X-Git-Url: https://git.proxmox.com/?p=mirror_edk2.git;a=blobdiff_plain;f=CryptoPkg%2FLibrary%2FOpensslLib%2FPatch-HOWTO.txt;h=7db1451d0e7f2321b2f48172b9937f789ea28de2;hp=7641da8e4aff285006683a9d3d204ffe163727f4;hb=179bcd31f320111adde639ebc3f69170be254c73;hpb=5359174326a48e8392457e43484da84361cf7560 diff --git a/CryptoPkg/Library/OpensslLib/Patch-HOWTO.txt b/CryptoPkg/Library/OpensslLib/Patch-HOWTO.txt index 7641da8e4a..7db1451d0e 100644 --- a/CryptoPkg/Library/OpensslLib/Patch-HOWTO.txt +++ b/CryptoPkg/Library/OpensslLib/Patch-HOWTO.txt @@ -4,49 +4,49 @@ ================================================================================ OpenSSL is a well-known open source implementation of SSL and TLS protocols. The core library implements the basic cryptographic functions and provides various -utility functions. The OpenSSL library is widely used in variety of security -products development as base crypto provider. (See http://www.openssl.org for more +utility functions. The OpenSSL library is widely used in variety of security +products development as base crypto provider. (See http://www.openssl.org for more information for OpenSSL). - UEFI (Unified Extensible Firmware Interface) is a specification detailing the -interfaces between OS and platform firmware. Several security features were -introduced (e.g. Authenticated Variable Service, Driver Signing, etc) from UEFI -2.2 (http://www.uefi.org). These security features highly depends on the + UEFI (Unified Extensible Firmware Interface) is a specification detailing the +interfaces between OS and platform firmware. Several security features were +introduced (e.g. Authenticated Variable Service, Driver Signing, etc) from UEFI +2.2 (http://www.uefi.org). These security features highly depends on the cryptography. This patch will enable openssl building under UEFI environment. ================================================================================ OpenSSL-Version ================================================================================ - Current supported OpenSSL version for UEFI Crypto Library is 0.9.8w. - http://www.openssl.org/source/openssl-0.9.8w.tar.gz + Current supported OpenSSL version for UEFI Crypto Library is 1.0.2g. + http://www.openssl.org/source/openssl-1.0.2g.tar.gz ================================================================================ HOW to Install Openssl for UEFI Building ================================================================================ -1. Download OpenSSL 0.9.8w from official website: - http://www.openssl.org/source/openssl-0.9.8w.tar.gz +1. Download OpenSSL 1.0.2g from official website: + http://www.openssl.org/source/openssl-1.0.2g.tar.gz - NOTE: Some web browsers may rename the downloaded TAR file to openssl-0.9.8w.tar.tar. - When you do the download, rename the "openssl-0.9.8w.tar.tar" to - "openssl-0.9.8w.tar.gz" or rename the local downloaded file with ".tar.tar" + NOTE: Some web browsers may rename the downloaded TAR file to openssl-1.0.2g.tar.tar. + When you do the download, rename the "openssl-1.0.2g.tar.tar" to + "openssl-1.0.2g.tar.gz" or rename the local downloaded file with ".tar.tar" extension to ".tar.gz". -2. Extract TAR into CryptoPkg/Library/OpenSslLib/openssl-0.9.8w +2. Extract TAR into CryptoPkg/Library/OpenSslLib/openssl-1.0.2g - NOTE: If you use WinZip to unpack the openssl source in Windows, please - uncheck the WinZip smart CR/LF conversion option (WINZIP: Options --> + NOTE: If you use WinZip to unpack the openssl source in Windows, please + uncheck the WinZip smart CR/LF conversion option (WINZIP: Options --> Configuration --> Miscellaneous --> "TAR file smart CR/LF conversion"). - -3. Apply this patch: EDKII_openssl-0.9.8w.patch, and make installation + +3. Apply this patch: EDKII_openssl-1.0.2g.patch, and make installation For Windows Environment: ------------------------ 1) Make sure the patch utility has been installed in your machine. - Install Cygwin or get the patch utility binary from + Install Cygwin or get the patch utility binary from http://gnuwin32.sourceforge.net/packages/patch.htm - 2) cd $(WORKSPACE)\CryptoPkg\Library\OpensslLib\openssl-0.9.8w - 3) patch -p0 -i ..\EDKII_openssl-0.9.8w.patch + 2) cd $(WORKSPACE)\CryptoPkg\Library\OpensslLib\openssl-1.0.2g + 3) patch -p1 -i ..\EDKII_openssl-1.0.2g.patch 4) cd .. 5) Install.cmd @@ -54,8 +54,8 @@ cryptography. This patch will enable openssl building under UEFI environment. ----------------------- 1) Make sure the patch utility has been installed in your machine. Patch utility is available from http://directory.fsf.org/project/patch/ - 2) cd $(WORKSPACE)/CryptoPkg/Library/OpensslLib/openssl-0.9.8w - 3) patch -p0 -i ../EDKII_openssl-0.9.8w.patch + 2) cd $(WORKSPACE)/CryptoPkg/Library/OpensslLib/openssl-1.0.2g + 3) patch -p1 -i ../EDKII_openssl-1.0.2g.patch 4) cd .. 5) ./Install.sh