Secure boot problem
Posted: Wed Apr 05, 2017 8:38 am
Hello guys,
Lately I'we been having trouble getting secure boot working on the ESP32 device ( been using adafruit devboards). So what I do basically is :
1. have a private key /secure_boot_signing_key.pem
2. extract public key by doing and I get signature_verification_key.bin
3. then gives me
.
4. After I run the previous command I do a
5. after rebooting I get the following
The problem being here
You can check the sdkconfig.
I'we been using this as a guide and at this point I don't get what I'm missing.
If you need any further info please let me know.
Any help will be appreciated. Thank you,
Vlad
Lately I'we been having trouble getting secure boot working on the ESP32 device ( been using adafruit devboards). So what I do basically is :
1. have a private key /secure_boot_signing_key.pem
2. extract public key by doing
Code: Select all
python espsecure.py extract_public_key --keyfile <project_path>/secure_boot_signing_key.pem <project_path>/signature_verification_key.bin
3.
Code: Select all
make bootloader
Code: Select all
python esptool.py --chip esp32 --port COM5 --baud 115200 --before default_reset --after no_reset write_flash -z --flash_mode dio --flash_freq 40m --flash_size detect 0x1000 <project_path>/build/bootloader/bootloader.bin
4. After I run the previous command I do a
Code: Select all
make flash
Code: Select all
rst:0x10 (RTCWDT_RTC_RESET),boot:0x13 (SPI_FAST_FLASH_BOOT)
configsip: 0, SPIWP:0x00
clk_drv:0x00,q_drv:0x00,d_drv:0x00,cs0_drv:0x00,hd_drv:0x00,wp_drv:0x00
mode:DIO, clock div:2
load:0x3fff0008,len:8
load:0x3fff0010,len:3844
load:0x40078000,len:12912
ho 0 tail 12 room 4
load:0x40080000,len:252
entry 0x40080034
E (47) secure_boot: bootloader image appears invalid! error 258
E (47) boot: Bootloader digest generation failed (258). SECURE BOOT IS NOT ENABLED.
I (1204) cpu_start: Pro cpu up.
I (1205) cpu_start: Single core mode
I (1206) heap_alloc_caps: Initializing. RAM available for dynamic allocation:
I (1219) heap_alloc_caps: At 3FFAE2A0 len 00001D60 (7 KiB): DRAM
I (1239) heap_alloc_caps: At 3FFBA600 len 00025A00 (150 KiB): DRAM
I (1260) heap_alloc_caps: At 3FFE0440 len 00003BC0 (14 KiB): D/IRAM
I (1282) heap_alloc_caps: At 3FFE4350 len 0001BCB0 (111 KiB): D/IRAM
I (1303) heap_alloc_caps: At 4009B6C0 len 00004940 (18 KiB): IRAM
I (1324) cpu_start: Pro cpu start user code
I (1385) cpu_start: Starting scheduler on PRO CPU.
I (1390) [MAIN]: Initialization started
I (1390) [MAIN]: Software version: 0.1
I (1393) [MAIN]: IDF version: v2.0-rc1-302-g57486a1
Code: Select all
E (47) secure_boot: bootloader image appears invalid! error 258
E (47) boot: Bootloader digest generation failed (258). SECURE BOOT IS NOT ENABLED.
I'we been using this as a guide and at this point I don't get what I'm missing.
If you need any further info please let me know.
Any help will be appreciated. Thank you,
Vlad