Commit Graph
69 Commits
Author SHA1 Message Date
Nilesh Kale 57553ecf90 Merge branch 'bugfix/update_condition_to_verify_http_version' into 'master'
fix(esp_http_server): updated condition to verify http version

Closes IDFGH-13878

See merge request espressif/esp-idf!34208
2024-10-25 14:21:30 +08:00
nilesh.kale 3e1534e2f7 fix(esp_https_server): added default config for https_server example to set header size to 1024 2024-10-22 12:20:00 +05:30
nilesh.kale 854101959d feat: enable security related testcases for c5 and c61 2024-10-21 14:24:36 +05:30
nilesh.kale dacb9a57cb feat(mbedtls): update mbedtls version to 3.6.2 2024-10-18 11:59:31 +05:30
nilesh.kale d66442b74a fix(esp_http_server): updated condition to verify http version
Closes https://github.com/espressif/esp-idf/issues/14723
2024-10-15 17:56:13 +05:30
nilesh.kale 8d8b3fc0a2 fix(esp_http_client): Fix ota failure with openssl server
If the TLS server (e.g., openssl) closes connection with encrypted close-notify alert
then `errno` is not explicitly set on the socket by LwIP stack.
For this scenario, we must rely only on `ERR_TCP_TRANSPORT_CONNECTION_CLOSED_BY_FIN`
return value as the connection close case and do the graceful connection closure.

Closes https://github.com/espressif/esp-idf/issues/14724
2024-10-15 16:37:32 +05:30
nilesh.kale 0797f580bc fix: updated pytest for https_server example as per config option 2024-10-09 15:56:42 +05:30
Nilesh Kale fcdbff5039 Merge branch 'feature/update_mbedtls_version_to_3.6.1' into 'master'
feat(mbedtls): updated mbedtls version to 3.6.1

Closes IDF-10980

See merge request espressif/esp-idf!33282
2024-09-29 22:33:45 +08:00
nilesh.kale f9961fda62 fix(esp_http_client): added initial argument checking for APIs'
This MR added checks for arguments passed in APIS' of esp_http_client.c
2024-09-27 17:05:04 +05:30
nilesh.kale 0216236d0c feat(mbedtls): updated mbedtls version to 3.6.1 2024-09-26 10:26:29 +05:30
nilesh.kale 12fc7a677e feat: enable support for sha peripheral in esp32c61 2024-09-11 14:49:01 +05:30
nilesh.kale 70d4414eeb feat(esp_https_ota): added API to get last status code logged from http resonse
Closes https://github.com/espressif/esp-idf/issues/14302
2024-09-06 15:09:42 +05:30
nilesh.kale 3550e36a68 feat: updated security docs for ESP32C5
This commit modified document files for ESP32C5.
This revised chnages for security components, RNG, provisioning and
some minor changes in sample output for flash encryption example.
2024-09-02 11:50:07 +05:30
nilesh.kale 1011cee7a7 feat: udpate security docs for c61 and c5
This commit update security documents for ESP32C61.
2024-09-02 11:04:38 +05:30
nilesh.kale 214974b038 fix: update https server starting instructions in ota README
This commit updates sequence for methods of starting HTTPS servers
in ota README file.
2024-08-14 15:45:23 +05:30
Nilesh Kale 6028332164 Merge branch 'feature/enable_secure_boot_in_esp32c61' into 'master'
feat: enable secure boot feature for esp32c61

Closes IDF-9233

See merge request espressif/esp-idf!31420
2024-08-13 19:23:53 +08:00
nilesh.kale e74dcb1fab feat: remove support for aes and rsa peripherals in esp32c61 2024-08-06 15:06:16 +05:30
nilesh.kale bedfe0fe3b feat: remove suppport for ds and hmac in esp32c61
This commit remove support for DS and HMAC peripheral
in ESP32C61.
2024-08-06 15:06:08 +05:30
nilesh.kale 5cc0110958 feat: enabled support for ecdsa in esp32c61
This commit add ECDSA peripheral support in ESP32C61.
2024-08-05 09:29:31 +05:30
nilesh.kale 849726a3b7 feat: enable secure boot feature for esp32c61 2024-08-05 09:23:27 +05:30
nilesh.kale 2bf74cf86d feat: enable flash encyption support in esp32c61
This commit add support for flash ecnyrption in ESP32C61.
2024-07-19 17:23:11 +05:30
nilesh.kale 55bbd9c95a feat: add config option under partition menu to support large size ota
This commit adds one more config option under partition table menu
to support large size image during ota

This also updates the default config for simple ota example.
2024-07-12 14:49:16 +05:30
nilesh.kale 3aa448ee0d fix: disable config for RSA during secure boot
support for RSA secure boot is disabled for ESP32-ECO0 due to
hardware issue. It will be re-enabled in future version ECO1.

For ESP32C5- ECO0 , ECDSA secure boot is the recommended option.
2024-07-12 12:40:11 +05:30
nilesh.kale b839bf95aa feat: Uncomment UART bootloader cache code in FE for ESP32C5 2024-07-04 16:27:32 +05:30
nilesh.kale a87636cca7 feat: enable ecc support in esp32c61
This commit enable ecc peripheral support in ESP32C61
It also corrects power up sequence for ecc peripheral.
2024-07-04 13:37:16 +05:30
nilesh.kale 469942225b fix(hal): updated naming style for power up and down api for mpi peripheral
This commit updated APIs' naming style to ensure consistency throughout
all other peripherals.
2024-07-03 10:49:20 +05:30
nilesh.kale 96d011cdfc fix(hal): updated ecdsa reset api to execute correctly
This commit updated API to ensure ECDSA peripheral resets
and waits until the state returns to idle.
2024-07-03 10:48:36 +05:30
nilesh.kale 1eaa8288a2 feat: enable DPA protection for c5
This commit enabled DPA protection for ESP32C5.
This reflect updating documentation for C5.
2024-06-28 11:38:51 +05:30
nilesh.kale 40059dedde feat: updated procedure for generating token in jtag_example_helper.py
This commit updated API for generating token providing ability to
pass more arguments and updated readme file as well.
2024-06-27 16:57:01 +05:30
nilesh.kale d1fa51e3c9 feat: enable flash encryption support for c5
This commit provide support for flash encryption feature in ESP32C5
2024-06-04 14:10:21 +05:30
nilesh.kale 7c8a43ffc2 fix(hal): update ECDSA API to set register values correctly for ESP32C5
This commit updates the ECDSA API to enable and clear interrupts by
setting the respective registers correctly for the ESP32C5.
2024-05-31 11:33:18 +05:30
nilesh.kale f5dd1074b6 feat: enable secure boot for c5
This MR added suppport for secure boot in ESP32-C5.
2024-05-30 11:43:17 +05:30
nilesh.kale 00fa28259b feat: enabled ecdsa support for c5
This commit adds support for ECDSA for ESP32-C5
2024-05-28 17:33:05 +05:30
nilesh.kale 46c0902fd6 feat: enabled hmac and ds peripheral support for c5
This commit add support for HMAC and DS peripheral support for ESP32-C5.
2024-05-28 10:44:54 +05:30
nilesh.kale 317f07f22a docs: updated security documents for esp32c5 2024-05-27 16:36:17 +05:30
nilesh.kale a76e84a1e1 feat: enabled aes and sha support for esp32c5 mp version
This commit enabled AES and SHA support for esp32c5.
2024-05-27 11:03:02 +05:30
nilesh.kale 92fdaea83a feat: enable RSA support for c5 mp version
This commit enables RSA peripheral support for ESP32-C5 MP version.
2024-05-17 14:22:30 +05:30
nilesh.kale 5348f1656f feat(cjson): update submodule to v1.7.18
Changelog: https://github.com/DaveGamble/cJSON/releases/tag/v1.7.18
2024-05-16 16:16:24 +05:30
nilesh.kale b227154fd3 fix(soc): Refactor variable names for MPI operations and block bases 2024-05-14 10:34:33 +05:30
nilesh.kale 948d46a765 feat: added ecc peripheral support for esp32c5 for mp version
This commits adds support for ECC peripheral for ESP32C5 MP version
This is tested on mbedtls and hal testapps.
2024-05-14 10:24:52 +05:30
Nilesh Kale ade6a5ec07 Merge branch 'bugfix/free_memory_if_failed_to_strart_http_server' into 'master'
fix(esp_https_server): fix memory leak during configuring http server

Closes IDFGH-12519

See merge request espressif/esp-idf!30233
2024-05-06 13:41:23 +08:00
nilesh.kale 21d51208c4 fix(esp_https_server): fix memory leak during configuring http server
This MR This restructured code to prevent memory leak during the starting HTTP server.

Closes https://github.com/espressif/esp-idf/issues/13526
2024-05-03 18:11:38 +05:30
nilesh.kale 553a117894 fix: Refactored script for initiating Python-based HTTPS server
This commit refactors the script responsible for starting a Python-based HTTPS server
to align with the latest Python version's requirements and best practices.

Closes https://github.com/espressif/esp-idf/issues/13575
2024-04-30 10:04:56 +05:30
nilesh.kale 3e6d62781f feat(mbedtls): updated mbedtls version from 3.5.2 to 3.6.0
This MR updated MbedTLS version to latest version 3.6.0.
2024-04-18 14:11:02 +05:30
nilesh.kale 18d2c57542 feat: enabled aes and sha support for esp32c5
This commit enabled AES and SHA support for esp32c5.
2024-03-26 14:52:06 +05:30
nilesh.kale b11f286555 feat(esp_system/esp32c5): revised cypto clock to be used
This commit updated crypto clock to use 160M SPLL clock
2024-03-19 13:47:04 +05:30
nilesh.kale ef3b40c5f1 feat: enable RSA support for c5
This commit enables RSA peripheral support for ESP32-C5.
2024-03-19 13:46:49 +05:30
nilesh.kale f6a7fb13cd feat: re enables tests on p4
This commit re-enables mbedtls and hal/crypto testapos on p4.
2024-03-05 17:48:05 +08:00
nilesh.kale 37adea9a14 feat: add example to re-enable jtag using hmac peripheral 2024-03-04 15:42:33 +05:30
nilesh.kale 152f172367 fix(esp_hw_support): update hmac toggle method due to discrepency in ROM code
Need to update the HMAC enable/disable method due to discrepancy in ROM code
across different targets for the esp_hmac_disable() API.
2024-02-29 12:01:09 +05:30
nilesh.kale 747ee60dd5 feat: added ecc peripheral support for esp32c5
This commits adds support for ECC peripheral for ESP32C5
This is tested on mbedtls and hal testapps.
2024-02-21 14:52:56 +05:30
nilesh.kale 7ce39ffa8a fix(hal/test_apps): update sha testcases flow
This commit updates the flow of sha testcases.
Previously, DMA test cases were still executed even after disabling the related feature.
2024-02-20 11:53:58 +05:30
nilesh.kale aab3f604ec feat(hal/testapps): Added AES and SHA testcases with DMA support 2024-02-09 14:23:06 +05:30
nilesh.kale 318038a746 fix: fixed issue faced while starting python server and updated ota readme
openssl server does not support for range request mechanism.
Consequently, it does not support partial download feature.
So, removing commands and steps required for staring openssl server.
Also, updated pytest file to avoid unnecssary issues while starting server.
2024-02-06 12:12:24 +05:30
nilesh.kale 3da0aa2d82 fix(esp_https_ota): fix incorrectly reference of API esp_https_ota_get_img_desc()
esp_https_ota_get_img_desc() is incorrectly referred to as esp_https_ota_read_img_desc()
in some error messages.So, this MR updates related references

Closes https://github.com/espressif/esp-idf/issues/13065
2024-02-05 13:55:42 +05:30
nilesh.kale 8472bcb7d3 feat(mbedtls): updated mbedtls version from 3.5.0 to 3.5.2
This updates the submodule mbedtls to its latest version 3.5.2.
2024-02-01 10:43:16 +05:30
nilesh.kale 59c5b5fe6b fix(bootloader): Fix compilation issue in bootloader build during verbose+sb+fe 2024-01-18 12:15:15 +05:30
nilesh.kale 50ca5227fa fix: renamed partool.py -> parttool.py 2024-01-12 11:15:38 +05:30
nilesh.kale 61af00289b fix(esp_hw_support): fix API esp_hmac_disable_jtag() to disable JTAG
After ets_hmac_disable(), invalidating JTAG register process is ineffective.
So, added call to enable hmac begore invalidating JTAG REG.
And similarly disabled it after invalidation.
2024-01-03 16:54:11 +08:00
nilesh.kale 36ab1c681c fix(hal/testapps): fix block number to burn keys to avoid overlapping 2023-12-07 14:47:26 +05:30
nilesh.kale a0c37ce33c fix: fixed build issue in flash encryption example with certain config
Addresses a build failure that occurs when flash encryption is enabled with default configurations.

The build failure did not manifest in the CI environment because the configuration
CONFIG_SECURE_FLASH_REQUIRE_ALREADY_ENABLED is set in sdkconfig.ci.
This configuration is responsible for reducing the bootloader size.

Closes https://github.com/espressif/esp-idf/issues/12619
2023-11-28 12:41:35 +05:30
nilesh.kale cf4a7bb09d feat(mbedtls): Add config for interrupt priority in AES and RSA(MPI) 2023-10-12 11:06:13 +05:30
nilesh.kale 44cbb8bb24 fix: fix preencrypted ota failed with pytest server and partial http enabled 2023-10-11 15:22:24 +05:30
nilesh.kale e2906504fb docs: Update maximum stack frames during heap memory debugging 2023-09-18 13:44:58 +05:30
nilesh.kale 84d91e5bf9 fix(esp_hw_support/test_apps): fix redudancy in hmac and ds test apps 2023-09-18 10:42:54 +05:30
nilesh.kale 1a18fdb83a feat(hal): Adding AES snd SHA peripheral to crypto testapps 2023-09-15 15:29:30 +05:30
nilesh.kale 37a098e739 fix(component-esp_https_ota): Fix wrong debug print for ota upgrade size 2023-08-18 11:35:54 +05:30
nilesh.kale b4f9dd1fa5 fix(mbedtls): IRAM optimization analyzed on mbedtls/test_apps 2023-08-10 14:05:22 +05:30
nilesh.kale 99db66676c fix: Fixed wrong filename in ota example readme 2023-08-08 11:23:45 +05:30