INVALID_OBJECT Error when try to DFU with nRFConnect

RE: INVALID_OBJECT Error when try to DFU with nRFConnect

bjorn-spockeli — Wed, 21 Feb 2018 14:09:28 GMT

No, the bootloader will then have the public key derived from the Nordic private key and will only accept firmware images that are signed with the Nordic private key.

RE: INVALID_OBJECT Error when try to DFU with nRFConnect

giova — Wed, 21 Feb 2018 14:00:47 GMT

Hi, is it possible to upload your own custom firmware using OTA only(no DK) to a device which is flashed with a bootloader and app signed using the Nordic private key?

RE: INVALID_OBJECT Error when try to DFU with nRFConnect

bjorn-spockeli — Tue, 01 Aug 2017 12:59:30 GMT

Yes, if you want to use other images than the test images provided in the SDK you need to generate your own private-public key pair, replace the public key in the bootloader example and generate a new .zip image that is signed with the corresponding private key.

RE: INVALID_OBJECT Error when try to DFU with nRFConnect

John — Tue, 01 Aug 2017 12:06:31 GMT

Good job on figuring that out. I learned something new today and it's still early!

RE: INVALID_OBJECT Error when try to DFU with nRFConnect

Dave_couling — Tue, 01 Aug 2017 00:04:43 GMT

So this issue was that I was using the debug version of the bootloader which I didn't realize still required a private key when generating the package. Since Nordic didn't release this private key, there was no way for using the debug bootloader unless you update the public key from a private key I generated. However this was very confusing as there was a command where I could generate a debug package. This highly suggests that the nrfutil either internally uses the debug private key, or that keys are ignored somehow in debug mode.

RE: INVALID_OBJECT Error when try to DFU with nRFConnect

Dave_couling — Mon, 31 Jul 2017 23:53:20 GMT

I've traced this to an NRF_ERROR_INVALID_ADDR error inside ecc_p256_verify() [ecc.c], which is called inside nrf_crypto_verify() [nrf_crypto.c], which is called inside dfu_handle_prevalidate() to verify the signature.

RE: INVALID_OBJECT Error when try to DFU with nRFConnect

Dave_couling — Mon, 31 Jul 2017 23:00:45 GMT

Below is the nrfutil display of my zip file:

DFU Package: <DFU_Package_Generation\DFU_Packages\Test-DEBUG.zip>:
|
|- Image count: 1
|
|- Image #0:
   |- Type: application
   |- Image file: nrf52832_xxaa.bin
   |- Init packet file: nrf52832_xxaa.dat
      |
      |- op_code: INIT
      |- signature_type: ECDSA_P256_SHA256
      |- signature (little-endian): 9f2794061d8d54040679c6df94a1cd94dd309792a544c036340be5d2e42be90a29e69c7e56086b59cc36b5fa80d116eb99a477177f575160cd02517b59d4839b
      |
      |- fw_version: 0xFFFFFFFF (4294967295)
      |- hw_version 0xFFFFFFFF (4294967295)
      |- sd_req: 0xFFFE
      |- type: APPLICATION
      |- sd_size: 0
      |- bl_size: 0
      |- app_size: 68084
      |
      |- hash_type: SHA256
      |- hash (little-endian): fbec689ff9011daa5f17a848e206f88836315dc47be5d8bd81ab2a3a1166a207
      |
      |- is_debug: True

RE: INVALID_OBJECT Error when try to DFU with nRFConnect

Dave_couling — Mon, 31 Jul 2017 22:29:08 GMT

I've noticed it fails with the above error code during the *.dat file transfer.

RE: INVALID_OBJECT Error when try to DFU with nRFConnect

Dave_couling — Mon, 31 Jul 2017 21:15:09 GMT

I tried from the nrfutil installed via pip, which is 3.2.0. I was able to use the nrfutil pkg generate commands. I generated the ZIP package, but got the same error stated in my original post. The Package Info looks different than my previous zip package, but the resulting error is the same.

RE: INVALID_OBJECT Error when try to DFU with nRFConnect

John — Mon, 31 Jul 2017 21:09:05 GMT

Hi Dave, version 0.3.0 seems pretty old. I'm using version 2.1.0. Might be worth upgrading to a newer revision and trying again.

RE: INVALID_OBJECT Error when try to DFU with nRFConnect

Dave_couling — Mon, 31 Jul 2017 21:03:05 GMT

Hi John, thanks for the reply. I had tried a similar script but i get the following error "Error: No such command "pkg"." I am using nrfutil version 0.3.0

RE: INVALID_OBJECT Error when try to DFU with nRFConnect

John — Mon, 31 Jul 2017 20:09:48 GMT

I'm not expert enough with nrfutil to know if there is something wrong with the way you are using it. However, here is how I do it in my post build .bat script and it is working: "nrfutil pkg generate --application .\D-21228-release\exe\AppMX_WATER.hex --application-version 0xff --hw-version 52 --sd-req 0x8C --key-file ....\Source\vault\priv.pem D_21228_APP.zip"

Note, that works with both nrfConnect and our mobile application bootloader.