ESP32 Signed App Verification

Andrzej.T
Posts: 6
Joined: Mon Mar 11, 2019 10:04 am

ESP32 Signed App Verification

Postby Andrzej.T » Mon Mar 11, 2019 10:10 am

Hi,
I have a problem with ESP32 Signed App Verification by Bootloader Without Hardware Secure Boot.

I turn on:
  • Require signed app image
  • Bootloader verifies app signatures
  • Verify app signature on update
  • Sign binaries during build
When I build, I getting error:

Code: Select all

FAILED: bootloader.elf 
cmd.exe /C "cd . && C:\SysGCC\esp32\opt\xtensa-esp32-elf\bin\xtensa-esp32-elf-gcc.exe   -nostdlib CMakeFiles/bootloader.elf.dir/dummy_main_src.c.obj  -o bootloader.elf  -Wl,--gc-sections -Wl,--cref -Wl,--Map=bootloader.map -Wl,--start-group soc/libsoc.a spi_flash/libspi_flash.a micro-ecc/libmicro-ecc.a bootloader_support/libbootloader_support.a log/liblog.a main/libmain.a -L C:/SysGCC/esp32/esp-idf/v3.2/components/bootloader/subproject/main -T esp32.bootloader.ld -L C:/SysGCC/esp32/esp-idf/v3.2/components/bootloader/subproject/main -T esp32.bootloader.rom.ld -L C:/SysGCC/esp32/esp-idf/v3.2/components/esp32/ld -T esp32.rom.ld -L C:/SysGCC/esp32/esp-idf/v3.2/components/esp32/ld -T esp32.rom.spiram_incompatible_fns.ld -L C:/SysGCC/esp32/esp-idf/v3.2/components/esp32/ld -T esp32.peripherals.ld -lgcc && cd ."
bootloader_support/libbootloader_support.a(secure_boot_signatures.c.obj)(0): error : undefined reference to `_binary_signature_verification_key_bin_end
bootloader_support/libbootloader_support.a(secure_boot_signatures.c.obj)(0): error : undefined reference to `_binary_signature_verification_key_bin_start
collect2.exe: error: ld returned 1 exit status
ninja: build stopped: subcommand failed.
Can I ask for help in solving this problem.

Regards,
Andrzej Tatar

ESP_Angus
Posts: 1897
Joined: Sun May 08, 2016 4:11 am

Re: ESP32 Signed App Verification

Postby ESP_Angus » Mon Mar 11, 2019 10:51 pm

Hi Andrzej,

Unfortunately we haven't finished Secure Boot support in CMake preview release yet. There's a list of missing features here: https://docs.espressif.com/projects/esp ... cmake.html

This will be coming very soon, but for now if you switch back to GNU Make build system then it should build correctly.

Angus

julienD
Posts: 7
Joined: Fri Sep 13, 2019 12:38 pm

Re: ESP32 Signed App Verification

Postby julienD » Mon Nov 04, 2019 3:25 pm

Hello Angus,

Sorry, your link is dead.
I ran into the same issue. Please, do you have a delivery date for that?

Thanks
Julien

ESP_Angus
Posts: 1897
Joined: Sun May 08, 2016 4:11 am

Re: ESP32 Signed App Verification

Postby ESP_Angus » Wed Nov 06, 2019 3:42 am

Hi Julien,

The CMake support is now the default in master branch, so "latest" version IDF docs will cover it.

There's a bug in CMake with Secure Boot right now, separately reported here: https://esp32.com/viewtopic.php?f=13&t= ... 056#p51056

A fix is coming soon.

julienD
Posts: 7
Joined: Fri Sep 13, 2019 12:38 pm

Re: ESP32 Signed App Verification

Postby julienD » Wed Nov 06, 2019 9:49 am

Hi Angus,

thanks for your answer.
Is there a document that explains how you manage branches?

Thanks
Julien

ESP_Angus
Posts: 1897
Joined: Sun May 08, 2016 4:11 am

Re: ESP32 Signed App Verification

Postby ESP_Angus » Thu Nov 07, 2019 7:34 am

julienD wrote:
Wed Nov 06, 2019 9:49 am
Is there a document that explains how you manage branches?
Hi Julien,

Yes, please take a look here: https://docs.espressif.com/projects/esp ... sions.html

Angus

Who is online

Users browsing this forum: Majestic-12 [Bot] and 19 guests