Merge branch 'master' into additional-verification-after-attestation

.github/workflows/examples-telink.yaml

@@ -35,8 +35,7 @@ jobs:
         if: github.actor != 'restyled-io[bot]'
 
         container:
-            # TODO: update this to connectedhomeip/chip-build-vscode:0.6.27 once we can compile
-            image: connectedhomeip/chip-build-telink:0.6.18
+            image: connectedhomeip/chip-build-telink:0.6.27
             volumes:
                 - "/tmp/bloat_reports:/tmp/bloat_reports"
 
@@ -76,6 +75,15 @@ jobs:
                     out/telink-tlsr9518adk80d-all-clusters-minimal/zephyr/zephyr.elf \
                     /tmp/bloat_reports/
 
+            - name: Build example Telink Contact Sensor App
+              run: |
+                  ./scripts/run_in_build_env.sh \
+                    "./scripts/build/build_examples.py --target 'telink-tlsr9518adk80d-contact-sensor' build"
+                  .environment/pigweed-venv/bin/python3 scripts/tools/memory/gh_sizes.py \
+                    telink tlsr9518adk80d contact-sensor-app \
+                    out/telink-tlsr9518adk80d-contact-sensor/zephyr/zephyr.elf \
+                    /tmp/bloat_reports/
+
             - name: Build example Telink Lighting App
               run: |
                   ./scripts/run_in_build_env.sh \

.github/workflows/zap_regeneration.yaml

@@ -28,7 +28,7 @@ jobs:
 
         runs-on: ubuntu-20.04
         container:
-            image: connectedhomeip/chip-build:0.6.28
+            image: connectedhomeip/chip-build:0.6.30
         defaults:
             run:
                 shell: sh

.github/workflows/zap_templates.yaml

@@ -29,7 +29,7 @@ jobs:
 
         runs-on: ubuntu-20.04
         container:
-            image: connectedhomeip/chip-build:0.6.28
+            image: connectedhomeip/chip-build:0.6.30
         defaults:
             run:
                 shell: sh

.vscode/tasks.json

@@ -638,6 +638,7 @@
                 "qpg-qpg6100-lock",
                 "telink-tlsr9518adk80d-all-clusters",
                 "telink-tlsr9518adk80d-all-clusters-minimal",
+                "telink-tlsr9518adk80d-contact-sensor",
                 "telink-tlsr9518adk80d-light",
                 "telink-tlsr9518adk80d-light-switch",
                 "telink-tlsr9518adk80d-ota-requestor",

config/ameba/chip.cmake

@@ -26,6 +26,7 @@ list(
     -DCONFIG_PLATFORM_8721D
     -DCONFIG_USE_MBEDTLS_ROM_ALG
     -DCONFIG_FUNCION_O0_OPTIMIZE
+    -DCONFIG_ENABLE_AMEBA_FACTORY_DATA=0
     -DDM_ODM_SUPPORT_TYPE=32
     -DCHIP_DEVICE_LAYER_TARGET=Ameba
     -DMBEDTLS_CONFIG_FILE=<mbedtls_config.h>
@@ -43,6 +44,7 @@ list(
     -Wno-unused-variable
     -Wno-deprecated-declarations
     -Wno-unused-parameter
+    -Wno-unused-label
     -Wno-format
     -Wno-stringop-truncation
     -Wno-format-nonliteral

config/nrfconnect/chip-module/Kconfig

@@ -25,6 +25,7 @@ config CHIP_DEVICE_VENDOR_NAME
 config CHIP_APP_LOG_LEVEL
 	int "Set logging level in application"
 	default LOG_DEFAULT_LEVEL
+	depends on LOG
 	help
 	  Sets the logging level in Matter application. 
 	  This config should be used only within application.
@@ -135,16 +136,45 @@ config CHIP_FACTORY_DATA_MERGE_WITH_FIRMWARE
 	  As a result, a new output file merged.hex will consist of all partitions including 
 	  factory data.
 
-# Use default certificates without generating or providing them
-config CHIP_FACTORY_DATA_USE_DEFAULT_CERTS
-	bool "Use default certificates located in Matter repository"
-	default y
+# Select source of the certificates
+choice CHIP_FACTORY_DATA_CERT_SOURCE
+	prompt "Attestation certificate file source"
+	default CHIP_FACTORY_DATA_USE_DEFAULT_CERTS
+
+	config CHIP_FACTORY_DATA_USE_DEFAULT_CERTS
+		bool "Use pre-generated development certificates"
+		help
+			Use pre-generated certificate files from the credentials/development/attestation/
+			directory that match the configured Product ID. This can be used for development
+			purpose.
+	config CHIP_FACTORY_DATA_CERT_SOURCE_GENERATED
+		bool "Auto-generate certificates"
+		help
+			Generate new certificates instead of using pre-generated ones.
+			The certificates are generated on every build.
+	config CHIP_FACTORY_DATA_CERT_SOURCE_USER
+		bool "Use user-provided certificate files"
+		help
+			Use user-provided certificate files.
+			The user needs to specify the absolute path to all necessary files.
+endchoice
+
+if CHIP_FACTORY_DATA_CERT_SOURCE_USER
+
+config CHIP_FACTORY_DATA_USER_CERTS_DAC_CERT
+	string "Path to the DAC certificate *.der-file"
+	help
+		Absolute path to the DAC certificate file in binary format.
+config CHIP_FACTORY_DATA_USER_CERTS_DAC_KEY
+	string "Path to the DAC private key *.der-file"
 	help
-	  Pre-generated certificates can be used for development purpose.
-	  This config includes default pre-generated certificates 
-	  which are located in credentials/development/attestation/ directory 
-	  instead of generating new ones.
-	  If this config is set to `n` new certificates will be generated.
+		Absolute path to the DAC keysfile in binary format.
+		Note that both public and private keys must be present (will be extracted automatically).
+config CHIP_FACTORY_DATA_USER_CERTS_PAI_CERT
+	string "Path to the PAI certificate *.der-file"
+	help
+		Absolute path pointing to the PAI certificate in binary format.
+endif
 
 # Configs for SPAKE2 generation
 config CHIP_FACTORY_DATA_GENERATE_SPAKE2_VERIFIER

config/nrfconnect/chip-module/generate_factory_data.cmake

@@ -69,6 +69,10 @@ if(CONFIG_CHIP_FACTORY_DATA_USE_DEFAULT_CERTS)
     string(APPEND script_args "--dac_cert \"${CHIP_ROOT}/credentials/development/attestation/Matter-Development-DAC-${raw_pid_upper}-Cert.der\"\n")
     string(APPEND script_args "--dac_key \"${CHIP_ROOT}/credentials/development/attestation/Matter-Development-DAC-${raw_pid_upper}-Key.der\"\n")
     string(APPEND script_args "--pai_cert \"${CHIP_ROOT}/credentials/development/attestation/Matter-Development-PAI-noPID-Cert.der\"\n")
+elseif(CONFIG_CHIP_FACTORY_DATA_CERT_SOURCE_USER)
+    string(APPEND script_args "--dac_cert \"${CONFIG_CHIP_FACTORY_DATA_USER_CERTS_DAC_CERT}\"\n")
+    string(APPEND script_args "--dac_key \"${CONFIG_CHIP_FACTORY_DATA_USER_CERTS_DAC_KEY}\"\n")
+    string(APPEND script_args "--pai_cert \"${CONFIG_CHIP_FACTORY_DATA_USER_CERTS_PAI_CERT}\"\n")
 else()
     find_program(chip_cert_exe NAMES chip-cert REQUIRED)
     string(APPEND script_args "--gen_cd\n")

config/telink/app/zephyr.conf

@@ -118,6 +118,12 @@ CONFIG_DYNAMIC_INTERRUPTS=y
 # nvs_sector_size = flash_page_size * mult = 256 * 8 = 2048
 CONFIG_SETTINGS_NVS_SECTOR_SIZE_MULT=8
 
+# Enable NVS lookup cache
+CONFIG_NVS_LOOKUP_CACHE=y
+
+# Reboot system when fault happened
+CONFIG_TELINK_B91_REBOOT_ON_FAULT=y
+
 # Shell settings
 CONFIG_SHELL=n
 CONFIG_SHELL_BACKEND_SERIAL_RX_RING_BUFFER_SIZE=255

config/telink/chip-module/CMakeLists.txt

@@ -297,37 +297,29 @@ add_dependencies(chip chip-gn)
 if (CONFIG_CHIP_OTA_IMAGE_BUILD)
     add_custom_target(build_mcuboot ALL
         COMMAND
-        west build -b tlsr9518adk80d -d build_mcuboot ${ZEPHYR_BASE}/../bootloader/mcuboot/boot/zephyr
-    )
-
-    add_custom_target(west_sign ALL
-        COMMAND
-        west sign -t imgtool -p ${ZEPHYR_BASE}/../bootloader/mcuboot/scripts/imgtool.py -d ${PROJECT_BINARY_DIR}/.. -- --key ${ZEPHYR_BASE}/../bootloader/mcuboot/root-rsa-2048.pem
-        BYPRODUCTS
-        ${PROJECT_BINARY_DIR}/zephyr.signed.bin
+        west build -b tlsr9518adk80d -d build_mcuboot ${ZEPHYR_BASE}/../bootloader/mcuboot/boot/zephyr -- -DCONFIG_BOOT_SWAP_USING_MOVE=y
     )
 
     add_custom_target(merge_mcuboot ALL
         COMMAND
         dd if=${PROJECT_BINARY_DIR}/../modules/chip-module/build_mcuboot/zephyr/zephyr.bin of=${PROJECT_BINARY_DIR}/zephyr.bin
         COMMAND
-        dd if=${PROJECT_BINARY_DIR}/zephyr.signed.bin of=${PROJECT_BINARY_DIR}/zephyr.bin bs=1024 seek=96
+        dd if=${PROJECT_BINARY_DIR}/zephyr.signed.bin of=${PROJECT_BINARY_DIR}/zephyr.bin bs=1024 seek=76
     )
 
     chip_ota_image(chip-ota-image
         INPUT_FILES ${PROJECT_BINARY_DIR}/zephyr.signed.bin
         OUTPUT_FILE ${PROJECT_BINARY_DIR}/zephyr-ota.bin
     )
 
-    add_dependencies(west_sign ${ZEPHYR_FINAL_EXECUTABLE})
-    add_dependencies(merge_mcuboot west_sign)
-    add_dependencies(chip-ota-image west_sign)
+    add_dependencies(merge_mcuboot ${ZEPHYR_FINAL_EXECUTABLE})
+    add_dependencies(chip-ota-image ${ZEPHYR_FINAL_EXECUTABLE})
 endif()
 
 if (CONFIG_CHIP_FACTORY_DATA_MERGE_WITH_FIRMWARE)
     add_custom_target(merge_factory_data ALL
         COMMAND
-        dd if=${PROJECT_BINARY_DIR}/factory/factory_data.bin of=${PROJECT_BINARY_DIR}/zephyr.bin bs=1024 seek=2000
+        dd if=${PROJECT_BINARY_DIR}/factory/factory_data.bin of=${PROJECT_BINARY_DIR}/zephyr.bin bs=1024 seek=1040
     )
 if (CONFIG_CHIP_OTA_IMAGE_BUILD)
     add_dependencies(merge_factory_data merge_mcuboot)

credentials/development/paa-root-certs/dcld_mirror_CN_ESP_Matter_PAA_test_vid_0x131B.pem

@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

credentials/development/paa-root-certs/dcld_mirror_CN_Heiman_Matter_Test_PAA_vid_0x120B.pem

@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

credentials/development/paa-root-certs/dcld_mirror_CN_HooRii_Matter_Development_PAA_With_VID_0x1351_vid_0x1351.pem

@@ -0,0 +1,13 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

credentials/development/paa-root-certs/dcld_mirror_CN_Kasa_Matter_Test_PAA_vid_0x1391.pem

@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

credentials/development/paa-root-certs/dcld_mirror_CN_PV_Test_PAA_vid_0x1381.pem

@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

credentials/development/paa-root-certs/dcld_mirror_CN_Pankore_Matter_Test_PAA.pem

@@ -0,0 +1,11 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

credentials/development/paa-root-certs/dcld_mirror_CN_SAVANT_Matter_PAA_vid_0x1339.pem

@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

credentials/development/paa-root-certs/dcld_mirror_CN_SIEGENIA_Testnet_PAA_vid_0x135A.pem

@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

credentials/development/paa-root-certs/dcld_mirror_CN_Tapo_Matter_Test_PAA_vid_0x1392.pem

@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

credentials/development/paa-root-certs/dcld_mirror_CN_Telink_Matter_Development_PAA_01_vid_0x1141.pem

@@ -0,0 +1,13 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

credentials/development/paa-root-certs/dcld_mirror_CN_Tuya_Matter_PAA_vid_0x125D.pem

@@ -0,0 +1,13 @@
+Subject: CN=Tuya Matter PAA,vid=0x125D
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

credentials/development/paa-root-certs/dcld_mirror_CN_Uascent_Matter_Development_PAA_01_vid_0x1400.pem

@@ -0,0 +1,13 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

credentials/production/paa-root-certs/dcld_mirror_CN_ACK_PAA_vid_0x137A.pem

@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

credentials/production/paa-root-certs/dcld_mirror_CN_Basics_PAA_vid_0x137B.pem

@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----