secure_boot: Enable --no-stub if secure boot enabled

ROM code doesn't allow loader stub to be executed in case secure boot in
enabled. Providing --no-stub flag to esptool allows user to flash new
firmware, given download mode hasn't been disabled
This commit is contained in:
Sachin Parekh
2021-09-21 17:13:01 +05:30
parent b857c86535
commit c4e445b6f3

View File

@@ -502,6 +502,7 @@ menu "Security features"
bool "Enable hardware Secure Boot in bootloader (READ DOCS FIRST)" bool "Enable hardware Secure Boot in bootloader (READ DOCS FIRST)"
default n default n
depends on IDF_TARGET_ESP32 || IDF_TARGET_ESP32S2 || ESP32C3_REV_MIN_3 || IDF_TARGET_ESP32S3 depends on IDF_TARGET_ESP32 || IDF_TARGET_ESP32S2 || ESP32C3_REV_MIN_3 || IDF_TARGET_ESP32S3
select ESPTOOLPY_NO_STUB if !IDF_TARGET_ESP32 && !IDF_TARGET_ESP32S2
help help
Build a bootloader which enables Secure Boot on first boot. Build a bootloader which enables Secure Boot on first boot.