projects / mirror_edk2.git / blame
| Commit | Line | Data |
|---|---|---|
| 97f98500 HT |
1 | \r |
| 2 | ================================================================================\r | |
| 3 | Introduction\r | |
| 4 | ================================================================================\r | |
| 5 | OpenSSL is a well-known open source implementation of SSL and TLS protocols.\r | |
| 6 | The core library implements the basic cryptographic functions and provides various\r | |
| 73c54a58 QL |
7 | utility functions. The OpenSSL library is widely used in variety of security\r |
| 8 | products development as base crypto provider. (See http://www.openssl.org for more\r | |
| 97f98500 | 9 | information for OpenSSL).\r |
| 73c54a58 QL |
10 | UEFI (Unified Extensible Firmware Interface) is a specification detailing the\r |
| 11 | interfaces between OS and platform firmware. Several security features were\r | |
| 12 | introduced (e.g. Authenticated Variable Service, Driver Signing, etc) from UEFI\r | |
| 13 | 2.2 (http://www.uefi.org). These security features highly depends on the\r | |
| 97f98500 HT |
14 | cryptography. This patch will enable openssl building under UEFI environment.\r |
| 15 | \r | |
| 16 | \r | |
| 17 | ================================================================================\r | |
| 18 | OpenSSL-Version\r | |
| 19 | ================================================================================\r | |
| ec3a1a11 QL |
20 | Current supported OpenSSL version for UEFI Crypto Library is 1.0.2g.\r |
| 21 | http://www.openssl.org/source/openssl-1.0.2g.tar.gz\r | |
| 97f98500 HT |
22 | \r |
| 23 | \r | |
| 24 | ================================================================================\r | |
| 25 | HOW to Install Openssl for UEFI Building\r | |
| 26 | ================================================================================\r | |
| ec3a1a11 QL |
27 | 1. Download OpenSSL 1.0.2g from official website:\r |
| 28 | http://www.openssl.org/source/openssl-1.0.2g.tar.gz\r | |
| 97f98500 | 29 | \r |
| ec3a1a11 QL |
30 | NOTE: Some web browsers may rename the downloaded TAR file to openssl-1.0.2g.tar.tar.\r |
| 31 | When you do the download, rename the "openssl-1.0.2g.tar.tar" to\r | |
| 32 | "openssl-1.0.2g.tar.gz" or rename the local downloaded file with ".tar.tar"\r | |
| 97f98500 HT |
33 | extension to ".tar.gz".\r |
| 34 | \r | |
| ec3a1a11 | 35 | 2. Extract TAR into CryptoPkg/Library/OpenSslLib/openssl-1.0.2g\r |
| 97f98500 | 36 | \r |
| 73c54a58 QL |
37 | NOTE: If you use WinZip to unpack the openssl source in Windows, please\r |
| 38 | uncheck the WinZip smart CR/LF conversion option (WINZIP: Options -->\r | |
| 97f98500 | 39 | Configuration --> Miscellaneous --> "TAR file smart CR/LF conversion").\r |
| 73c54a58 | 40 | \r |
| ec3a1a11 | 41 | 3. Apply this patch: EDKII_openssl-1.0.2g.patch, and make installation\r |
| 97f98500 HT |
42 | \r |
| 43 | For Windows Environment:\r | |
| 44 | ------------------------\r | |
| 45 | 1) Make sure the patch utility has been installed in your machine.\r | |
| 73c54a58 | 46 | Install Cygwin or get the patch utility binary from\r |
| 97f98500 | 47 | http://gnuwin32.sourceforge.net/packages/patch.htm\r |
| ec3a1a11 QL |
48 | 2) cd $(WORKSPACE)\CryptoPkg\Library\OpensslLib\openssl-1.0.2g\r |
| 49 | 3) patch -p1 -i ..\EDKII_openssl-1.0.2g.patch\r | |
| 97f98500 | 50 | 4) cd ..\r |
| 53591743 | 51 | 5) Install.cmd\r |
| 97f98500 HT |
52 | \r |
| 53 | For Linux* Environment:\r | |
| 54 | -----------------------\r | |
| 55 | 1) Make sure the patch utility has been installed in your machine.\r | |
| 56 | Patch utility is available from http://directory.fsf.org/project/patch/\r | |
| ec3a1a11 QL |
57 | 2) cd $(WORKSPACE)/CryptoPkg/Library/OpensslLib/openssl-1.0.2g\r |
| 58 | 3) patch -p1 -i ../EDKII_openssl-1.0.2g.patch\r | |
| 97f98500 | 59 | 4) cd ..\r |
| 53591743 | 60 | 5) ./Install.sh\r |
| 97f98500 | 61 | \r |