espressif/esp-idf
1
0
Fork 1
mirror of https://github.com/espressif/esp-idf.git synced 2025-10-04 02:50:58 +02:00
Code Issues Packages Projects Releases Wiki Activity

docs(secure_boot_v2): Mention idf.py and openssl commands to generate and verify signatures

Browse Source 
- Adds support for verify_signature command in idf.py

Closes https://github.com/espressif/esptool/issues/942
This commit is contained in:
harshal.patil
2024-08-16 12:13:44 +05:30
parent 997512ace2
commit e5f22521da
3 changed files with 133 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

38
tools/idf_py_actions/serial_ext.py
View File

@@ -436,6 +436,22 @@ def action_extensions(base_actions: Dict, project_path: str) -> Dict:
sign_data_args += [extra_args['datafile']]
RunTool('espsecure', sign_data_args, args.build_dir)()
def secure_verify_signature(action: str,
ctx: click.core.Context,
args: PropertyDict,
version: str,
keyfile: str,
**extra_args: str) -> None:
ensure_build_directory(args, ctx.info_name)
verify_signature_args = [PYTHON, '-m', 'espsecure', 'verify_signature']
if version:
verify_signature_args += ['--version', version]
if keyfile:
verify_signature_args += ['--keyfile', keyfile]
if extra_args['datafile']:
verify_signature_args += [extra_args['datafile']]
RunTool('espsecure', verify_signature_args, args.build_dir)()
def _parse_efuse_args(ctx: click.core.Context, args: PropertyDict, extra_args: Dict) -> List:
efuse_args = []
if args.port:
@@ -792,6 +808,28 @@ def action_extensions(base_actions: Dict, project_path: str) -> Dict:
},
],
},
'secure-verify-signature': {
'callback': secure_verify_signature,
'help': ('Verify a previously signed binary image, using the ECDSA (V1) or either RSA or ECDSA (V2) public key.'),
'options': [
{
'names': ['--version', '-v'],
'help': ('Version of the secure boot signing scheme to use.'),
'type': click.Choice(['1', '2']),
'default': '2',
},
{
'names': ['--keyfile', '-k'],
'help': ('Public key file for verification. Can be private or public key in PEM format.'),
},
],
'arguments': [
{
'names': ['datafile'],
'nargs': 1,
},
],
},
'efuse-burn': {
'callback': efuse_burn,
'help': 'Burn the eFuse with the specified name.',