Bootloader rejects DFU updates with custom key

RE: Bootloader rejects DFU updates with custom key

Amanda Hsieh — Tue, 11 Feb 2020 11:59:56 GMT

Hi,

I think your private and public keys are not the same pair. I generated a new pair of keys as devzone.nordicsemi.com/.../243944_5F00_Key.zip to test with your code, and they can work.

Please see BLE Secure DFU Bootloader for testing.

-Amanda H.

RE: Bootloader rejects DFU updates with custom key

Andrés — Mon, 10 Feb 2020 16:59:53 GMT

Hi Amanda,

The question is how to generate the updates in a way that they are accepted by the secure bootloader, as we currently have to set NRF_DFU_REQUIRE_SIGNED_APP_UPDATE to 0 so that the bootloader accepts the zip and updates the application code.

We have tested the functionality with the default public key in the secure bootloader example and it works ok.

We have also tested the bootloader with our own private/public keys and that's when the error comes up.
The test was performed with the HTS example as the application code and our own key as the private key to generate the zip file.

Please, find attached the .zip file that we forgot to include in the previous post:

devzone.nordicsemi.com/.../pca10056_5F00_ble_5F00_forumCode.zip

RE: Bootloader rejects DFU updates with custom key

Amanda Hsieh — Mon, 10 Feb 2020 10:07:31 GMT

Hi,

Not sure I understand your question or not.

Did you generate your own public and private key? How did you generate the upload application image with your private key? See Working with keys for instructions, and Signature Verification for more information about signatures.

Please refer to the BLE Secure DFU Bootloader section for \nRF5_SDK_15.3.0_59ac345\examples\dfu\secure_bootloader

If you want the application update may come from an unsigned package (NRF_DFU_REQUIRE_SIGNED_APP_UPDATES), please see the Open Bootloader with DFU section.

-Amanda H.