Crash_Override/OVMS3-idf
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

security: Hide Secure Boot & Flash Encryption config items when using CMake

Browse source 
These features are not supported in the CMake build system preview, but previously
had to read the notice in the CMake Getting Started guide to know this.

Related to https://github.com/espressif/esp-idf/issues/4419
This commit is contained in:
Angus Gratton 2019-12-03 16:00:07 +11:00 committed by Angus Gratton
parent 0f72e63b7a
commit 6281b910d1
3 changed files with 9 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
components/bootloader/Kconfig.projbuild
View file

@ -163,6 +163,7 @@ endmenu # Bootloader
menu "Security features"
visible if !IDF_CMAKE
# These three are the actual options to check in code,
# selected by the displayed options

5
docs/en/security/flash-encryption.rst
View file

@ -8,7 +8,10 @@ Flash Encryption is separate from the :doc:`Secure Boot <secure-boot>` feature,
When using any non-default configuration in production, additional steps may also be needed to ensure effectiveness of flash encryption. See :ref:`securing-flash-encryption` for more details.
.. important::
Enabling flash encryption limits your options for further updates of your ESP32. Make sure to read this document (including :ref:`flash-encryption-limitations`) and understand the implications of enabling flash encryption.
Enabling flash encryption limits your options for further updates of your ESP32. Make sure to read this document (including :ref:`flash-encryption-limitations`) and understand the implications of enabling flash encryption.
.. note::
Flash encryption is only supported when using the default GNU Make build system. The CMake build system preview in ESP-IDF v3.x does not support flash encryption.
Background
----------

4
docs/en/security/secure-boot.rst
View file

@ -9,6 +9,10 @@ Secure Boot is separate from the :doc:`Flash Encryption <flash-encryption>` feat
Enabling secure boot limits your options for further updates of your ESP32. Make sure to read this document throughly and understand the implications of enabling secure boot.
.. note::
Secure boot is only supported when using the default GNU Make build system. The CMake build system preview in ESP-IDF v3.x does not support secure boot.
Background
----------