CryptoPkg/OpensslLib: Add new OpenSSL-HOWTO document.

Add one new OpenSSL-HOWTO.txt to introduce how to clone / download
the latest OpenSSL release source for build.
ALso update buildinf.h to reflect the latest update time.

Cc: Ting Ye <ting.ye@intel.com>
Cc: Laszlo Ersek <lersek@redhat.com>
Cc: Ard Biesheuvel <ard.biesheuvel@linaro.org>
Cc: Gary Lin <glin@suse.com>
Cc: Ronald Cron <ronald.cron@arm.com>
Contributed-under: TianoCore Contribution Agreement 1.0
Signed-off-by: David Woodhouse <dwmw2@infradead.org>
Signed-off-by: Qin Long <qin.long@intel.com>
Reviewed-by: Ting Ye <ting.ye@intel.com>
Acked-by: Laszlo Ersek <lersek@redhat.com>
Tested-by: Laszlo Ersek <lersek@redhat.com>
Acked-by: Gary Lin <glin@suse.com>
Tested-by: Gary Lin <glin@suse.com>

diff --git a/CryptoPkg/Library/OpensslLib/OpenSSL-HOWTO.txt b/CryptoPkg/Library/OpensslLib/OpenSSL-HOWTO.txt
new file mode 100644 (file)
index 0000000..e8b0bab
--- /dev/null
+++ b/CryptoPkg/Library/OpensslLib/OpenSSL-HOWTO.txt
@@ -0,0 +1,53 @@
+\r
+=============================================================================\r
+                             Introduction\r
+=============================================================================\r
+  OpenSSL is a well-known open source implementation of SSL/TLS protocols.\r
+The core library implements the cryptographic and SSL/TLS functions and\r
+also provides various utility functions. The OpenSSL library is widely used\r
+in variety of security products development as base crypto provider.\r
+(See http://www.openssl.org/ for more information about OpenSSL).\r
+  UEFI (Unified Extensible Firmware Interface) is a specification detailing\r
+the interfaces between OS and platform firmware. Several security features\r
+were introduced (e.g. Authenticated Variable Service, Driver Signing, etc)\r
+from UEFI 2.2 (http://www.uefi.org/). These security features highly depend\r
+on the cryptography.\r
+  This HOWTO documents OpenSSL building under UEFI/EDKII environment.\r
+\r
+=============================================================================\r
+                             OpenSSL-Version\r
+=============================================================================\r
+  EDKII supports building with the latest release of OpenSSL.\r
+  The latest official release is OpenSSL-1.1.0e (Released at 2017-Feb-16).\r
+  NOTE: Only latest release version was fully validated.\r
+        And no guarantees on build & functionality if using other versions.\r
+\r
+=============================================================================\r
+                      HOW to Install OpenSSL for UEFI Building\r
+=============================================================================\r
+1. Clone the latest official OpenSSL release into the directory\r
+     CryptoPkg/Library/OpensslLib/openssl/\r
+\r
+   Use OpenSSL-1.1.0e release as one example:\r
+     (OpenSSL_1_1_0e below is the tag name for the OpenSSL-1.1.0e release)\r
+     > cd CryptoPkg/Library/OpensslLib\r
+     > git clone -b OpenSSL_1_1_0e https://github.com/openssl/openssl openssl\r
+     or\r
+     > git clone https://github.com/openssl/openssl openssl\r
+     > git checkout OpenSSL_1_1_0e\r
+Or\r
+2. Download the latest OpenSSL release package from the official website:\r
+     https://www.openssl.org/source/\r
+   and unpack the OpenSSL source into:\r
+     CryptoPkg/Library/OpensslLib/openssl/\r
+\r
+=============================================================================\r
+                      About process_files.pl\r
+=============================================================================\r
+  "process_files.pl" is one Perl script which runs the OpenSSL Configure,\r
+then processes the resulting file list into our local OpensslLib.inf and\r
+OpensslLibCrypto.inf.\r
+  This only needs to be done once by the maintainer / developer when\r
+updating to a new version of OpenSSL (or changing options, etc.).\r
+Normal users do not need do this, since the results are already stored in\r
+the EDKII git repository for them.\r

diff --git a/CryptoPkg/Library/OpensslLib/buildinf.h b/CryptoPkg/Library/OpensslLib/buildinf.h
index 673bf787c1973f1793c33cabb59027a2901d78de..3d967d2a8616cbee98fb5b33fad7b93a6167fd14 100644 (file)
--- a/CryptoPkg/Library/OpensslLib/buildinf.h
+++ b/CryptoPkg/Library/OpensslLib/buildinf.h
@@ -1,2 +1,2 @@
 #define PLATFORM  "UEFI"\r
-#define DATE      "Mon Mar 8 14:17:05 PDT 2010"\r
+#define DATE      "Tues Mar 21 01:23:45 PDT 2017"\r