From 5cbc4e976b8b7b2fda46b8389f08b6b2150cf4c5 Mon Sep 17 00:00:00 2001
From: Angus Gratton <angus@espressif.com>
Date: Mon, 16 Jul 2018 16:38:08 +1000
Subject: [PATCH] app_update: Don't double-verify secure boot signature during
 OTA

esp_image_load() already verifies the signature
---
 components/app_update/esp_ota_ops.c | 8 --------
 1 file changed, 8 deletions(-)

diff --git a/components/app_update/esp_ota_ops.c b/components/app_update/esp_ota_ops.c
index 8e26ba162..48542c23f 100644
--- a/components/app_update/esp_ota_ops.c
+++ b/components/app_update/esp_ota_ops.c
@@ -240,14 +240,6 @@ esp_err_t esp_ota_end(esp_ota_handle_t handle)
         goto cleanup;
     }
 
-#ifdef CONFIG_SECURE_BOOT_ENABLED
-    ret = esp_secure_boot_verify_signature(it->part->address, data.image_len);
-    if (ret != ESP_OK) {
-        ret = ESP_ERR_OTA_VALIDATE_FAILED;
-        goto cleanup;
-    }
-#endif
-
  cleanup:
     LIST_REMOVE(it, entries);
     free(it);