ESP32 Signed App Verification

[Andrzej.T]

Hi,
I have a problem with ESP32 Signed App Verification by Bootloader Without Hardware Secure Boot.

I turn on:

• Require signed app image
• Bootloader verifies app signatures
• Verify app signature on update
• Sign binaries during build

When I build, I getting error:

Code: Select all

FAILED: bootloader.elf 
cmd.exe /C "cd . && C:\SysGCC\esp32\opt\xtensa-esp32-elf\bin\xtensa-esp32-elf-gcc.exe   -nostdlib CMakeFiles/bootloader.elf.dir/dummy_main_src.c.obj  -o bootloader.elf  -Wl,--gc-sections -Wl,--cref -Wl,--Map=bootloader.map -Wl,--start-group soc/libsoc.a spi_flash/libspi_flash.a micro-ecc/libmicro-ecc.a bootloader_support/libbootloader_support.a log/liblog.a main/libmain.a -L C:/SysGCC/esp32/esp-idf/v3.2/components/bootloader/subproject/main -T esp32.bootloader.ld -L C:/SysGCC/esp32/esp-idf/v3.2/components/bootloader/subproject/main -T esp32.bootloader.rom.ld -L C:/SysGCC/esp32/esp-idf/v3.2/components/esp32/ld -T esp32.rom.ld -L C:/SysGCC/esp32/esp-idf/v3.2/components/esp32/ld -T esp32.rom.spiram_incompatible_fns.ld -L C:/SysGCC/esp32/esp-idf/v3.2/components/esp32/ld -T esp32.peripherals.ld -lgcc && cd ."
bootloader_support/libbootloader_support.a(secure_boot_signatures.c.obj)(0): error : undefined reference to `_binary_signature_verification_key_bin_end
bootloader_support/libbootloader_support.a(secure_boot_signatures.c.obj)(0): error : undefined reference to `_binary_signature_verification_key_bin_start
collect2.exe: error: ld returned 1 exit status
ninja: build stopped: subcommand failed.

Can I ask for help in solving this problem.

Regards,
Andrzej Tatar

[ESP_Angus]

Hi Andrzej,

Unfortunately we haven't finished Secure Boot support in CMake preview release yet. There's a list of missing features here: https://docs.espressif.com/projects/esp ... cmake.html

This will be coming very soon, but for now if you switch back to GNU Make build system then it should build correctly.

Angus

[julienD]

Hello Angus,

Sorry, your link is dead.
I ran into the same issue. Please, do you have a delivery date for that?

Thanks
Julien

[ESP_Angus]

Hi Julien,

The CMake support is now the default in master branch, so "latest" version IDF docs will cover it.

There's a bug in CMake with Secure Boot right now, separately reported here: https://esp32.com/viewtopic.php?f=13&t= ... 056#p51056

A fix is coming soon.

[julienD]

Hi Angus,

thanks for your answer.
Is there a document that explains how you manage branches?

Thanks
Julien

[ESP_Angus]

Is there a document that explains how you manage branches?

Hi Julien,

Yes, please take a look here: https://docs.espressif.com/projects/esp ... sions.html

Angus