Skip to content

Additional logging to improve tracking of failed image validation/signature check #438

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 16 commits into
base: main
Choose a base branch
from

Conversation

de-nordic
Copy link
Contributor

@de-nordic de-nordic commented May 20, 2025

The PR now contains commit

2e6051915762465030028c15d45374e398dd01ed
boot: bootutil: swap-offset: Fix image size check during validation

that is not related to logging, but I have placed logs around this and needed to pick it to avoid merge conflicts.

@de-nordic de-nordic requested a review from a team May 30, 2025 18:27
@de-nordic de-nordic force-pushed the additional-logs branch 7 times, most recently from 5c42218 to 2e7c7fe Compare June 11, 2025 15:04
@de-nordic de-nordic force-pushed the additional-logs branch 2 times, most recently from 87f8393 to 5e67e49 Compare June 17, 2025 14:10
de-nordic and others added 12 commits June 25, 2025 11:37
This reverts commit 105551f.

Signed-off-by: Dominik Ermel <[email protected]>
…ssion"

This reverts commit 4538b4d.

Signed-off-by: Dominik Ermel <[email protected]>
…ture key"

This reverts commit 6f91355.

Signed-off-by: Dominik Ermel <[email protected]>
Consolidates USB DFU entry logic by unifying GPIO and timeout-based
DFU triggers under a common flag. This avoids code duplication and
improves maintainability.
Also improves log clarity for different DFU exit conditions.

Signed-off-by: Sayooj K Karun <[email protected]>
(cherry picked from commit 402d3f7ff11973577f1bc966151fccf53192f32b)
Signed-off-by: Dominik Ermel <[email protected]>
Add additional log lines to allow easier tracking potential
failures in image validation.

Upstream PR #: 2308

Signed-off-by: Dominik Ermel <[email protected]>
Improve logging to make it easier to track image validation
failures in development.

Upstream PR #: 2308

Signed-off-by: Dominik Ermel <[email protected]>
(cherry picked from commit 1609c024c6934b89e892324379f7ef88bd4e915e)
Adds support for LZMA-compressed firmware updates which also
supports encrypted images and supports more than 1 updateable image

Signed-off-by: Jamie McCrae <[email protected]>
Signed-off-by: Michal Kozikowski <[email protected]>
Signed-off-by: Dominik Ermel <[email protected]>
(cherry picked from commit 38e8159)
(cherry picked from commit 2f691b7)
(cherry picked from commit d20d66d)
The commit adds verification of image using keys stored in KMU.

Signed-off-by: Dominik Ermel <[email protected]>
(cherry picked from commit 3e3db4b)
(cherry picked from commit 6f91355)
nordicjm and others added 4 commits June 25, 2025 11:53
Adds selecting the experimental Kconfig when compession is in use

Signed-off-by: Jamie McCrae <[email protected]>
Signed-off-by: Dominik Ermel <[email protected]>
(cherry picked from commit 26b638c)
(cherry picked from commit 4538b4d)
Adds a new Kconfig CONFIG_BOOT_SIGNATURE_KMU_SLOTS which allows
specifying how many KMU key IDs are supported, the default is set
to 1 instead of 3 which was set before

NCSDK-30743

Signed-off-by: Jamie McCrae <[email protected]>
Signed-off-by: Dominik Ermel <[email protected]>
(cherry picked from commit 8a366a3)
(cherry picked from commit 36c1fdf)
Disable previous generation key when update comes with
new valid key and application is confirmed.

Signed-off-by: Mateusz Michalek <[email protected]>
Signed-off-by: Dominik Ermel <[email protected]>
(cherry picked from commit 22c2cac)
(cherry picked from commit 105551f)
This commit aligns to the changes in the nrfcompress API,
which now enables the caller to provide the expected size of the
decompressed image.

ref: NCSDK-32340

Signed-off-by: Michal Kozikowski <[email protected]>
Signed-off-by: Dominik Ermel <[email protected]>
(cherry picked from commit e110d76)
(cherry picked from commit c75fc59)
Copy link

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

6 participants