2021-12-10 04:05:10 +08:00
|
|
|
# SPDX-FileCopyrightText: 2021 Espressif Systems (Shanghai) CO LTD
|
|
|
|
|
#
|
|
|
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
|
|
|
|
2021-11-25 11:45:26 +08:00
|
|
|
# ATTENTION:
|
|
|
|
|
# This configuration file targets the building for CI environment and contains
|
|
|
|
|
# a set of definitions to resemble a bootloader image for RELEASE environment.
|
|
|
|
|
# Running the generated firmware image may result in irreversible operations
|
|
|
|
|
# to the chip!
|
|
|
|
|
|
2021-12-10 04:05:10 +08:00
|
|
|
CONFIG_SECURE_SIGNED_ON_BOOT=1
|
|
|
|
|
CONFIG_SECURE_SIGNED_APPS_RSA_SCHEME=1
|
|
|
|
|
CONFIG_SECURE_BOOT=1
|
|
|
|
|
CONFIG_SECURE_BOOT_V2_ENABLED=1
|
|
|
|
|
CONFIG_SECURE_BOOT_SUPPORTS_RSA=1
|
2021-11-25 11:45:26 +08:00
|
|
|
CONFIG_SECURE_FLASH_ENC_ENABLED=1
|
|
|
|
|
CONFIG_SECURE_FLASH_ENCRYPTION_MODE_RELEASE=1
|
2021-12-10 04:05:10 +08:00
|
|
|
CONFIG_ESP_SIGN_KEY_FILE=root-rsa-3072.pem
|
|
|
|
|
CONFIG_ESP_USE_MBEDTLS=1
|
|
|
|
|
CONFIG_ESP_SIGN_RSA=1
|
|
|
|
|
CONFIG_ESP_SIGN_RSA_LEN=3072
|
2023-01-28 03:24:00 +08:00
|
|
|
CONFIG_ESP_DOWNGRADE_PREVENTION=1
|
|
|
|
|
CONFIG_ESP_DOWNGRADE_PREVENTION_SECURITY_COUNTER=1
|
