From f7f03e6a30d5e4ca0d1345ce9e2864e4790025e9 Mon Sep 17 00:00:00 2001 From: pennam <m.pennasilico@arduino.cc> Date: Thu, 21 Apr 2022 13:24:09 +0200 Subject: [PATCH 1/5] Fix typo --- docs/guides/secure-boot.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/guides/secure-boot.md b/docs/guides/secure-boot.md index 4ccd56f9d1f..b4192eed40e 100644 --- a/docs/guides/secure-boot.md +++ b/docs/guides/secure-boot.md @@ -63,5 +63,5 @@ For example, by using the following command, the sketch is compiled and the resu with the specified keys located in `/home/user/Arduino/keys` directory: ``` -arduino-cli compile -b arduino:mbed_portenta:envie_m7:security=sien --keys-keychain /home/user/Arduino/keys --sign-key ecsdsa-p256-signing-key.pem --encrypt-key ecsdsa-p256-encrypt-key.pem /home/user/Arduino/MySketch +arduino-cli compile -b arduino:mbed_portenta:envie_m7:security=sien --keys-keychain /home/user/Arduino/keys --sign-key ecdsa-p256-signing-key.pem --encrypt-key ecdsa-p256-encrypt-key.pem /home/user/Arduino/MySketch ``` From 17eb2b4c36783718ad265f197a7882579723b4b4 Mon Sep 17 00:00:00 2001 From: pennam <m.pennasilico@arduino.cc> Date: Thu, 21 Apr 2022 13:26:12 +0200 Subject: [PATCH 2/5] Rename custom keys filename to make more clear that private key is used to sign and public key is used for encryption --- docs/guides/secure-boot.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/guides/secure-boot.md b/docs/guides/secure-boot.md index b4192eed40e..d928b3d6ad4 100644 --- a/docs/guides/secure-boot.md +++ b/docs/guides/secure-boot.md @@ -63,5 +63,5 @@ For example, by using the following command, the sketch is compiled and the resu with the specified keys located in `/home/user/Arduino/keys` directory: ``` -arduino-cli compile -b arduino:mbed_portenta:envie_m7:security=sien --keys-keychain /home/user/Arduino/keys --sign-key ecdsa-p256-signing-key.pem --encrypt-key ecdsa-p256-encrypt-key.pem /home/user/Arduino/MySketch +arduino-cli compile -b arduino:mbed_portenta:envie_m7:security=sien --keys-keychain /home/user/Arduino/keys --sign-key ecdsa-p256-signing-priv-key.pem --encrypt-key ecdsa-p256-encrypt-pub-key.pem /home/user/Arduino/MySketch ``` From f3e1b823d5609aa442f44c04e38e5cd23eb282cf Mon Sep 17 00:00:00 2001 From: pennam <m.pennasilico@arduino.cc> Date: Thu, 21 Apr 2022 13:30:58 +0200 Subject: [PATCH 3/5] Update Security setting postbuild.cmd path --- docs/guides/secure-boot.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/guides/secure-boot.md b/docs/guides/secure-boot.md index d928b3d6ad4..439eec3c348 100644 --- a/docs/guides/secure-boot.md +++ b/docs/guides/secure-boot.md @@ -40,8 +40,8 @@ menu.security=Security setting envie_m7.menu.security.none=None envie_m7.menu.security.sien=Signature + Encryption -envie_m7.menu.security.sien.build.postbuild.cmd="{tools.imgtool.cmd}" {tools.imgtool.flags} -envie_m7.menu.security.none.build.postbuild.cmd="{tools.imgtool.cmd}" exit +envie_m7.menu.security.sien.build.postbuild.cmd="{tools.imgtool.path}/{tools.imgtool.cmd}" {tools.imgtool.flags} +envie_m7.menu.security.none.build.postbuild.cmd="{tools.imgtool.path}/{tools.imgtool.cmd}" exit envie_m7.menu.security.sien.build.keys.keychain={runtime.hardware.path}/Default_Keys envie_m7.menu.security.sien.build.keys.sign_key=default-signing-key.pem From c80a2d764516b81532da59810c3132f80ea97bfd Mon Sep 17 00:00:00 2001 From: pennam <m.pennasilico@arduino.cc> Date: Thu, 21 Apr 2022 13:32:14 +0200 Subject: [PATCH 4/5] Update Security setting keychain path --- docs/guides/secure-boot.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/guides/secure-boot.md b/docs/guides/secure-boot.md index 439eec3c348..e2713b09a36 100644 --- a/docs/guides/secure-boot.md +++ b/docs/guides/secure-boot.md @@ -43,7 +43,7 @@ envie_m7.menu.security.sien=Signature + Encryption envie_m7.menu.security.sien.build.postbuild.cmd="{tools.imgtool.path}/{tools.imgtool.cmd}" {tools.imgtool.flags} envie_m7.menu.security.none.build.postbuild.cmd="{tools.imgtool.path}/{tools.imgtool.cmd}" exit -envie_m7.menu.security.sien.build.keys.keychain={runtime.hardware.path}/Default_Keys +envie_m7.menu.security.sien.build.keys.keychain={runtime.platform.path}/libraries/MCUboot/default_keys envie_m7.menu.security.sien.build.keys.sign_key=default-signing-key.pem envie_m7.menu.security.sien.build.keys.encrypt_key=default-encrypt-key.pem [...] From c1516691e92ab7268b7b0592bbd6f7d4ba4918bd Mon Sep 17 00:00:00 2001 From: pennam <m.pennasilico@arduino.cc> Date: Thu, 21 Apr 2022 13:35:19 +0200 Subject: [PATCH 5/5] Update Security setting default keys filename --- docs/guides/secure-boot.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/guides/secure-boot.md b/docs/guides/secure-boot.md index e2713b09a36..0a34c1902d7 100644 --- a/docs/guides/secure-boot.md +++ b/docs/guides/secure-boot.md @@ -44,8 +44,8 @@ envie_m7.menu.security.sien.build.postbuild.cmd="{tools.imgtool.path}/{tools.img envie_m7.menu.security.none.build.postbuild.cmd="{tools.imgtool.path}/{tools.imgtool.cmd}" exit envie_m7.menu.security.sien.build.keys.keychain={runtime.platform.path}/libraries/MCUboot/default_keys -envie_m7.menu.security.sien.build.keys.sign_key=default-signing-key.pem -envie_m7.menu.security.sien.build.keys.encrypt_key=default-encrypt-key.pem +envie_m7.menu.security.sien.build.keys.sign_key=default-signing-priv-key.pem +envie_m7.menu.security.sien.build.keys.encrypt_key=default-encrypt-pub-key.pem [...] ```