Tianocore/edk2.git/CryptoPkg/Library/MbedTlsLib, branch dependabot/github_actions/github/codeql-action-4EDK II (mirror)https://git.radix-linux.su/Tianocore/edk2.git/atom?h=dependabot%2Fgithub_actions%2Fgithub%2Fcodeql-action-42025-10-10T02:58:38+00:00CryptoPkg: Fix build of MbedTlsLib2025-10-10T02:58:38+00:00Nate DeSimonenathaniel.l.desimone@intel.com2025-10-08T18:02:01+00:00urn:sha1:0070fd1aec65caafda40466f433580c340412438
Fixes build failures caused by __USE_MINGW_ANSI_STDIO not being defined when
building with CLANG.
Signed-off-by: Nate DeSimone <nathaniel.l.desimone@intel.com>
CryptoPkg: Drop ARM32 Support2025-09-25T22:04:10+00:00Oliver Smith-Dennyosde@microsoft.com2025-09-15T15:50:44+00:00urn:sha1:2ba9441e0b2222d81a186c0742e98c3196371303
edk2 is dropping support for the ARM32 architecture. This
commit removes ARM32 code from CryptoPkg. This also drops
irrelevant VALID_ARCHITECTURES comments from infs that are
not arch specific.
Signed-off-by: Oliver Smith-Denny <osde@microsoft.com>
CryptoPkg: Disable the security risk ciphers.2025-07-03T11:11:59+00:00INDIA\kanagavelskanagavels@ami.com2025-06-19T07:46:55+00:00urn:sha1:c3bf98f265b5bd7adc1ef889885fd398d6cbe7a5
REF:https://github.com/tianocore/edk2/issues/11040
Since the below mentioned ciphers has a security risks,
Disable
MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
MBEDTLS_SSL_RENEGOTIATION
MBEDTLS_DHM_C
Enable
MBEDTLS_SSL_DTLS_ANTI_REPLAY
MBEDTLS_SSL_DTLS_HELLO_VERIFY.
Signed-off-by: Kanagavel S <kanagavels@ami.com>
CryptoPkg/MbedTls CLANGDWARF: Replace outdated CLANG3x references2024-09-23T06:11:25+00:00Ard Biesheuvelardb@kernel.org2024-09-11T10:40:18+00:00urn:sha1:89309fee81c4c6ff08a42578bf0d5e6d50cf9b56
The CLANG35 and CLANG38 toolchain specifiers have been phased out, and
replaced with CLANGDWARF. Update the MbedTls library definitions
accordingly.
While at it, switch to the gnu99 C dialect, which is a better match with
GCC in C99 mode, which includes GCC specific GNU extensions.
Signed-off-by: Ard Biesheuvel <ardb@kernel.org>
CryptoPkg: fix gcc build fail for CryptoPkgMbedtls2024-01-08T09:34:31+00:00Hou, Wenxingwenxing.hou@intel.com2024-01-04T08:34:15+00:00urn:sha1:e7152e6186d31bc138fbd2592e07886005177aab
REF:https://bugzilla.tianocore.org/show_bug.cgi?id=4630
Enable MBEDTLS_NO_UDBL_DIVISION to fix GCC x64 build failure.
Cc: Jiewen Yao <jiewen.yao@intel.com>
Cc: Yi Li <yi1.li@intel.com>
Cc: Guomin Jiang <guomin.jiang@intel.com>
Signed-off-by: Wenxing Hou <wenxing.hou@intel.com>
Reviewed-by: Yi Li <yi1.li@intel.com>
CryptoPkg: Add all .inf files for BaseCryptLibMbedTls2023-10-12T05:31:19+00:00Wenxing Houwenxing.hou@intel.com2023-08-18T07:21:47+00:00urn:sha1:b26f7dfe2927a276bf5c3238bec363abadd5a52f
Add .inf files and other support files.
REF: https://bugzilla.tianocore.org/show_bug.cgi?id=4177
Cc: Jiewen Yao <jiewen.yao@intel.com>
Cc: Yi Li <yi1.li@intel.com>
Cc: Xiaoyu Lu <xiaoyu1.lu@intel.com>
Cc: Guomin Jiang <guomin.jiang@intel.com>
Signed-off-by: Wenxing Hou <wenxing.hou@intel.com>
Reviewed-by: Yi Li <yi1.li@intel.com>
CryptoPkg: Add mbedtls_config and MbedTlsLib.inf2023-10-12T05:31:19+00:00Wenxing Houwenxing.hou@intel.com2023-08-09T13:56:17+00:00urn:sha1:586f05b9de0e887874eedcdf95c9b4d0975a2804
Add MbedTlsLib support.
REF: https://bugzilla.tianocore.org/show_bug.cgi?id=4177
Cc: Jiewen Yao <jiewen.yao@intel.com>
Cc: Yi Li <yi1.li@intel.com>
Cc: Xiaoyu Lu <xiaoyu1.lu@intel.com>
Cc: Guomin Jiang <guomin.jiang@intel.com>
Signed-off-by: Wenxing Hou <wenxing.hou@intel.com>
Reviewed-by: Yi Li <yi1.li@intel.com>
CryptoPkg: Add mbedtls submodule for EDKII2023-10-12T05:31:19+00:00Wenxing Houwenxing.hou@intel.com2023-08-09T13:43:39+00:00urn:sha1:1a79cc7d95ecc2063f5fe72fa9d42f53842a4aa8
Add mbedtls 3.3.0 as submodule in CryptoPkg.
REF: https://bugzilla.tianocore.org/show_bug.cgi?id=4177
Cc: Jiewen Yao <jiewen.yao@intel.com>
Cc: Yi Li <yi1.li@intel.com>
Cc: Xiaoyu Lu <xiaoyu1.lu@intel.com>
Cc: Guomin Jiang <guomin.jiang@intel.com>
Signed-off-by: Wenxing Hou <wenxing.hou@intel.com>
Reviewed-by: Yi Li <yi1.li@intel.com>
Reviewed-by: Michael D Kinney <michael.d.kinney@intel.com>