...
The libPackage library at runtime uses all the compatible certificates present in DAC_APP_CERT_PATH for verifying the signature of the bolt package. DAC_APP_CERT_PATH is unique to device build configuration (Reference: here).
...
This section explains how to verify the signature information of a Bolt bundle on the device side. The flow is explained with respect to the FactoryApp launch flow diagram.
CPE device should have the public key in it's DAC_APP_CERT_PATH directory which will be used by libPackage to verify each bundles signature.
A sample test application named ralfinfocan be used to inspect the bundle details on the DUT which closely mimics the behavior of the plugin based runtime logic.
...