Commit Graph

610 Commits

Author SHA1 Message Date
irriden
01fe20c2e0 broker: use bitcoin and secp256k1 from vls re-exports 2023-11-25 19:34:56 +00:00
irriden
af7e5eca08 broker: switch rumqttd branch to asdf 2023-11-25 19:21:33 +00:00
irriden
1bce903224 bump sphinx-rs 2023-11-25 03:29:42 +00:00
irriden
00bf29288f sphinx-key: read config wifi creds from sdcard 2023-11-25 03:23:56 +00:00
irriden
7ae668b981 bump sphinx-rs 2023-11-24 20:19:18 +00:00
irriden
2df5d4dc82 pull security patches in dependencies 2023-11-24 19:08:15 +00:00
irriden
34c579f1e2 sphinx-key: ota binary checks in standalone module 2023-11-24 18:12:11 +00:00
irriden
51dcf9361a build: add standalone script to clear sd card 2023-11-23 18:35:06 +00:00
irriden
b4491c48ab sphinx-key: split button led sd into separate mods
fixes tons of warnings when building the clear binary
2023-11-23 17:40:47 +00:00
irriden
460f3dbe97 sphinx-key: remove tls feature
not needed any longer, mqtts no longer a memory problem
to specify mqtt vs mqtts, add the mqtt[s]:// to the broker url
2023-11-23 02:35:45 +00:00
irriden
66ba02e88a build: add espflash dependency check 2023-11-23 02:28:57 +00:00
irriden
ef70fe8c59 sphinx-key: use bitcoin::sign_message for ota sig checks 2023-11-22 21:36:15 +00:00
irriden
66e4a11759 sphinx-key: secure boot
adds two layers of signature checks
one done by sphinx-key in ota.rs via secp256k1
another done by esp-idf via espsecure.py

see docs below:
https://docs.espressif.com/projects/esptool/en/latest/esp32c3/espsecure/index.html#remote-signing-using-an-external-hsm
https://docs.espressif.com/projects/esp-idf/en/latest/esp32c3/security/secure-boot-v2.html#signed-app-verification-without-hardware-secure-boot
https://docs.rs/secp256k1/latest/secp256k1/
2023-11-22 03:05:27 +00:00
irriden
e6c11866bb tester: update example command files 2023-11-18 02:10:05 +00:00
irriden
7102138217 sphinx-key: check integrity of ota bin file 2023-11-18 02:06:01 +00:00
irriden
ac1a61f03b broker: pull rumqttd https fix 2023-11-15 23:31:20 +00:00
irriden
90d43c4e70 cargo clippy 2023-11-15 23:11:41 +00:00
irriden
5bef7ab78e sphinx-key: add tls to default features 2023-11-14 23:40:20 +00:00
irriden
dfe06d6dab sphinx-key: configs for a 60KB reduction in bin size
all related to ssl, see below:
https://docs.espressif.com/projects/esp-idf/en/latest/esp32c3/api-guides/performance/size.html#minimizing-binary-mbedtls
2023-11-14 23:37:24 +00:00
irriden
ed3c44e94d sphinx-key: mqtts
see here for an explanation of settings - crucial for manageable memory footprint
https://docs.espressif.com/projects/esp-idf/en/latest/esp32c3/api-reference/protocols/mbedtls.html#reducing-heap-usage
2023-11-14 19:31:44 +00:00
irriden
b7d20d31ca sphinx-key: https ota 2023-11-07 20:44:06 +00:00
irriden
4b85a85f0e broker: increase mqtt timeout from 4s to 10s 2023-10-31 23:46:37 +00:00
irriden
616acc868e sphinx-key: fetch ota update in the main thread
we previously spawned a separate led thread, which caused two problems
1) starved the main thread, preventing any progress on signing
a solution here could have been to sleep the ota fetch thread every so often
2) also increased memory usage
a solution here is much smaller buffer for ota thread

both of these solutions significantly hindered the speed of the ota update

i like much better keeping the ota fetch blocking in the main thread,
and giving it the appropriate resources to perform the ota fetch fast

this commit also only sends a new status into the led_tx-led_rx channel when
necessary - we previously sent new statuses into the channel even if the led
was already at that state
2023-10-30 23:04:09 +00:00
irriden
dde34efbdc sphinx-key: add the loop back in 2023-10-30 15:38:13 +00:00
irriden
3535ec5d62 tester: add env-example 2023-10-30 15:38:02 +00:00
irriden
d8e9a1e0cc sphinx-key: update esp-idf from 5.0.2 to 5.0.4 2023-10-30 15:37:49 +00:00
irriden
fd434c3546 sphinx-key: remove embedded-hal, embedded-svc dependencies
embedded-svc is only necessary if you want to develop an app for multiple chips
this is not our case
2023-10-30 15:36:52 +00:00
irriden
705caea73e sphinx-key: bump esp-rs deps 2023-10-30 15:36:20 +00:00
irriden
73d2c76be1 update txoo to 812000 checkpoint 2023-10-30 15:35:49 +00:00
irriden
9773e4bec2 factory: no std 2023-10-30 15:35:49 +00:00
irriden
0c0b59789b sphinx-key: do a full restart in case of a wifi connection failure 2023-10-23 21:12:41 +00:00
irriden
52ea111ea6 sphinx-key: tune configs to solve OOM on mainnet addblock msgs
also pulls vls memory optimizations on these addblock msgs
2023-10-19 23:12:18 +00:00
irriden
66045569ac sphinx-key: stop storing previous lss msg on sd card 2023-10-18 15:18:38 +00:00
irriden
dce2daa3d0 tester: notes on successful ota update 2023-10-16 22:44:33 +00:00
irriden
b6c8b5a7f1 tester: read command from cmd.json file 2023-10-16 22:13:10 +00:00
irriden
fdb207bf6e tester: update ctrl post message route 2023-10-16 21:47:28 +00:00
irriden
7caaf5ae36 more concise logging 2023-10-13 17:44:02 +00:00
irriden
c77e20e2b7 sphinx-key: no need to log full msg 2023-10-13 16:44:03 +00:00
irriden
9ab7fa1b73 broker: launch the frontend
bumps sphinx-rs to include tracker_size_workaround feature from vls
otherwise the frontend eats up too much memory on esp32
uses the blocking handle::handle_message fn for impl SignerPort via
tokio::task::spawn_blocking
removes hard coded heartbeats, as these are now sent by the frontend
2023-10-12 18:57:28 +00:00
irriden
0f0e5b5f9e factory: use same sdkconfig.defaults settings as sphinx-key
very important for the long filenames settings
closes #133
2023-10-05 09:25:25 +00:00
irriden
9d8031d962 bump sphinx-rs: nits 2023-10-03 14:47:36 +00:00
irriden
2761acb464 bump sphinx-rs: don't store invoices issued for keysend receives 2023-10-03 10:19:35 +00:00
Evan Feenstra
80a23cb5f0 conns refactor 2023-09-23 00:28:28 +00:00
Evan Feenstra
3c070cfca8 Merge pull request #128 from stakwork/vls-multi-signer
Vls multi signer
2023-09-19 11:28:03 -07:00
Evan Feenstra
21915faf5a bump sphinx-rs 2023-09-19 11:27:35 -07:00
Evan Feenstra
0d25d0c371 only hold server HMAC, drop lss_bytes 2023-09-19 09:47:04 -07:00
Evan Feenstra
bf4113d990 bump vls, writer-based multisigner, new id format, conflict topics and restarts 2023-09-18 14:26:17 -07:00
Evan Feenstra
ad2f63d898 bump 2023-09-15 17:11:16 -07:00
Evan Feenstra
258ecbe3f8 put conflict topics 2023-09-15 14:27:49 -07:00
Evan Feenstra
c7f44bb856 multisigner broker 2023-09-15 12:05:47 -07:00