533 lines
23 KiB
Rust
533 lines
23 KiB
Rust
// Build mcuboot as a library, based on the requested features.
|
|
|
|
extern crate cc;
|
|
|
|
use std::collections::BTreeSet;
|
|
use std::env;
|
|
use std::fs;
|
|
use std::io;
|
|
use std::path::{Path, PathBuf};
|
|
|
|
fn main() {
|
|
// Feature flags.
|
|
let psa_crypto_api = env::var("CARGO_FEATURE_PSA_CRYPTO_API").is_ok();
|
|
let sig_rsa = env::var("CARGO_FEATURE_SIG_RSA").is_ok();
|
|
let sig_rsa3072 = env::var("CARGO_FEATURE_SIG_RSA3072").is_ok();
|
|
let sig_ecdsa = env::var("CARGO_FEATURE_SIG_ECDSA").is_ok();
|
|
let sig_ecdsa_mbedtls = env::var("CARGO_FEATURE_SIG_ECDSA_MBEDTLS").is_ok();
|
|
let sig_ecdsa_psa = env::var("CARGO_FEATURE_SIG_ECDSA_PSA").is_ok();
|
|
let sig_p384 = env::var("CARGO_FEATURE_SIG_P384").is_ok();
|
|
let sig_ed25519 = env::var("CARGO_FEATURE_SIG_ED25519").is_ok();
|
|
let overwrite_only = env::var("CARGO_FEATURE_OVERWRITE_ONLY").is_ok();
|
|
let swap_move = env::var("CARGO_FEATURE_SWAP_MOVE").is_ok();
|
|
let validate_primary_slot =
|
|
env::var("CARGO_FEATURE_VALIDATE_PRIMARY_SLOT").is_ok();
|
|
let enc_rsa = env::var("CARGO_FEATURE_ENC_RSA").is_ok();
|
|
let enc_aes256_rsa = env::var("CARGO_FEATURE_ENC_AES256_RSA").is_ok();
|
|
let enc_kw = env::var("CARGO_FEATURE_ENC_KW").is_ok();
|
|
let enc_aes256_kw = env::var("CARGO_FEATURE_ENC_AES256_KW").is_ok();
|
|
let enc_ec256 = env::var("CARGO_FEATURE_ENC_EC256").is_ok();
|
|
let enc_ec256_mbedtls = env::var("CARGO_FEATURE_ENC_EC256_MBEDTLS").is_ok();
|
|
let enc_aes256_ec256 = env::var("CARGO_FEATURE_ENC_AES256_EC256").is_ok();
|
|
let enc_x25519 = env::var("CARGO_FEATURE_ENC_X25519").is_ok();
|
|
let enc_aes256_x25519 = env::var("CARGO_FEATURE_ENC_AES256_X25519").is_ok();
|
|
let bootstrap = env::var("CARGO_FEATURE_BOOTSTRAP").is_ok();
|
|
let multiimage = env::var("CARGO_FEATURE_MULTIIMAGE").is_ok();
|
|
let downgrade_prevention = env::var("CARGO_FEATURE_DOWNGRADE_PREVENTION").is_ok();
|
|
let ram_load = env::var("CARGO_FEATURE_RAM_LOAD").is_ok();
|
|
let direct_xip = env::var("CARGO_FEATURE_DIRECT_XIP").is_ok();
|
|
let max_align_32 = env::var("CARGO_FEATURE_MAX_ALIGN_32").is_ok();
|
|
let hw_rollback_protection = env::var("CARGO_FEATURE_HW_ROLLBACK_PROTECTION").is_ok();
|
|
|
|
let mut conf = CachedBuild::new();
|
|
conf.conf.define("__BOOTSIM__", None);
|
|
conf.conf.define("MCUBOOT_HAVE_LOGGING", None);
|
|
conf.conf.define("MCUBOOT_USE_FLASH_AREA_GET_SECTORS", None);
|
|
conf.conf.define("MCUBOOT_HAVE_ASSERT_H", None);
|
|
conf.conf.define("MCUBOOT_MAX_IMG_SECTORS", Some("128"));
|
|
|
|
if max_align_32 {
|
|
conf.conf.define("MCUBOOT_BOOT_MAX_ALIGN", Some("32"));
|
|
} else {
|
|
conf.conf.define("MCUBOOT_BOOT_MAX_ALIGN", Some("8"));
|
|
}
|
|
|
|
conf.conf.define("MCUBOOT_IMAGE_NUMBER", Some(if multiimage { "2" } else { "1" }));
|
|
|
|
if downgrade_prevention && !overwrite_only {
|
|
panic!("Downgrade prevention requires overwrite only");
|
|
}
|
|
|
|
if bootstrap {
|
|
conf.conf.define("MCUBOOT_BOOTSTRAP", None);
|
|
conf.conf.define("MCUBOOT_OVERWRITE_ONLY_FAST", None);
|
|
}
|
|
|
|
if validate_primary_slot {
|
|
conf.conf.define("MCUBOOT_VALIDATE_PRIMARY_SLOT", None);
|
|
}
|
|
|
|
if downgrade_prevention {
|
|
conf.conf.define("MCUBOOT_DOWNGRADE_PREVENTION", None);
|
|
}
|
|
|
|
if ram_load {
|
|
conf.conf.define("MCUBOOT_RAM_LOAD", None);
|
|
}
|
|
|
|
if direct_xip {
|
|
conf.conf.define("MCUBOOT_DIRECT_XIP", None);
|
|
}
|
|
|
|
if hw_rollback_protection {
|
|
conf.conf.define("MCUBOOT_HW_ROLLBACK_PROT", None);
|
|
conf.file("csupport/security_cnt.c");
|
|
}
|
|
|
|
// Currently no more than one sig type can be used simultaneously.
|
|
if vec![sig_rsa, sig_rsa3072, sig_ecdsa, sig_ed25519].iter()
|
|
.fold(0, |sum, &v| sum + v as i32) > 1 {
|
|
panic!("mcuboot does not support more than one sig type at the same time");
|
|
}
|
|
|
|
if psa_crypto_api {
|
|
if sig_ecdsa || enc_ec256 || enc_x25519 ||
|
|
enc_aes256_ec256 || sig_ecdsa_mbedtls || enc_aes256_x25519 ||
|
|
enc_kw || enc_aes256_kw {
|
|
conf.file("csupport/psa_crypto_init_stub.c");
|
|
} else {
|
|
conf.conf.define("MCUBOOT_USE_PSA_CRYPTO", None);
|
|
conf.file("../../ext/mbedtls/library/aes.c");
|
|
conf.file("../../ext/mbedtls/library/aesni.c");
|
|
conf.file("../../ext/mbedtls/library/aria.c");
|
|
conf.file("../../ext/mbedtls/library/asn1write.c");
|
|
conf.file("../../ext/mbedtls/library/base64.c");
|
|
conf.file("../../ext/mbedtls/library/camellia.c");
|
|
conf.file("../../ext/mbedtls/library/ccm.c");
|
|
conf.file("../../ext/mbedtls/library/chacha20.c");
|
|
conf.file("../../ext/mbedtls/library/chachapoly.c");
|
|
conf.file("../../ext/mbedtls/library/cipher.c");
|
|
conf.file("../../ext/mbedtls/library/cipher_wrap.c");
|
|
conf.file("../../ext/mbedtls/library/ctr_drbg.c");
|
|
conf.file("../../ext/mbedtls/library/des.c");
|
|
conf.file("../../ext/mbedtls/library/ecdsa.c");
|
|
conf.file("../../ext/mbedtls/library/ecp.c");
|
|
conf.file("../../ext/mbedtls/library/ecp_curves.c");
|
|
conf.file("../../ext/mbedtls/library/entropy.c");
|
|
conf.file("../../ext/mbedtls/library/entropy_poll.c");
|
|
conf.file("../../ext/mbedtls/library/gcm.c");
|
|
conf.file("../../ext/mbedtls/library/md5.c");
|
|
conf.file("../../ext/mbedtls/library/nist_kw.c");
|
|
conf.file("../../ext/mbedtls/library/oid.c");
|
|
conf.file("../../ext/mbedtls/library/pem.c");
|
|
conf.file("../../ext/mbedtls/library/pk.c");
|
|
conf.file("../../ext/mbedtls/library/pkcs5.c");
|
|
conf.file("../../ext/mbedtls/library/pkcs12.c");
|
|
conf.file("../../ext/mbedtls/library/pkparse.c");
|
|
conf.file("../../ext/mbedtls/library/pk_wrap.c");
|
|
conf.file("../../ext/mbedtls/library/pkwrite.c");
|
|
conf.file("../../ext/mbedtls/library/poly1305.c");
|
|
conf.file("../../ext/mbedtls/library/psa_crypto.c");
|
|
conf.file("../../ext/mbedtls/library/psa_crypto_cipher.c");
|
|
conf.file("../../ext/mbedtls/library/psa_crypto_client.c");
|
|
conf.file("../../ext/mbedtls/library/psa_crypto_driver_wrappers.c");
|
|
conf.file("../../ext/mbedtls/library/psa_crypto_ecp.c");
|
|
conf.file("../../ext/mbedtls/library/psa_crypto_hash.c");
|
|
conf.file("../../ext/mbedtls/library/psa_crypto_mac.c");
|
|
conf.file("../../ext/mbedtls/library/psa_crypto_rsa.c");
|
|
conf.file("../../ext/mbedtls/library/psa_crypto_slot_management.c");
|
|
conf.file("../../ext/mbedtls/library/psa_crypto_storage.c");
|
|
conf.file("../../ext/mbedtls/library/psa_its_file.c");
|
|
conf.file("../../ext/mbedtls/library/ripemd160.c");
|
|
conf.file("../../ext/mbedtls/library/rsa_alt_helpers.c");
|
|
conf.file("../../ext/mbedtls/library/sha1.c");
|
|
conf.file("../../ext/mbedtls/library/sha512.c");
|
|
conf.file("../../ext/mbedtls/tests/src/random.c");
|
|
conf.conf.include("../../ext/mbedtls/library");
|
|
}
|
|
|
|
conf.conf.include("../../ext/mbedtls/tests/include/");
|
|
conf.file("../../ext/mbedtls/tests/src/fake_external_rng_for_test.c");
|
|
}
|
|
|
|
if sig_rsa || sig_rsa3072 {
|
|
conf.conf.define("MCUBOOT_SIGN_RSA", None);
|
|
// The Kconfig style defines must be added here as well because
|
|
// they are used internally by "config-rsa.h"
|
|
if sig_rsa {
|
|
conf.conf.define("MCUBOOT_SIGN_RSA_LEN", "2048");
|
|
conf.conf.define("CONFIG_BOOT_SIGNATURE_TYPE_RSA_LEN", "2048");
|
|
} else {
|
|
conf.conf.define("MCUBOOT_SIGN_RSA_LEN", "3072");
|
|
conf.conf.define("CONFIG_BOOT_SIGNATURE_TYPE_RSA_LEN", "3072");
|
|
}
|
|
conf.conf.define("MCUBOOT_USE_MBED_TLS", None);
|
|
|
|
conf.conf.include("../../ext/mbedtls/include");
|
|
conf.file("../../ext/mbedtls/library/sha256.c");
|
|
conf.file("csupport/keys.c");
|
|
|
|
conf.file("../../ext/mbedtls/library/rsa.c");
|
|
conf.file("../../ext/mbedtls/library/bignum.c");
|
|
conf.file("../../ext/mbedtls/library/platform.c");
|
|
conf.file("../../ext/mbedtls/library/platform_util.c");
|
|
conf.file("../../ext/mbedtls/library/asn1parse.c");
|
|
conf.file("../../ext/mbedtls/library/md.c");
|
|
|
|
} else if sig_ecdsa {
|
|
conf.conf.define("MCUBOOT_SIGN_EC256", None);
|
|
conf.conf.define("MCUBOOT_USE_TINYCRYPT", None);
|
|
|
|
if !enc_kw {
|
|
conf.conf.include("../../ext/mbedtls/include");
|
|
}
|
|
conf.conf.include("../../ext/tinycrypt/lib/include");
|
|
|
|
conf.file("csupport/keys.c");
|
|
|
|
conf.file("../../ext/tinycrypt/lib/source/utils.c");
|
|
conf.file("../../ext/tinycrypt/lib/source/sha256.c");
|
|
conf.file("../../ext/tinycrypt/lib/source/ecc.c");
|
|
conf.file("../../ext/tinycrypt/lib/source/ecc_dsa.c");
|
|
conf.file("../../ext/tinycrypt/lib/source/ecc_platform_specific.c");
|
|
conf.file("../../ext/mbedtls/library/platform_util.c");
|
|
conf.file("../../ext/mbedtls/library/asn1parse.c");
|
|
} else if sig_ecdsa_mbedtls {
|
|
conf.conf.define("MCUBOOT_SIGN_EC256", None);
|
|
conf.conf.define("MCUBOOT_USE_MBED_TLS", None);
|
|
|
|
conf.conf.include("../../ext/mbedtls/include");
|
|
conf.file("../../ext/mbedtls/library/sha256.c");
|
|
conf.file("csupport/keys.c");
|
|
|
|
conf.file("../../ext/mbedtls/library/asn1parse.c");
|
|
conf.file("../../ext/mbedtls/library/bignum.c");
|
|
conf.file("../../ext/mbedtls/library/ecdsa.c");
|
|
conf.file("../../ext/mbedtls/library/ecp.c");
|
|
conf.file("../../ext/mbedtls/library/ecp_curves.c");
|
|
conf.file("../../ext/mbedtls/library/platform.c");
|
|
conf.file("../../ext/mbedtls/library/platform_util.c");
|
|
} else if sig_ecdsa_psa {
|
|
conf.conf.include("../../ext/mbedtls/include");
|
|
|
|
if sig_p384 {
|
|
conf.conf.define("MCUBOOT_SIGN_EC384", None);
|
|
conf.file("../../ext/mbedtls/library/sha512.c");
|
|
} else {
|
|
conf.conf.define("MCUBOOT_SIGN_EC256", None);
|
|
conf.file("../../ext/mbedtls/library/sha256.c");
|
|
}
|
|
|
|
conf.file("csupport/keys.c");
|
|
conf.file("../../ext/mbedtls/library/asn1parse.c");
|
|
conf.file("../../ext/mbedtls/library/bignum.c");
|
|
conf.file("../../ext/mbedtls/library/ecp.c");
|
|
conf.file("../../ext/mbedtls/library/ecp_curves.c");
|
|
conf.file("../../ext/mbedtls/library/platform.c");
|
|
conf.file("../../ext/mbedtls/library/platform_util.c");
|
|
} else if sig_ed25519 {
|
|
conf.conf.define("MCUBOOT_SIGN_ED25519", None);
|
|
conf.conf.define("MCUBOOT_USE_TINYCRYPT", None);
|
|
|
|
conf.conf.include("../../ext/tinycrypt/lib/include");
|
|
conf.conf.include("../../ext/tinycrypt-sha512/lib/include");
|
|
conf.conf.include("../../ext/mbedtls/include");
|
|
conf.file("../../ext/tinycrypt/lib/source/sha256.c");
|
|
conf.file("../../ext/tinycrypt-sha512/lib/source/sha512.c");
|
|
conf.file("../../ext/tinycrypt/lib/source/utils.c");
|
|
conf.file("csupport/keys.c");
|
|
conf.file("../../ext/fiat/src/curve25519.c");
|
|
conf.file("../../ext/mbedtls/library/platform_util.c");
|
|
conf.file("../../ext/mbedtls/library/asn1parse.c");
|
|
} else if !enc_ec256 && !enc_x25519 {
|
|
// No signature type, only sha256 validation. The default
|
|
// configuration file bundled with mbedTLS is sufficient.
|
|
// When using ECIES-P256 rely on Tinycrypt.
|
|
conf.conf.define("MCUBOOT_USE_MBED_TLS", None);
|
|
conf.conf.include("../../ext/mbedtls/include");
|
|
conf.file("../../ext/mbedtls/library/sha256.c");
|
|
conf.file("../../ext/mbedtls/library/platform_util.c");
|
|
}
|
|
|
|
if overwrite_only {
|
|
conf.conf.define("MCUBOOT_OVERWRITE_ONLY", None);
|
|
}
|
|
|
|
if swap_move {
|
|
conf.conf.define("MCUBOOT_SWAP_USING_MOVE", None);
|
|
} else if !overwrite_only {
|
|
conf.conf.define("CONFIG_BOOT_SWAP_USING_SCRATCH", None);
|
|
conf.conf.define("MCUBOOT_SWAP_USING_SCRATCH", None);
|
|
}
|
|
|
|
if enc_rsa || enc_aes256_rsa {
|
|
if enc_aes256_rsa {
|
|
conf.conf.define("MCUBOOT_AES_256", None);
|
|
}
|
|
conf.conf.define("MCUBOOT_ENCRYPT_RSA", None);
|
|
conf.conf.define("MCUBOOT_ENC_IMAGES", None);
|
|
conf.conf.define("MCUBOOT_USE_MBED_TLS", None);
|
|
|
|
conf.file("../../boot/bootutil/src/encrypted.c");
|
|
conf.file("csupport/keys.c");
|
|
|
|
conf.conf.include("../../ext/mbedtls/include");
|
|
conf.conf.include("../../ext/mbedtls/library");
|
|
conf.file("../../ext/mbedtls/library/sha256.c");
|
|
|
|
conf.file("../../ext/mbedtls/library/platform.c");
|
|
conf.file("../../ext/mbedtls/library/platform_util.c");
|
|
conf.file("../../ext/mbedtls/library/rsa.c");
|
|
conf.file("../../ext/mbedtls/library/rsa_alt_helpers.c");
|
|
conf.file("../../ext/mbedtls/library/md.c");
|
|
conf.file("../../ext/mbedtls/library/aes.c");
|
|
conf.file("../../ext/mbedtls/library/bignum.c");
|
|
conf.file("../../ext/mbedtls/library/asn1parse.c");
|
|
}
|
|
|
|
if enc_kw || enc_aes256_kw {
|
|
if enc_aes256_kw {
|
|
conf.conf.define("MCUBOOT_AES_256", None);
|
|
}
|
|
conf.conf.define("MCUBOOT_ENCRYPT_KW", None);
|
|
conf.conf.define("MCUBOOT_ENC_IMAGES", None);
|
|
|
|
conf.file("../../boot/bootutil/src/encrypted.c");
|
|
conf.file("csupport/keys.c");
|
|
|
|
if sig_rsa || sig_rsa3072 {
|
|
conf.file("../../ext/mbedtls/library/sha256.c");
|
|
}
|
|
|
|
/* Simulator uses Mbed-TLS to wrap keys */
|
|
conf.conf.include("../../ext/mbedtls/include");
|
|
conf.file("../../ext/mbedtls/library/platform.c");
|
|
conf.conf.include("../../ext/mbedtls/library");
|
|
conf.file("../../ext/mbedtls/library/platform_util.c");
|
|
conf.file("../../ext/mbedtls/library/nist_kw.c");
|
|
conf.file("../../ext/mbedtls/library/cipher.c");
|
|
conf.file("../../ext/mbedtls/library/cipher_wrap.c");
|
|
conf.file("../../ext/mbedtls/library/aes.c");
|
|
|
|
if sig_ecdsa {
|
|
conf.conf.define("MCUBOOT_USE_TINYCRYPT", None);
|
|
|
|
conf.conf.include("../../ext/tinycrypt/lib/include");
|
|
|
|
conf.file("../../ext/tinycrypt/lib/source/utils.c");
|
|
conf.file("../../ext/tinycrypt/lib/source/sha256.c");
|
|
conf.file("../../ext/tinycrypt/lib/source/aes_encrypt.c");
|
|
conf.file("../../ext/tinycrypt/lib/source/aes_decrypt.c");
|
|
conf.file("../../ext/tinycrypt/lib/source/ctr_mode.c");
|
|
}
|
|
|
|
if sig_ed25519 {
|
|
panic!("ed25519 does not support image encryption with KW yet");
|
|
}
|
|
}
|
|
|
|
if enc_ec256 {
|
|
conf.conf.define("MCUBOOT_ENCRYPT_EC256", None);
|
|
conf.conf.define("MCUBOOT_ENC_IMAGES", None);
|
|
conf.conf.define("MCUBOOT_USE_TINYCRYPT", None);
|
|
conf.conf.define("MCUBOOT_SWAP_SAVE_ENCTLV", None);
|
|
|
|
conf.file("../../boot/bootutil/src/encrypted.c");
|
|
conf.file("csupport/keys.c");
|
|
|
|
conf.conf.include("../../ext/mbedtls/include");
|
|
conf.conf.include("../../ext/tinycrypt/lib/include");
|
|
|
|
/* FIXME: fail with other signature schemes ? */
|
|
|
|
conf.file("../../ext/tinycrypt/lib/source/utils.c");
|
|
conf.file("../../ext/tinycrypt/lib/source/sha256.c");
|
|
conf.file("../../ext/tinycrypt/lib/source/ecc.c");
|
|
conf.file("../../ext/tinycrypt/lib/source/ecc_dsa.c");
|
|
conf.file("../../ext/tinycrypt/lib/source/ecc_platform_specific.c");
|
|
|
|
conf.file("../../ext/mbedtls/library/platform_util.c");
|
|
conf.file("../../ext/mbedtls/library/asn1parse.c");
|
|
|
|
conf.file("../../ext/tinycrypt/lib/source/aes_encrypt.c");
|
|
conf.file("../../ext/tinycrypt/lib/source/aes_decrypt.c");
|
|
conf.file("../../ext/tinycrypt/lib/source/ctr_mode.c");
|
|
conf.file("../../ext/tinycrypt/lib/source/hmac.c");
|
|
conf.file("../../ext/tinycrypt/lib/source/ecc_dh.c");
|
|
} else if enc_ec256_mbedtls || enc_aes256_ec256 {
|
|
if enc_aes256_ec256 {
|
|
conf.conf.define("MCUBOOT_AES_256", None);
|
|
}
|
|
conf.conf.define("MCUBOOT_ENCRYPT_EC256", None);
|
|
conf.conf.define("MCUBOOT_ENC_IMAGES", None);
|
|
conf.conf.define("MCUBOOT_USE_MBED_TLS", None);
|
|
conf.conf.define("MCUBOOT_SWAP_SAVE_ENCTLV", None);
|
|
|
|
conf.conf.include("../../ext/mbedtls/include");
|
|
|
|
conf.file("../../boot/bootutil/src/encrypted.c");
|
|
conf.file("../../ext/mbedtls/library/sha256.c");
|
|
conf.file("../../ext/mbedtls/library/asn1parse.c");
|
|
conf.file("../../ext/mbedtls/library/bignum.c");
|
|
conf.file("../../ext/mbedtls/library/ecdh.c");
|
|
conf.file("../../ext/mbedtls/library/md.c");
|
|
conf.file("../../ext/mbedtls/library/aes.c");
|
|
conf.file("../../ext/mbedtls/library/ecp.c");
|
|
conf.file("../../ext/mbedtls/library/ecp_curves.c");
|
|
conf.file("../../ext/mbedtls/library/platform.c");
|
|
conf.file("../../ext/mbedtls/library/platform_util.c");
|
|
conf.file("csupport/keys.c");
|
|
}
|
|
|
|
if enc_x25519 {
|
|
conf.conf.define("MCUBOOT_ENCRYPT_X25519", None);
|
|
conf.conf.define("MCUBOOT_ENC_IMAGES", None);
|
|
conf.conf.define("MCUBOOT_USE_TINYCRYPT", None);
|
|
conf.conf.define("MCUBOOT_SWAP_SAVE_ENCTLV", None);
|
|
|
|
conf.file("../../boot/bootutil/src/encrypted.c");
|
|
conf.file("csupport/keys.c");
|
|
|
|
conf.conf.include("../../ext/mbedtls/include");
|
|
conf.conf.include("../../ext/tinycrypt/lib/include");
|
|
conf.conf.include("../../ext/tinycrypt-sha512/lib/include");
|
|
|
|
conf.file("../../ext/fiat/src/curve25519.c");
|
|
|
|
conf.file("../../ext/tinycrypt/lib/source/utils.c");
|
|
conf.file("../../ext/tinycrypt/lib/source/sha256.c");
|
|
|
|
conf.file("../../ext/mbedtls/library/platform_util.c");
|
|
conf.file("../../ext/mbedtls/library/asn1parse.c");
|
|
|
|
conf.file("../../ext/tinycrypt/lib/source/aes_encrypt.c");
|
|
conf.file("../../ext/tinycrypt/lib/source/aes_decrypt.c");
|
|
conf.file("../../ext/tinycrypt/lib/source/ctr_mode.c");
|
|
conf.file("../../ext/tinycrypt/lib/source/hmac.c");
|
|
}
|
|
|
|
else if enc_aes256_x25519 {
|
|
conf.conf.define("MCUBOOT_AES_256", None);
|
|
conf.conf.define("MCUBOOT_ENCRYPT_X25519", None);
|
|
conf.conf.define("MCUBOOT_ENC_IMAGES", None);
|
|
conf.conf.define("MCUBOOT_USE_MBED_TLS", None);
|
|
conf.conf.define("MCUBOOT_SWAP_SAVE_ENCTLV", None);
|
|
|
|
conf.file("../../boot/bootutil/src/encrypted.c");
|
|
conf.file("csupport/keys.c");
|
|
|
|
conf.conf.include("../../ext/mbedtls/include");
|
|
conf.file("../../ext/fiat/src/curve25519.c");
|
|
conf.file("../../ext/mbedtls/library/asn1parse.c");
|
|
conf.file("../../ext/mbedtls/library/platform.c");
|
|
conf.file("../../ext/mbedtls/library/platform_util.c");
|
|
conf.file("../../ext/mbedtls/library/aes.c");
|
|
conf.file("../../ext/mbedtls/library/sha256.c");
|
|
conf.file("../../ext/mbedtls/library/md.c");
|
|
conf.file("../../ext/mbedtls/library/sha512.c");
|
|
}
|
|
|
|
if sig_rsa && enc_kw {
|
|
conf.conf.define("MBEDTLS_CONFIG_FILE", Some("<config-rsa-kw.h>"));
|
|
} else if sig_rsa || sig_rsa3072 || enc_rsa || enc_aes256_rsa {
|
|
conf.conf.define("MBEDTLS_CONFIG_FILE", Some("<config-rsa.h>"));
|
|
} else if sig_ecdsa_mbedtls || enc_ec256_mbedtls || enc_aes256_ec256 {
|
|
conf.conf.define("MBEDTLS_CONFIG_FILE", Some("<config-ec.h>"));
|
|
} else if (sig_ecdsa || enc_ec256) && !enc_kw {
|
|
conf.conf.define("MBEDTLS_CONFIG_FILE", Some("<config-asn1.h>"));
|
|
} else if sig_ed25519 || enc_x25519 {
|
|
conf.conf.define("MBEDTLS_CONFIG_FILE", Some("<config-asn1.h>"));
|
|
} else if enc_kw || enc_aes256_kw {
|
|
conf.conf.define("MBEDTLS_CONFIG_FILE", Some("<config-kw.h>"));
|
|
} else if enc_aes256_x25519 {
|
|
conf.conf.define("MBEDTLS_CONFIG_FILE", Some("<config-ed25519.h>"));
|
|
} else if sig_ecdsa_psa {
|
|
conf.conf.define("MBEDTLS_CONFIG_FILE", Some("<config-ec-psa.h>"));
|
|
}
|
|
|
|
conf.file("../../boot/bootutil/src/image_validate.c");
|
|
if sig_rsa || sig_rsa3072 {
|
|
conf.file("../../boot/bootutil/src/image_rsa.c");
|
|
} else if sig_ecdsa || sig_ecdsa_mbedtls || sig_ecdsa_psa {
|
|
conf.file("../../boot/bootutil/src/image_ecdsa.c");
|
|
} else if sig_ed25519 {
|
|
conf.file("../../boot/bootutil/src/image_ed25519.c");
|
|
}
|
|
|
|
conf.file("../../boot/bootutil/src/loader.c");
|
|
conf.file("../../boot/bootutil/src/swap_misc.c");
|
|
conf.file("../../boot/bootutil/src/swap_scratch.c");
|
|
conf.file("../../boot/bootutil/src/swap_move.c");
|
|
conf.file("../../boot/bootutil/src/caps.c");
|
|
conf.file("../../boot/bootutil/src/bootutil_misc.c");
|
|
conf.file("../../boot/bootutil/src/bootutil_public.c");
|
|
conf.file("../../boot/bootutil/src/tlv.c");
|
|
conf.file("../../boot/bootutil/src/fault_injection_hardening.c");
|
|
conf.file("csupport/run.c");
|
|
conf.conf.include("../../boot/bootutil/include");
|
|
conf.conf.include("csupport");
|
|
conf.conf.debug(true);
|
|
conf.conf.flag("-Wall");
|
|
conf.conf.flag("-Werror");
|
|
|
|
// FIXME: travis-ci still uses gcc 4.8.4 which defaults to std=gnu90.
|
|
// It has incomplete std=c11 and std=c99 support but std=c99 was checked
|
|
// to build correctly so leaving it here to updated in the future...
|
|
conf.conf.flag("-std=c99");
|
|
|
|
conf.conf.compile("libbootutil.a");
|
|
|
|
walk_dir("../../boot").unwrap();
|
|
walk_dir("../../ext/tinycrypt/lib/source").unwrap();
|
|
walk_dir("../../ext/mbedtls-asn1").unwrap();
|
|
walk_dir("csupport").unwrap();
|
|
walk_dir("../../ext/mbedtls/include").unwrap();
|
|
walk_dir("../../ext/mbedtls/library").unwrap();
|
|
}
|
|
|
|
// Output the names of all files within a directory so that Cargo knows when to rebuild.
|
|
fn walk_dir<P: AsRef<Path>>(path: P) -> io::Result<()> {
|
|
for ent in fs::read_dir(path.as_ref())? {
|
|
let ent = ent?;
|
|
let p = ent.path();
|
|
if p.is_dir() {
|
|
walk_dir(p)?;
|
|
} else {
|
|
// Note that non-utf8 names will fail.
|
|
let name = p.to_str().unwrap();
|
|
if name.ends_with(".c") || name.ends_with(".h") {
|
|
println!("cargo:rerun-if-changed={}", name);
|
|
}
|
|
}
|
|
}
|
|
|
|
Ok(())
|
|
}
|
|
|
|
/// Wrap the cc::Build type so that we can make sure that files are only added a single time.
|
|
/// Other methods can be passed through as needed.
|
|
struct CachedBuild {
|
|
conf: cc::Build,
|
|
seen: BTreeSet<PathBuf>,
|
|
}
|
|
|
|
impl CachedBuild {
|
|
fn new() -> CachedBuild {
|
|
CachedBuild {
|
|
conf: cc::Build::new(),
|
|
seen: BTreeSet::new(),
|
|
}
|
|
}
|
|
|
|
/// Works like `file` in the Build, but doesn't add a file if the same path has already been
|
|
/// given.
|
|
fn file<P: AsRef<Path>>(&mut self, p: P) -> &mut CachedBuild {
|
|
let p = p.as_ref();
|
|
if !self.seen.contains(p) {
|
|
self.conf.file(p);
|
|
self.seen.insert(p.to_owned());
|
|
}
|
|
self
|
|
}
|
|
}
|