Replace SHA1 with SHA256 digest algorithm.

[mirror_edk2.git] / CryptoPkg / Library / OpensslLib / EDKII_openssl-0.9.8l.patch

diff --git a/CryptoPkg/Library/OpensslLib/EDKII_openssl-0.9.8l.patch b/CryptoPkg/Library/OpensslLib/EDKII_openssl-0.9.8l.patch
index 2ff6ee0f8cd6d0854c4fe7492e381057a82efebe..231ec6e23a5a43698b28076edad29b0d49329fff 100644 (file)
--- a/CryptoPkg/Library/OpensslLib/EDKII_openssl-0.9.8l.patch
+++ b/CryptoPkg/Library/OpensslLib/EDKII_openssl-0.9.8l.patch
@@ -24,6 +24,20 @@
  #endif /* OPENSSL_NO_STDIO */\r
  \r
  #endif /* HEADER_BSS_FILE_C */\r
+--- crypto/pkcs7/pk7_smime.c   2009-03-15 21:36:02.000000000 +0800\r
++++ crypto/pkcs7/pk7_smime.c   2011-09-13 14:11:36.019454700 +0800\r
+@@ -88,7 +88,10 @@\r
+       if (!PKCS7_content_new(p7, NID_pkcs7_data))\r
+               goto err;\r
+ \r
+-      if (!(si = PKCS7_add_signature(p7,signcert,pkey,EVP_sha1()))) {\r
++  /* \r
++    NOTE: Update to SHA-256 digest algorithm for UEFI version.\r
++  */\r
++      if (!(si = PKCS7_add_signature(p7,signcert,pkey,EVP_sha256()))) {\r
+               PKCS7err(PKCS7_F_PKCS7_SIGN,PKCS7_R_PKCS7_ADD_SIGNATURE_ERROR);\r
+               goto err;\r
+       }\r
 --- crypto/rand/rand_egd.c     Thu Jan 15 17:14:12 1970\r
 +++ crypto/rand/rand_egd.c     Thu Jan 15 17:14:12 1970\r
 @@ -95,7 +95,7 @@\r