Skip to content

Commit eff6a1e

Browse files
committed
bootloader: fix SECURE_TARGET_HAS_SECURE_ROM_DL_MODE enabled for esp32
1 parent c943516 commit eff6a1e

File tree

1 file changed

+7
-2
lines changed

1 file changed

+7
-2
lines changed

components/bootloader/Kconfig.projbuild

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -320,6 +320,11 @@ menu "Security features"
320320
select MBEDTLS_ECDSA_C
321321
depends on SECURE_SIGNED_ON_BOOT || SECURE_SIGNED_ON_UPDATE
322322

323+
config SECURE_TARGET_HAS_SECURE_ROM_DL_MODE
324+
bool
325+
default y
326+
depends on IDF_TARGET_ESP32S2
327+
323328

324329
config SECURE_SIGNED_APPS_NO_SECURE_BOOT
325330
bool "Require signed app images"
@@ -587,7 +592,7 @@ menu "Security features"
587592

588593
config SECURE_FLASH_ENCRYPTION_MODE_RELEASE
589594
bool "Release"
590-
select SECURE_ENABLE_SECURE_ROM_DL_MODE
595+
select SECURE_ENABLE_SECURE_ROM_DL_MODE if SECURE_TARGET_HAS_SECURE_ROM_DL_MODE
591596

592597
endchoice
593598

@@ -719,7 +724,7 @@ menu "Security features"
719724

720725
config SECURE_ENABLE_SECURE_ROM_DL_MODE
721726
bool "Permanently switch to ROM UART Secure Download mode"
722-
depends on IDF_TARGET_ESP32S2 && !SECURE_DISABLE_ROM_DL_MODE
727+
depends on SECURE_TARGET_HAS_SECURE_ROM_DL_MODE && !SECURE_DISABLE_ROM_DL_MODE
723728
help
724729
If set, during startup the app will burn an eFuse bit to permanently switch the UART ROM
725730
Download Mode into a separate Secure Download mode. This option can only work if

0 commit comments

Comments
 (0)