mirror of https://github.com/acidanthera/audk.git
62 lines
3.0 KiB
Plaintext
62 lines
3.0 KiB
Plaintext
|
|
================================================================================
|
|
Introduction
|
|
================================================================================
|
|
OpenSSL is a well-known open source implementation of SSL and TLS protocols.
|
|
The core library implements the basic cryptographic functions and provides various
|
|
utility functions. The OpenSSL library is widely used in variety of security
|
|
products development as base crypto provider. (See http://www.openssl.org for more
|
|
information for OpenSSL).
|
|
UEFI (Unified Extensible Firmware Interface) is a specification detailing the
|
|
interfaces between OS and platform firmware. Several security features were
|
|
introduced (e.g. Authenticated Variable Service, Driver Signing, etc) from UEFI
|
|
2.2 (http://www.uefi.org). These security features highly depends on the
|
|
cryptography. This patch will enable openssl building under UEFI environment.
|
|
|
|
|
|
================================================================================
|
|
OpenSSL-Version
|
|
================================================================================
|
|
Current supported OpenSSL version for UEFI Crypto Library is 1.0.2h.
|
|
http://www.openssl.org/source/openssl-1.0.2h.tar.gz
|
|
|
|
|
|
================================================================================
|
|
HOW to Install Openssl for UEFI Building
|
|
================================================================================
|
|
1. Download OpenSSL 1.0.2h from official website:
|
|
http://www.openssl.org/source/openssl-1.0.2h.tar.gz
|
|
|
|
NOTE: Some web browsers may rename the downloaded TAR file to openssl-1.0.2h.tar.tar.
|
|
When you do the download, rename the "openssl-1.0.2h.tar.tar" to
|
|
"openssl-1.0.2h.tar.gz" or rename the local downloaded file with ".tar.tar"
|
|
extension to ".tar.gz".
|
|
|
|
2. Extract TAR into CryptoPkg/Library/OpensslLib/openssl-1.0.2h
|
|
|
|
NOTE: If you use WinZip to unpack the openssl source in Windows, please
|
|
uncheck the WinZip smart CR/LF conversion option (WINZIP: Options -->
|
|
Configuration --> Miscellaneous --> "TAR file smart CR/LF conversion").
|
|
|
|
3. Apply this patch: EDKII_openssl-1.0.2h.patch, and make installation
|
|
|
|
For Windows Environment:
|
|
------------------------
|
|
1) Make sure the patch utility has been installed in your machine.
|
|
Install Cygwin or get the patch utility binary from
|
|
http://gnuwin32.sourceforge.net/packages/patch.htm
|
|
2) cd $(WORKSPACE)\CryptoPkg\Library\OpensslLib\openssl-1.0.2h
|
|
3) patch -p1 -i ..\EDKII_openssl-1.0.2h.patch
|
|
4) cd ..
|
|
5) Install.cmd
|
|
|
|
For Linux* Environment:
|
|
-----------------------
|
|
1) Make sure the patch utility has been installed in your machine.
|
|
Patch utility is available from http://directory.fsf.org/project/patch/
|
|
2) cd $(WORKSPACE)/CryptoPkg/Library/OpensslLib/openssl-1.0.2h
|
|
3) patch -p1 -i ../EDKII_openssl-1.0.2h.patch
|
|
4) cd ..
|
|
5) ./Install.sh
|
|
|