| 1 |
|
|---|
| 2 | =============================================================================
|
|---|
| 3 | Introduction
|
|---|
| 4 | =============================================================================
|
|---|
| 5 | OpenSSL is a well-known open source implementation of SSL/TLS protocols.
|
|---|
| 6 | The core library implements the cryptographic and SSL/TLS functions and
|
|---|
| 7 | also provides various utility functions. The OpenSSL library is widely used
|
|---|
| 8 | in variety of security products development as base crypto provider.
|
|---|
| 9 | (See http://www.openssl.org/ for more information about OpenSSL).
|
|---|
| 10 | UEFI (Unified Extensible Firmware Interface) is a specification detailing
|
|---|
| 11 | the interfaces between OS and platform firmware. Several security features
|
|---|
| 12 | were introduced (e.g. Authenticated Variable Service, Driver Signing, etc)
|
|---|
| 13 | from UEFI 2.2 (http://www.uefi.org/). These security features highly depend
|
|---|
| 14 | on the cryptography.
|
|---|
| 15 | This HOWTO documents OpenSSL building under UEFI/EDKII environment.
|
|---|
| 16 |
|
|---|
| 17 | =============================================================================
|
|---|
| 18 | OpenSSL-Version
|
|---|
| 19 | =============================================================================
|
|---|
| 20 | EDKII supports building with the latest release of OpenSSL.
|
|---|
| 21 | NOTE: Only latest release version was fully validated.
|
|---|
| 22 | And no guarantees on build & functionality if using other versions.
|
|---|
| 23 |
|
|---|
| 24 | =============================================================================
|
|---|
| 25 | HOW to Install OpenSSL for UEFI Building
|
|---|
| 26 | =============================================================================
|
|---|
| 27 | OpenSSL repository was added as one submodule of EDKII project. Please
|
|---|
| 28 | refer to edk2/Readme.md for how to clone the code.
|
|---|
| 29 |
|
|---|
| 30 | =============================================================================
|
|---|
| 31 | About process_files.pl
|
|---|
| 32 | =============================================================================
|
|---|
| 33 | "process_files.pl" is one Perl script which runs the OpenSSL Configure,
|
|---|
| 34 | then processes the resulting file list into our local OpensslLib.inf and
|
|---|
| 35 | OpensslLibCrypto.inf.
|
|---|
| 36 | This only needs to be done once by the maintainer / developer when
|
|---|
| 37 | updating to a new version of OpenSSL (or changing options, etc.).
|
|---|
| 38 | Normal users do not need do this, since the results are already stored in
|
|---|
| 39 | the EDKII git repository for them.
|
|---|
