summaryrefslogtreecommitdiff
path: root/CryptoPkg/Library/OpensslLib/Patch-HOWTO.txt
blob: a92e01ae6a35286c61243257f4b74e236ba8334e (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61

================================================================================
                                 Introduction
================================================================================
  OpenSSL is a well-known open source implementation of SSL and TLS protocols.
The core library implements the basic cryptographic functions and provides various
utility functions. The OpenSSL library is widely used in variety of security 
products development as base crypto provider. (See http://www.openssl.org for more 
information for OpenSSL).
  UEFI (Unified Extensible Firmware Interface) is a specification detailing the 
interfaces between OS and platform firmware. Several security features were 
introduced (e.g. Authenticated Variable Service, Driver Signing, etc) from UEFI 
2.2 (http://www.uefi.org). These security features highly depends on the 
cryptography. This patch will enable openssl building under UEFI environment.


================================================================================
                                OpenSSL-Version
================================================================================
  Current supported OpenSSL version for UEFI Crypto Library is 0.9.8zb.
    http://www.openssl.org/source/openssl-0.9.8zb.tar.gz


================================================================================
                      HOW to Install Openssl for UEFI Building
================================================================================
1.  Download OpenSSL 0.9.8zb from official website:
   	http://www.openssl.org/source/openssl-0.9.8zb.tar.gz

    NOTE: Some web browsers may rename the downloaded TAR file to openssl-0.9.8zb.tar.tar.
          When you do the download, rename the "openssl-0.9.8zb.tar.tar" to
          "openssl-0.9.8zb.tar.gz" or rename the local downloaded file with ".tar.tar"
          extension to ".tar.gz".

2.  Extract TAR into CryptoPkg/Library/OpenSslLib/openssl-0.9.8zb

    NOTE: If you use WinZip to unpack the openssl source in Windows, please 
          uncheck the WinZip smart CR/LF conversion option (WINZIP: Options --> 
          Configuration --> Miscellaneous --> "TAR file smart CR/LF conversion").
  
3.  Apply this patch: EDKII_openssl-0.9.8zb.patch, and make installation

    For Windows Environment:
    ------------------------
    1) Make sure the patch utility has been installed in your machine.
       Install Cygwin or get the patch utility binary from 
          http://gnuwin32.sourceforge.net/packages/patch.htm
    2) cd $(WORKSPACE)\CryptoPkg\Library\OpensslLib\openssl-0.9.8zb
    3) patch -p0 -i ..\EDKII_openssl-0.9.8zb.patch
    4) cd ..
    5) Install.cmd

    For Linux* Environment:
    -----------------------
    1) Make sure the patch utility has been installed in your machine.
       Patch utility is available from http://directory.fsf.org/project/patch/
    2) cd $(WORKSPACE)/CryptoPkg/Library/OpensslLib/openssl-0.9.8zb
    3) patch -p0 -i ../EDKII_openssl-0.9.8zb.patch
    4) cd ..
    5) ./Install.sh