[edk2-devel] [PATCH v3 0/6] CryptoPkg: Upgrade OpenSSL to 1.1.1b

[Xiaoyu lu]

(1) CryptoPkg/OpensslLib: Modify process_files.pl for  upgrading OpenSSL
  OpenSSL only support seeding NONE for UEFI(rand_unix.c line 93).
  So add --with-rand-seed=none to process_files.pl.

(2) CryptoPkg/OpensslLib: Exclude unnecessary files in  process_files.pl
  When running process_files.py to configure OpenSSL, we can exclude some unnecessary files. This can reduce porting time, compiling time and library size.

(3) CryptoPkg/IntrinsicLib: Fix possible unresolved  external symbol issue

(4) CryptoPkg/OpensslLib: Prepare for upgrading OpenSSL
  Disable warning for building OpenSSL_1_1_1b

(5) CryptoPkg: Upgrade OpenSSL to 1.1.1b
  Update OpenSSL submodule to OpenSSL_1_1_1b
  OpenSSL_1_1_1b(50eaac9f3337667259de725451f201e784599687)

  OpenSSL doesn't implement some rand_pool function for UEFI.
  Use EFI_RNG_PROTOCOL to generate random for entropy.
  If EFI_RNG_PROTOCOL is not avaliable, fall back to performance
  counter, but we not sure about the amount of randomness it provides.

(6) CryptoPkg/BaseCryptLib: Make HMAC_CTX size backward  compatible

  Note: Will be remove next update.
  Ref: https://bugzilla.tianocore.org/show_bug.cgi?id=1792
  Ref: https://github.com/openssl/openssl/pull/4338


Cc: Jian J Wang <jian.j.wang at intel.com>
Cc: Ting Ye <ting.ye at intel.com>


Xiaoyu Lu (3):
  CryptoPkg/IntrinsicLib: Fix possible unresolved external symbol issue
  CryptoPkg: Upgrade OpenSSL to 1.1.1b
  CryptoPkg/BaseCryptLib: Make HMAC_CTX size backward compatible

Xiaoyu lu (3):
  CryptoPkg/OpensslLib: Modify process_files.pl for upgrading OpenSSL
  CryptoPkg/OpensslLib: Exclude unnecessary files in process_files.pl
  CryptoPkg/OpensslLib: Prepare for upgrading OpenSSL

 CryptoPkg/Library/BaseCryptLib/Hmac/CryptHmacMd5.c |   8 +-
 .../Library/BaseCryptLib/Hmac/CryptHmacSha1.c      |   9 +-
 .../Library/BaseCryptLib/Hmac/CryptHmacSha256.c    |   8 +-
 CryptoPkg/Library/Include/CrtLibSupport.h          |  11 +
 CryptoPkg/Library/Include/openssl/opensslconf.h    |  54 +++-
 CryptoPkg/Library/Include/sys/syscall.h            |   9 +
 CryptoPkg/Library/IntrinsicLib/Ia32/MathFtol.c     |  22 ++
 CryptoPkg/Library/IntrinsicLib/IntrinsicLib.inf    |   4 +-
 CryptoPkg/Library/OpensslLib/OpensslLib.inf        |  63 +++-
 CryptoPkg/Library/OpensslLib/OpensslLibCrypto.inf  |  54 +++-
 CryptoPkg/Library/OpensslLib/buildinf.h            |   2 +
 CryptoPkg/Library/OpensslLib/openssl               |   2 +-
 CryptoPkg/Library/OpensslLib/ossl_store.c          |  17 ++
 CryptoPkg/Library/OpensslLib/process_files.pl      |  11 +-
 CryptoPkg/Library/OpensslLib/rand_pool.c           | 339 +++++++++++++++++++++
 15 files changed, 564 insertions(+), 49 deletions(-)
 create mode 100644 CryptoPkg/Library/Include/sys/syscall.h
 create mode 100644 CryptoPkg/Library/IntrinsicLib/Ia32/MathFtol.c
 create mode 100644 CryptoPkg/Library/OpensslLib/ossl_store.c
 create mode 100644 CryptoPkg/Library/OpensslLib/rand_pool.c

-- 
2.7.4


-=-=-=-=-=-=-=-=-=-=-=-
Groups.io Links: You receive all messages sent to this group.

View/Reply Online (#40500): https://edk2.groups.io/g/devel/message/40500
Mute This Topic: https://groups.io/mt/31606972/1813853
Group Owner: devel+owner at edk2.groups.io
Unsubscribe: https://edk2.groups.io/g/devel/unsub  [edk2-devel-archive at redhat.com]
-=-=-=-=-=-=-=-=-=-=-=-