity check.

From the logs, it appears that PIF loads all the configurations successfully, as shown below

but i got this exception:
DroidGuard invoke engineGetCertificateChain! Throwing exception...

Affected Devices

The issue occurs on the following devices:

• Samsung models:

  • A715F
  • A528B
  • G781B
  • G990E
  • S928B
  • S926B
  • A515F
  • A346E
  • A336E
  • A536E
  • S901E
  • G998B
  • G996B

• Cubot models:

  • KINGKONG MINI 3

However, I have successfully passed the integrity check on many other devices from the same models.

Additional Information

• The issue seems to be specific to certain devices, even though other devices of the same models pass the integrity check.
• All configurations in the PIF module appear to load successfully before the error occurs.

Logs

11-15 15:14:48.714 I/ActivityManager( 1109): Start proc 15123:com.google.android.gms.unstable/u0a254 for service {com.google.android.gms/com.google.android.gms.droidguard.DroidGuardService}
11-15 15:14:48.717 E/LSPlog (15123): injecting into com.google.android.gms.unstable 111
11-15 15:14:48.731 D/PIF (15123): Dex file size: 20780
11-15 15:14:48.731 D/PIF (15123): Json file size: 210
.......
11-15 15:14:48.886 D/PIF (15123): Set 'BRAND' to 'google'
11-15 15:14:48.886 D/PIF (15123): Set 'DEVICE' to 'akita'
11-15 15:14:48.886 D/PIF (15123): Set 'FINGERPRINT' to 'google/akita_beta/akita:15/AP41.240925.009/12534705:user/release-keys'
11-15 15:14:48.886 D/PIF (15123): Set 'ID' to 'AP41.240925.009'
11-15 15:14:48.886 D/PIF (15123): Set 'INCREMENTAL' to '12534705'
11-15 15:14:48.886 D/PIF (15123): Set 'MANUFACTURER' to 'Google'
11-15 15:14:48.886 D/PIF (15123): Set 'MODEL' to 'Pixel 8a'
11-15 15:14:48.886 D/PIF (15123): Set 'PRODUCT' to 'akita_beta'
11-15 15:14:48.886 D/PIF (15123): Set 'RELEASE' to '15'
11-15 15:14:48.886 D/PIF (15123): Set 'SECURITY_PATCH' to '2024-10-05'
11-15 15:14:48.886 D/PIF (15123): Set 'TAGS' to 'release-keys'
11-15 15:14:48.886 D/PIF (15123): Set 'TYPE' to 'user'
11-15 15:14:48.886 D/PIF (15123): get system classloader
11-15 15:14:48.886 D/PIF (15123): create class loader
11-15 15:14:48.887 D/PIF (15123): load class
11-15 15:14:48.887 D/PIF (15123): call init
11-15 15:14:48.887 I/PIF (15123): Don't spoof signature
11-15 15:14:48.888 I/PIF (15123): Parsed 12 fields from JSON
11-15 15:14:48.888 D/PIF (15123): jni memory free
11-15 15:14:48.888 D/PIF (15123): hook __system_property_read_callback successful at 0x76218ffc68

However, at the end of the process, I see the following error in the log:
DroidGuard invoke engineGetCertificateChain! Throwing exception...
This issue seems to prevent these devices from passing the integrity check.

with a long exception log

11-15 15:58:43.963 W/PIF (15123): DroidGuard invoke engineGetCertificateChain! Throwing exception...
11-15 15:58:43.970 I/keystore2( 569): system/security/keystore2/src/service.rs:376 - In delete_key. 10254, Some("unstable.c7202ece89390c490b1b94d5b71225e1.4361619145661393811")
11-15 15:58:43.971 I/keystore2( 569): system/security/keystore2/src/gc.rs:144 - In process_one_key: Success remove invalidate_key.
11-15 15:58:43.980 D/libEGL (15123): dlopen (libGLESv2_samsung.so) success at 0x19df9d9bb6dd76c7
11-15 15:58:43.981 D/vulkan (15123): searching for layers in '/data/app/~~GYf0zUgo4nJ3HnBUSDBhmQ==/com.google.android.gms-C6F0hxWy59HZ2Vp1XHREPg==/lib/arm64'
11-15 15:58:43.983 D/vulkan (15123): searching for layers in '/data/app/~~GYf0zUgo4nJ3HnBUSDBhmQ==/com.google.android.gms-C6F0hxWy59HZ2Vp1XHREPg==/base.apk!/lib/arm64-v8a'
11-15 15:58:43.984 V/XGL (15123): -------------------------------------------------------
11-15 15:58:43.984 V/XGL (15123): SUMD version merge SHA1 = 893a48f7be
11-15 15:58:43.984 V/XGL (15123): SUMD version revision number = f601178174
11-15 15:58:43.984 V/XGL (15123): -------------------------------------------------------
11-15 15:58:43.984 V/XGL (15123): Entering: Create
.......
.......
11-15 15:58:44.156 D/PIF (15123): [ro.product.first_api_level]: 34 -> 21
11-15 15:58:44.172 D/PIF (15123): [ro.build.version.security_patch]: 2024-07-01 -> 2024-10-05