26 Commits

Author SHA1 Message Date
irriden
61ef67ec8c build: remove integrated binary signatures
our secure boot feature checks the signatures of hashes of ota binaries
2023-12-04 19:07:47 +00:00
irriden
7a1dca6f35 build: use set -e to interrupt scripts on first failure 2023-12-02 01:49:57 +00:00
irriden
226c35b518 build: remove git pull from deploy script 2023-11-26 00:49:17 +00:00
irriden
00bf29288f sphinx-key: read config wifi creds from sdcard 2023-11-25 03:23:56 +00:00
irriden
66ba02e88a build: add espflash dependency check 2023-11-23 02:28:57 +00:00
irriden
66e4a11759 sphinx-key: secure boot
adds two layers of signature checks
one done by sphinx-key in ota.rs via secp256k1
another done by esp-idf via espsecure.py

see docs below:
https://docs.espressif.com/projects/esptool/en/latest/esp32c3/espsecure/index.html#remote-signing-using-an-external-hsm
https://docs.espressif.com/projects/esp-idf/en/latest/esp32c3/security/secure-boot-v2.html#signed-app-verification-without-hardware-secure-boot
https://docs.rs/secp256k1/latest/secp256k1/
2023-11-22 03:05:27 +00:00
irriden
9773e4bec2 factory: no std 2023-10-30 15:35:49 +00:00
Evan Feenstra
a26810c577 double brackets 2023-08-30 13:07:23 -07:00
Evan Feenstra
a758c32d93 flag in deploy script 2023-08-30 13:05:42 -07:00
Evan Feenstra
3d6720f623 fix bin var 2023-08-25 14:26:03 -07:00
Evan Feenstra
ccb6d6e05e better clear bin 2023-08-25 14:25:44 -07:00
Evan Feenstra
a8259973c6 put tls behind feature flag 2023-08-25 08:51:50 -07:00
Evan Feenstra
049e480f9c deploy bin 2023-08-22 12:32:23 -07:00
irriden
fe2b518a77 sphinx-key: implement wifi reset
additional-author: evan feenstra

this is an access mode that expects just the wifi config params,
without the seed
2023-08-02 02:41:59 +00:00
irriden
f35b539d90 factory: update partition table 2023-07-10 20:13:37 +00:00
irriden
7ada3b64ba scripts: update to cargo-espflash v2.0.0 2023-06-30 21:34:18 +00:00
irriden
ff47e6a8f0 create factory, sphinx-key workspace 2023-06-17 23:12:53 +00:00
irriden
11009d0025 nit 2023-06-08 17:45:13 +00:00
irriden
ad7c4f433b build: create release and debug modes for deployment scripts 2023-06-08 17:43:02 +00:00
decentclock
3d66f09597 doc: update instructions for linux 2022-11-05 17:13:02 -06:00
decentclock
0106637090 lots of nits
quit deploy script if one of the command fails - don't carry on
pin factory nightly to 2022-10-20
log error messages from start_config_server_and_wait
throw error if PASS is set to a password less than 8 characters
clearly log access point wifi name and password
2022-10-25 18:05:31 -04:00
decentclock
9bafe5f0eb deploy: add erase command 2022-10-13 12:39:36 -04:00
Evan Feenstra
d41a5cc3f5 release in deploy.sh 2022-10-12 15:16:20 -04:00
decentclock
eb018e197e doc: add SSID and PASS env sets, update deploy.sh accordingly 2022-10-08 00:37:30 -04:00
decentclock
af7238cfb8 build: check for some installed bins before building 2022-09-30 15:52:06 -04:00
decentclock
a282839676 build: automatically set CC and CFLAGS file when building sphinx-key
Also take this opportunity to update the READMEs given the new little deploy.sh script we put together
2022-09-30 13:49:58 -04:00