Laszlo Ersek 823005621e CryptoPkg/OpensslLib: introduce OpensslLibCrypto instance ... Commit 32387e0081 ("CryptoPkg: Enable ssl build in OpensslLib directly", 2016-12-14) pulls OpenSSL's libssl files into the "OpensslLib.inf" library instance unconditionally. If a platform doesn't include the TLS modules, such as - CryptoPkg/Library/TlsLib/TlsLib.inf - NetworkPkg/TlsAuthConfigDxe/TlsAuthConfigDxe.inf - NetworkPkg/TlsDxe/TlsDxe.inf then the platform never actually uses the libssl functionality that gets built into "OpensslLib.inf". Tomas Hoger from Red Hat Product Security tells me that security evaluation is less demanding if we can actually *exclude* the libssl files from such OVMF builds that don't specify -D TLS_ENABLE (rather than just trust modules not to call libssl functions if we don't specify -D TLS_ENABLE). This patch introduces a parallel OpensslLib instance called "OpensslLibCrypto" that is appropriate for platform builds without TLS enablement. It does not build C source files in vain, and it eases security review -- all libssl vulnerabilities can be excluded at once. "OpensslLibCrypto.inf" is created as a copy of "OpensslLib.inf", modifying the BASE_NAME, MODULE_UNI_FILE and FILE_GUID defines. "process_files.sh" is extended to auto-generate the list of OpenSSL files for both library instances accordingly. This list is updated in "OpensslLibCrypto.inf" at once. "OpensslLibCrypto.uni" is introduced as a copy of "OpensslLib.uni", highlighting the difference. Cc: Ard Biesheuvel <ard.biesheuvel@linaro.org> Cc: Gary Lin <glin@suse.com> Cc: Jiaxin Wu <jiaxin.wu@intel.com> Cc: Jordan Justen <jordan.l.justen@intel.com> Cc: Qin Long <qin.long@intel.com> Cc: Ruiyu Ni <ruiyu.ni@intel.com> Cc: Ting Ye <ting.ye@intel.com> Cc: Tomas Hoger <thoger@redhat.com> Contributed-under: TianoCore Contribution Agreement 1.0 Signed-off-by: Laszlo Ersek <lersek@redhat.com> Reviewed-by: Qin Long <qin.long@intel.com>		2017-02-25 14:55:55 +01:00
..
Application/Cryptest	CryptoPkg: Add PKCS5 PBKDF2 interface for password derivation.	2016-11-02 23:19:01 +08:00
CryptRuntimeDxe	CryptoPkg: Convert all .uni files to utf-8	2015-12-15 04:51:26 +00:00
Include	CryptoPkg: Add new TlsLib library	2016-12-22 20:33:22 +08:00
Library	CryptoPkg/OpensslLib: introduce OpensslLibCrypto instance	2017-02-25 14:55:55 +01:00
.gitignore	CryptoPkg: add .gitignore for OpenSSL source files	2015-06-16 15:09:19 +00:00
Contributions.txt	*/Contributions.txt: Update example email address	2015-02-03 17:29:14 +00:00
CryptoPkg.dec	CryptoPkg: Add new TlsLib library	2016-12-22 20:33:22 +08:00
CryptoPkg.dsc	CryptoPkg: Add new TlsLib library	2016-12-22 20:33:22 +08:00
CryptoPkg.uni	CryptoPkg: Convert all .uni files to utf-8	2015-12-15 04:51:26 +00:00
CryptoPkgExtra.uni	CryptoPkg: Convert all .uni files to utf-8	2015-12-15 04:51:26 +00:00
License.txt	Update copyright format	2012-04-24 06:49:39 +00:00