espressif port build error

[Very1ucky]

I've updated mcuboot from version 2.2.0 to 2.3.0-rc1 and now I can't build its espressif port. I get the following build error:
mcuboot/boot/espressif/CMakeFiles/mcuboot_esp32s3.elf.dir/__/__/ext/mbedtls/library/base64.c.obj:(.literal.mbedtls_ct_uchar_in_range_if+0x0): undefined reference to 'mbedtls_ct_zero'

I've also discovered that it can be fixed by adding ${MBEDTLS_DIR}/library/constant_time.c to the build sources where missing variable is initialized.

[almir-okato]

Hi @Very1ucky, I'll verify
May you open a PR with your changes?

[Very1ucky]

Opened a merge request: #2555

[almir-okato]

@Very1ucky could you show the ".conf" file you are using?
If you are trying to enable RSA signature verification, maybe you missed to enable CONFIG_ESP_USE_MBEDTLS=y configuration

[Very1ucky]

@almir-okato Here is my configuration file:

# Enables the MCUboot Serial Recovery, that allows the use of
# MCUMGR to upload a firmware through the serial port
CONFIG_ESP_MCUBOOT_SERIAL=y
# Use Serial through USB JTAG Serial port for Serial Recovery
# CONFIG_ESP_MCUBOOT_SERIAL_USB_SERIAL_JTAG=y
# Use sector erasing (recommended) instead of entire image size
# erasing when uploading through Serial Recovery
CONFIG_ESP_MCUBOOT_ERASE_PROGRESSIVELY=y

# Use UART0 for console printing (use either UART or USB alone)
CONFIG_ESP_CONSOLE_UART=y
CONFIG_ESP_CONSOLE_UART_NUM=0

# Options for enabling eFuse emulation in Flash
CONFIG_EFUSE_VIRTUAL=y
# CONFIG_EFUSE_VIRTUAL_KEEP_IN_FLASH=y

CONFIG_ESP_SIGN_EC256=y
CONFIG_ESP_USE_TINYCRYPT=y

# Define upgrade mode (default is CONFIG_ESP_BOOT_SWAP_USING_SCRATCH)
# CONFIG_ESP_BOOT_SWAP_USING_MOVE=y
# CONFIG_ESP_BOOT_UPGRADE_ONLY=y

CONFIG_ESP_FLASH_SIZE=4MB
CONFIG_ESP_BOOTLOADER_SIZE=0x0000D000
CONFIG_ESP_BOOTLOADER_OFFSET=0x0000
CONFIG_ESP_IMAGE0_PRIMARY_START_ADDRESS=0x20000
CONFIG_ESP_APPLICATION_SIZE=0x150000
CONFIG_ESP_IMAGE0_SECONDARY_START_ADDRESS=0x170000
CONFIG_ESP_MCUBOOT_WDT_ENABLE=y
CONFIG_ESP_SCRATCH_OFFSET=0x3e0000
CONFIG_ESP_SCRATCH_SIZE=0x1f000

# When enabled, prevents updating image to an older version
# CONFIG_ESP_DOWNGRADE_PREVENTION=y
# This option makes downgrade prevention rely also on security
# counter (defined using imgtool) instead of only image version
# CONFIG_ESP_DOWNGRADE_PREVENTION_SECURITY_COUNTER=y

# GPIO used to boot on Serial Recovery
CONFIG_ESP_SERIAL_BOOT_GPIO_DETECT=40
# GPIO input type (0 for Pull-down, 1 for Pull-up)
CONFIG_ESP_SERIAL_BOOT_GPIO_INPUT_TYPE=1
# GPIO signal value
CONFIG_ESP_SERIAL_BOOT_GPIO_DETECT_VAL=0
# Delay time for identify the GPIO signal
CONFIG_ESP_SERIAL_BOOT_DETECT_DELAY_S=5
# UART port used for serial communication (not needed when using USB)
CONFIG_ESP_SERIAL_BOOT_UART_NUM=1
# GPIO for Serial RX signal
CONFIG_ESP_SERIAL_BOOT_GPIO_RX=38
# GPIO for Serial TX signal
CONFIG_ESP_SERIAL_BOOT_GPIO_TX=46

I'm just using EC256 algorithm and tinycrypt

[almir-okato]

Got it, I manage to reproduce the issue with your .conf.