arduino/esp8266
1
0
Fork 0
mirror of https://github.com/esp8266/Arduino.git synced 2025-07-27 18:02:17 +03:00
Code Activity

Updater signature validation - format incompatible w/RFC8017 (#6250)

Browse Source 
* Add hash OID to signature verification (#6201)

* Add legacy signing option

* Describe and use the legacy option of signing.py
This commit is contained in:
Chris van Marle
2019-07-04 12:17:30 +02:00
committed by david gauchard
parent 7036297920
commit 6272b49406
6 changed files with 60 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
doc/ota_updates/readme.rst
View File

@ -125,6 +125,18 @@ Compile the sketch normally and, once a `.bin` file is available, sign it using
<ESP8266ArduioPath>/tools/signing.py --mode sign --privatekey <path-to-private.key> --bin <path-to-unsigned-bin> --out <path-to-signed-binary>
Old And New Signature Formats
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Up to version 2.5.2 of the core, the format of signatures was a little different. An additional signed binary with the extension legacy_sig is created. This file contains a signature in the old format and can be uploaded OTA to a device that checks for the old signature format.
To create a legacy signature, call the signing script with --legacy:
.. code:: bash
<ESP8266ArduioPath>/tools/signing.py --mode sign --privatekey <path-to-private.key> --bin <path-to-unsigned-bin> --out <path-to-signed-binary> --legacy <path-to-legacy-file>
Safety
~~~~~~