esp-idf/components/bootloader_support/CMakeLists.txt

set(srcs 
    "src/bootloader_clock.c"
    "src/bootloader_common.c"
    "src/bootloader_flash.c"
    "src/bootloader_random.c"
    "src/bootloader_utility.c"
    "src/esp_image_format.c"
    "src/flash_encrypt.c"
    "src/flash_partitions.c"
    "src/flash_qio_mode.c")

if(BOOTLOADER_BUILD)
    set(include_dirs "include" "include_bootloader")
    set(requires soc)  #unfortunately the header directly uses SOC registers
    set(priv_requires micro-ecc spi_flash efuse)
    list(APPEND srcs 
        "src/bootloader_init.c"
        "src/${IDF_TARGET}/bootloader_sha.c"
        "src/${IDF_TARGET}/flash_encrypt.c"
        "src/${IDF_TARGET}/secure_boot_signatures.c"
        "src/${IDF_TARGET}/secure_boot.c")
else()
    list(APPEND srcs 
        "src/idf/bootloader_sha.c"
        "src/idf/secure_boot_signatures.c")
    set(include_dirs "include")
    set(priv_include_dirs "include_bootloader")
    set(requires soc) #unfortunately the header directly uses SOC registers
    set(priv_requires spi_flash mbedtls efuse)
endif()

idf_component_register(SRCS "${srcs}"
                    INCLUDE_DIRS "${include_dirs}"
                    PRIV_INCLUDE_DIRS "${priv_include_dirs}"
                    REQUIRES "${requires}"
                    PRIV_REQUIRES "${priv_requires}")

if(BOOTLOADER_BUILD AND CONFIG_SECURE_SIGNED_APPS)
    get_filename_component(secure_boot_verification_key
        "signature_verification_key.bin"
        ABSOLUTE BASE_DIR "${CMAKE_BINARY_DIR}")
    if(CONFIG_SECURE_BOOT_BUILD_SIGNED_BINARIES)
        add_custom_command(OUTPUT "${secure_boot_verification_key}"
            COMMAND ${ESPSECUREPY}
                extract_public_key --keyfile "${secure_boot_signing_key}"
                "${secure_boot_verification_key}"
            DEPENDS gen_secure_boot_signing_key
            VERBATIM)
    else()
        get_filename_component(orig_secure_boot_verification_key
            "${CONFIG_SECURE_BOOT_VERIFICATION_KEY}"
            ABSOLUTE BASE_DIR "${main_project_path}")
        if(NOT EXISTS ${orig_secure_boot_verification_key})
            message(FATAL_ERROR
                "Secure Boot Verification Public Key ${CONFIG_SECURE_BOOT_VERIFICATION_KEY} does not exist."
                "\nThis can be extracted from the private signing key."
                "\nSee docs/security/secure-boot.rst for details.")
        endif()

        add_custom_command(OUTPUT "${secure_boot_verification_key}"
            COMMAND ${CMAKE_COMMAND} -E copy "${orig_secure_boot_verification_key}"
                "${secure_boot_verification_key}"
            DEPENDS "${orig_secure_boot_verification_key}"
            VERBATIM)
    endif()
    target_add_binary_data(${COMPONENT_LIB} "${secure_boot_verification_key}" "BINARY")
    set_property(DIRECTORY "${CMAKE_CURRENT_SOURCE_DIR}"
        APPEND PROPERTY ADDITIONAL_MAKE_CLEAN_FILES
        "${secure_boot_verification_key}")
endif()