]> git.proxmox.com Git - mirror_edk2.git/blame - CryptoPkg/Library/OpensslLib/Patch-HOWTO.txt
Fix a bug in OpensslLib that PKCS7_verify will use over 8k stack space.
[mirror_edk2.git] / CryptoPkg / Library / OpensslLib / Patch-HOWTO.txt
CommitLineData
97f98500
HT
1\r
2================================================================================\r
3 Introduction\r
4================================================================================\r
5 OpenSSL is a well-known open source implementation of SSL and TLS protocols.\r
6The core library implements the basic cryptographic functions and provides various\r
7utility functions. The OpenSSL library is widely used in variety of security \r
8products development as base crypto provider. (See http://www.openssl.org for more \r
9information for OpenSSL).\r
10 UEFI (Unified Extensible Firmware Interface) is a specification detailing the \r
11interfaces between OS and platform firmware. Several security features were \r
12introduced (e.g. Authenticated Variable Service, Driver Signing, etc) from UEFI \r
132.2 (http://www.uefi.org). These security features highly depends on the \r
14cryptography. This patch will enable openssl building under UEFI environment.\r
15\r
16\r
17================================================================================\r
18 OpenSSL-Version\r
19================================================================================\r
53591743 20 Current supported OpenSSL version for UEFI Crypto Library is 0.9.8w.\r
21 http://www.openssl.org/source/openssl-0.9.8w.tar.gz\r
97f98500
HT
22\r
23\r
24================================================================================\r
25 HOW to Install Openssl for UEFI Building\r
26================================================================================\r
53591743 271. Download OpenSSL 0.9.8w from official website:\r
28 http://www.openssl.org/source/openssl-0.9.8w.tar.gz\r
97f98500 29\r
53591743 30 NOTE: Some web browsers may rename the downloaded TAR file to openssl-0.9.8w.tar.tar.\r
31 When you do the download, rename the "openssl-0.9.8w.tar.tar" to\r
32 "openssl-0.9.8w.tar.gz" or rename the local downloaded file with ".tar.tar"\r
97f98500
HT
33 extension to ".tar.gz".\r
34\r
53591743 352. Extract TAR into CryptoPkg/Library/OpenSslLib/openssl-0.9.8w\r
97f98500
HT
36\r
37 NOTE: If you use WinZip to unpack the openssl source in Windows, please \r
38 uncheck the WinZip smart CR/LF conversion option (WINZIP: Options --> \r
39 Configuration --> Miscellaneous --> "TAR file smart CR/LF conversion").\r
40 \r
53591743 413. Apply this patch: EDKII_openssl-0.9.8w.patch, and make installation\r
97f98500
HT
42\r
43 For Windows Environment:\r
44 ------------------------\r
45 1) Make sure the patch utility has been installed in your machine.\r
46 Install Cygwin or get the patch utility binary from \r
47 http://gnuwin32.sourceforge.net/packages/patch.htm\r
53591743 48 2) cd $(WORKSPACE)\CryptoPkg\Library\OpensslLib\openssl-0.9.8w\r
49 3) patch -p0 -i ..\EDKII_openssl-0.9.8w.patch\r
97f98500 50 4) cd ..\r
53591743 51 5) Install.cmd\r
97f98500
HT
52\r
53 For Linux* Environment:\r
54 -----------------------\r
55 1) Make sure the patch utility has been installed in your machine.\r
56 Patch utility is available from http://directory.fsf.org/project/patch/\r
53591743 57 2) cd $(WORKSPACE)/CryptoPkg/Library/OpensslLib/openssl-0.9.8w\r
58 3) patch -p0 -i ../EDKII_openssl-0.9.8w.patch\r
97f98500 59 4) cd ..\r
53591743 60 5) ./Install.sh\r
97f98500 61\r