Lately I'we been having trouble getting secure boot working on the ESP32 device ( been using adafruit devboards). So what I do basically is :
1. have a private key /secure_boot_signing_key.pem
2. extract public key by doing
Code: Select all
python espsecure.py extract_public_key --keyfile <project_path>/secure_boot_signing_key.pem <project_path>/signature_verification_key.bin
3.
Code: Select all
make bootloader
Code: Select all
python esptool.py --chip esp32 --port COM5 --baud 115200 --before default_reset --after no_reset write_flash -z --flash_mode dio --flash_freq 40m --flash_size detect 0x1000 <project_path>/build/bootloader/bootloader.bin
4. After I run the previous command I do a
Code: Select all
make flash
Code: Select all
rst:0x10 (RTCWDT_RTC_RESET),boot:0x13 (SPI_FAST_FLASH_BOOT)
configsip: 0, SPIWP:0x00
clk_drv:0x00,q_drv:0x00,d_drv:0x00,cs0_drv:0x00,hd_drv:0x00,wp_drv:0x00
mode:DIO, clock div:2
load:0x3fff0008,len:8
load:0x3fff0010,len:3844
load:0x40078000,len:12912
ho 0 tail 12 room 4
load:0x40080000,len:252
entry 0x40080034
E (47) secure_boot: bootloader image appears invalid! error 258
E (47) boot: Bootloader digest generation failed (258). SECURE BOOT IS NOT ENABLED.
I (1204) cpu_start: Pro cpu up.
I (1205) cpu_start: Single core mode
I (1206) heap_alloc_caps: Initializing. RAM available for dynamic allocation:
I (1219) heap_alloc_caps: At 3FFAE2A0 len 00001D60 (7 KiB): DRAM
I (1239) heap_alloc_caps: At 3FFBA600 len 00025A00 (150 KiB): DRAM
I (1260) heap_alloc_caps: At 3FFE0440 len 00003BC0 (14 KiB): D/IRAM
I (1282) heap_alloc_caps: At 3FFE4350 len 0001BCB0 (111 KiB): D/IRAM
I (1303) heap_alloc_caps: At 4009B6C0 len 00004940 (18 KiB): IRAM
I (1324) cpu_start: Pro cpu start user code
I (1385) cpu_start: Starting scheduler on PRO CPU.
I (1390) [MAIN]: Initialization started
I (1390) [MAIN]: Software version: 0.1
I (1393) [MAIN]: IDF version: v2.0-rc1-302-g57486a1
Code: Select all
E (47) secure_boot: bootloader image appears invalid! error 258
E (47) boot: Bootloader digest generation failed (258). SECURE BOOT IS NOT ENABLED.
I'we been using this as a guide and at this point I don't get what I'm missing.
If you need any further info please let me know.
Any help will be appreciated. Thank you,
Vlad