efi-boot-shim.git/Cryptlib/OpenSSL/Makefile, branch 12

Cryptlib: remove DES

2017-04-11T14:42:19+00:00

Disable DES completely since it's already old and insecure. This makes MokManager not support the DES based password hash but probably no one is using it. Signed-off-by: Gary Lin

Cryptlib: Remove MD4

2017-04-11T14:42:19+00:00

MD4 is known to be insecure and shim never uses it. Signed-off-by: Gary Lin

Cryptlib/OpenSSL: update to openssl 1.1.0e

2017-04-11T14:42:18+00:00

- Delete the old openssl files and use the script to copy the new files - Add "-DNO_SYSLOG" to CFLAGS and add crypto/include to the include path Signed-off-by: Gary Lin

Update to openssl to 1.0.2e

2016-09-06T19:05:34+00:00

Also update Cryptlib to edk2 r19218 - Undefine NO_BUILTIN_VA_FUNCS in Cryptlib/OpenSSL/ for x86_64 to use the gcc builtins and remove all EFIAPI from the functions - Move the most of defines into the headers instead of Makefile - Remove the global variable 'timeval' - Remove the unused code: crypto/pqueue/* and crypto/ts/* - Include bn.h in MokManager.c due to the changes in openssl Signed-off-by: Gary Lin

Cryptlib: Define the va functions for EFIAPI

2015-11-09T14:50:50+00:00

It turned out that my previous crash fix(*) was wrong. We actually always used the gcc built-in va functions instead of the "real" va functions for EFIAPI, and we are just lucky that ERR_add_error_data didn't crash before. This commit copies the va functions from MdePkg/Include/Base.h in edk2 and introdues NO_BUILTIN_VA_FUNCS for x86_64, so that all the x86_64 build will adopt the new va functions. For safety, I also added EFIAPI to all the functions which use va_* to avoid the potential trouble. (*) a7f4b26cc35204165bd04e75c34e8e7aa2a87ecc Signed-off-by: Gary Ching-Pang Lin

Specify the gnu89 standard

2015-07-28T15:46:38+00:00

According to the gcc5 porting guideline (*), gcc5 defaults to -std=gnu11 instead of -std=gnu89. Append -std=gnu89 to CFLAGS to avoid the potential problems. (*) https://gcc.gnu.org/gcc-5/porting_to.html Based on the patch from Cristian Rodriguez Signed-off-by: Gary Ching-Pang Lin

Update openssl to 1.0.2d

2015-07-28T15:46:38+00:00

Also update Cryptlib to edk2 r17731 Signed-off-by: Gary Ching-Pang Lin

gcc 5.0 changes some include bits, so copy what arm does on x86.

2015-04-13T23:55:25+00:00

Basically they messed around with stdarg some and now we need to do it the other way. Signed-off-by: Peter Jones

Add support for 32-bit ARM

2014-08-12T14:54:05+00:00

This adds support for building the shim for a 32-bit ARM UEFI environment. Signed-off-by: Ard Biesheuvel

Add support for 64-bit ARM (AArch64)

2014-08-12T14:54:05+00:00

This adds support for building the shim for a 64-bit ARM UEFI environment. Signed-off-by: Ard Biesheuvel