Merge branch 'bugfix/esptool_secure_boot_signing_key_path' into 'master'

esptool: (re)populate the secure boot signing key path

Closes IDFGH-8075

See merge request espressif/esp-idf!20218
This commit is contained in:
Mahavir Jain
2022-09-20 22:26:34 +08:00

View File

@@ -140,6 +140,8 @@ endif()
if(NOT BOOTLOADER_BUILD AND CONFIG_SECURE_SIGNED_APPS) if(NOT BOOTLOADER_BUILD AND CONFIG_SECURE_SIGNED_APPS)
if(CONFIG_SECURE_BOOT_BUILD_SIGNED_BINARIES) if(CONFIG_SECURE_BOOT_BUILD_SIGNED_BINARIES)
# for locally signed secure boot image, add a signing step to get from unsigned app to signed app # for locally signed secure boot image, add a signing step to get from unsigned app to signed app
get_filename_component(secure_boot_signing_key "${CONFIG_SECURE_BOOT_SIGNING_KEY}"
ABSOLUTE BASE_DIR "${project_dir}")
add_custom_command(OUTPUT "${build_dir}/.signed_bin_timestamp" add_custom_command(OUTPUT "${build_dir}/.signed_bin_timestamp"
COMMAND ${ESPSECUREPY} sign_data --version ${secure_boot_version} --keyfile ${secure_boot_signing_key} COMMAND ${ESPSECUREPY} sign_data --version ${secure_boot_version} --keyfile ${secure_boot_signing_key}
-o "${build_dir}/${PROJECT_BIN}" "${build_dir}/${unsigned_project_binary}" -o "${build_dir}/${PROJECT_BIN}" "${build_dir}/${unsigned_project_binary}"