From eff6a1eaab4683b62879b08ddae4c0134d8f3aa6 Mon Sep 17 00:00:00 2001 From: Ivan Grokhotkov Date: Fri, 17 Jul 2020 20:50:51 +0200 Subject: [PATCH] bootloader: fix SECURE_TARGET_HAS_SECURE_ROM_DL_MODE enabled for esp32 --- components/bootloader/Kconfig.projbuild | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/components/bootloader/Kconfig.projbuild b/components/bootloader/Kconfig.projbuild index b0dc4881bb..aa09d41d1c 100644 --- a/components/bootloader/Kconfig.projbuild +++ b/components/bootloader/Kconfig.projbuild @@ -320,6 +320,11 @@ menu "Security features" select MBEDTLS_ECDSA_C depends on SECURE_SIGNED_ON_BOOT || SECURE_SIGNED_ON_UPDATE + config SECURE_TARGET_HAS_SECURE_ROM_DL_MODE + bool + default y + depends on IDF_TARGET_ESP32S2 + config SECURE_SIGNED_APPS_NO_SECURE_BOOT bool "Require signed app images" @@ -587,7 +592,7 @@ menu "Security features" config SECURE_FLASH_ENCRYPTION_MODE_RELEASE bool "Release" - select SECURE_ENABLE_SECURE_ROM_DL_MODE + select SECURE_ENABLE_SECURE_ROM_DL_MODE if SECURE_TARGET_HAS_SECURE_ROM_DL_MODE endchoice @@ -719,7 +724,7 @@ menu "Security features" config SECURE_ENABLE_SECURE_ROM_DL_MODE bool "Permanently switch to ROM UART Secure Download mode" - depends on IDF_TARGET_ESP32S2 && !SECURE_DISABLE_ROM_DL_MODE + depends on SECURE_TARGET_HAS_SECURE_ROM_DL_MODE && !SECURE_DISABLE_ROM_DL_MODE help If set, during startup the app will burn an eFuse bit to permanently switch the UART ROM Download Mode into a separate Secure Download mode. This option can only work if