Tianocore/edk2.git/CryptoPkg/Library/MbedTlsLib, branch dependabot/github_actions/actions/github-script-9EDK II (mirror)https://git.radix-linux.su/Tianocore/edk2.git/atom?h=dependabot%2Fgithub_actions%2Factions%2Fgithub-script-92026-04-27T02:11:29+00:00CryptoPkg/Library/MbedTlsLib: Update mbedtls submodule to v3.6.62026-04-27T02:11:29+00:00Richard Lyurichard.lyu@suse.com2026-04-23T06:54:19+00:00urn:sha1:7e9eb04d71adc622a3c5d34ebf2ca05ff25d684f
Update the mbedtls submodule from v3.6.5 to v3.6.6 to mitigate
the CVEs CVE-2026-25833, CVE-2026-25834, CVE-2026-25835
CVE-2026-34874.
Signed-off-by: Richard Lyu <richard.lyu@suse.com>
CryptoPkg: Add CLANGPDB AArch64 Support2026-01-15T17:10:46+00:00Oliver Smith-Dennyosde@microsoft.com2025-12-17T23:04:12+00:00urn:sha1:1f33246fe92f49a8b2abda99ff11e35a06bb5b8f
CryptoPkg needed various updates to support CLANGPDB AARCH64:
- Scope a feature PCD to IA32/X64 only
- Ensure that OpenSSL and MbedTls have the Windows defines unset so
they don't try to build for Windows instead of UEFI
Signed-off-by: Oliver Smith-Denny <osde@microsoft.com>
CryptoPkg/Library/MbedTlsLib: Undefined _MSC_VER for GCC Family2025-12-24T03:36:31+00:00Michael D Kinneymichael.d.kinney@intel.com2025-12-07T16:47:15+00:00urn:sha1:16669a19615714ae572b8240b319476342d550be
Update GCC Family to undefined _MSC_VER to match settings used
by other compilers. This addresses clang compatibility issues
for host-based unit test builds.
Signed-off-by: Michael D Kinney <michael.d.kinney@intel.com>
CryptoPkg: Override mbedtls_config header2025-11-24T13:10:50+00:00Longhaox Leelonghaox.lee@intel.com2025-11-14T07:55:23+00:00urn:sha1:77f21b70fdd530aabc6a3515deeb6b0f98f1adc8
1.Defended MBEDTLS_PLATFORM_MS_TIME_ALT
use alternative implement.
2.Defended MBEDTLS_TEST_SW_INET_PTON
use software version INET_PTON, not depend on OS.
REF: https://github.com/tianocore/edk2/issues/11605
Signed-off-by: Longhaox Lee <longhaox.lee@intel.com>
CryptoPkg: EDK2 code update for Mbedtls 3.6.5.2025-11-24T13:10:50+00:00Longhaox Leelonghaox.lee@intel.com2025-11-13T07:04:28+00:00urn:sha1:c2147ed33ac39164b91e9449c7e097956703124c
1. mbedtls_config.h header sync with 3.6.5 .
2. Implement mbedtls_ms_time() Get time in milliseconds.
3. Covert some CRT library to EDK Implement and CRT defined.
4. Added and remove file to sync.
REF: https://github.com/tianocore/edk2/issues/11605
Signed-off-by: Longhaox Lee <longhaox.lee@intel.com>
CryptoPkg: Update mbedtls submodule for EDKII2025-11-24T13:10:50+00:00Longhaox Leelonghaox.lee@intel.com2025-10-13T08:40:15+00:00urn:sha1:61f66314f4f74b3ed1d3639918aea1d1b1d4a4e1
Update mbedtls submodule from 3.3.0 to 3.6.5 in CryptoPkg.
REF: https://github.com/tianocore/edk2/issues/11605
Signed-off-by: Longhaox Lee <longhaox.lee@intel.com>
CryptoPkg: Fix build of MbedTlsLib2025-10-10T02:58:38+00:00Nate DeSimonenathaniel.l.desimone@intel.com2025-10-08T18:02:01+00:00urn:sha1:0070fd1aec65caafda40466f433580c340412438
Fixes build failures caused by __USE_MINGW_ANSI_STDIO not being defined when
building with CLANG.
Signed-off-by: Nate DeSimone <nathaniel.l.desimone@intel.com>
CryptoPkg: Drop ARM32 Support2025-09-25T22:04:10+00:00Oliver Smith-Dennyosde@microsoft.com2025-09-15T15:50:44+00:00urn:sha1:2ba9441e0b2222d81a186c0742e98c3196371303
edk2 is dropping support for the ARM32 architecture. This
commit removes ARM32 code from CryptoPkg. This also drops
irrelevant VALID_ARCHITECTURES comments from infs that are
not arch specific.
Signed-off-by: Oliver Smith-Denny <osde@microsoft.com>
CryptoPkg: Disable the security risk ciphers.2025-07-03T11:11:59+00:00INDIA\kanagavelskanagavels@ami.com2025-06-19T07:46:55+00:00urn:sha1:c3bf98f265b5bd7adc1ef889885fd398d6cbe7a5
REF:https://github.com/tianocore/edk2/issues/11040
Since the below mentioned ciphers has a security risks,
Disable
MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
MBEDTLS_SSL_RENEGOTIATION
MBEDTLS_DHM_C
Enable
MBEDTLS_SSL_DTLS_ANTI_REPLAY
MBEDTLS_SSL_DTLS_HELLO_VERIFY.
Signed-off-by: Kanagavel S <kanagavels@ami.com>
CryptoPkg/MbedTls CLANGDWARF: Replace outdated CLANG3x references2024-09-23T06:11:25+00:00Ard Biesheuvelardb@kernel.org2024-09-11T10:40:18+00:00urn:sha1:89309fee81c4c6ff08a42578bf0d5e6d50cf9b56
The CLANG35 and CLANG38 toolchain specifiers have been phased out, and
replaced with CLANGDWARF. Update the MbedTls library definitions
accordingly.
While at it, switch to the gnu99 C dialect, which is a better match with
GCC in C99 mode, which includes GCC specific GNU extensions.
Signed-off-by: Ard Biesheuvel <ardb@kernel.org>