<feed xmlns='http://www.w3.org/2005/Atom'>
<title>Tianocore/edk2.git/CryptoPkg/Library/OpensslLib, branch dependabot/github_actions/github/codeql-action-4</title>
<subtitle>EDK II (mirror)</subtitle>
<id>https://git.radix-linux.su/Tianocore/edk2.git/atom?h=dependabot%2Fgithub_actions%2Fgithub%2Fcodeql-action-4</id>
<link rel='self' href='https://git.radix-linux.su/Tianocore/edk2.git/atom?h=dependabot%2Fgithub_actions%2Fgithub%2Fcodeql-action-4'/>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/Tianocore/edk2.git/'/>
<updated>2025-09-26T04:11:48+00:00</updated>
<entry>
<title>CryptoPkg/Library/OpensslLib: Add back PKCS12 support</title>
<updated>2025-09-26T04:11:48+00:00</updated>
<author>
<name>Amy Chan</name>
<email>amy.chan@intel.com</email>
</author>
<published>2025-09-24T07:35:51+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/Tianocore/edk2.git/commit/?id=8310dfa9f49bf4eff96a36291bc0028be920f60b'/>
<id>urn:sha1:8310dfa9f49bf4eff96a36291bc0028be920f60b</id>
<content type='text'>
Fix wifi driver fails to configure the private key to CryptoDxe.

This enables TlsSetHostPrivateKeyEx() to handle PBES2-encrypted private
keys by providing PKCS12_pbe_crypt_ex().

Signed-off-by: Amy Chan &lt;amy.chan@intel.com&gt;
</content>
</entry>
<entry>
<title>CryptoPkg: Drop ARM32 Support</title>
<updated>2025-09-25T22:04:10+00:00</updated>
<author>
<name>Oliver Smith-Denny</name>
<email>osde@microsoft.com</email>
</author>
<published>2025-09-15T15:50:44+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/Tianocore/edk2.git/commit/?id=2ba9441e0b2222d81a186c0742e98c3196371303'/>
<id>urn:sha1:2ba9441e0b2222d81a186c0742e98c3196371303</id>
<content type='text'>
edk2 is dropping support for the ARM32 architecture. This
commit removes ARM32 code from CryptoPkg. This also drops
irrelevant VALID_ARCHITECTURES comments from infs that are
not arch specific.

Signed-off-by: Oliver Smith-Denny &lt;osde@microsoft.com&gt;
</content>
</entry>
<entry>
<title>CryptoPkg/openssl: disable some features support</title>
<updated>2025-07-17T14:45:20+00:00</updated>
<author>
<name>Gerd Hoffmann</name>
<email>kraxel@redhat.com</email>
</author>
<published>2025-06-10T10:42:02+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/Tianocore/edk2.git/commit/?id=7bbe0b2dec2789630ab2e3254f988d78cf859672'/>
<id>urn:sha1:7bbe0b2dec2789630ab2e3254f988d78cf859672</id>
<content type='text'>
Reduce library size by turning off:
 * quic protocol support.
 * post-quantum chipers.

Signed-off-by: Gerd Hoffmann &lt;kraxel@redhat.com&gt;
</content>
</entry>
<entry>
<title>CryptoPkg/openssl: turn off warning 4130 for microsoft compiler</title>
<updated>2025-07-17T14:45:20+00:00</updated>
<author>
<name>Gerd Hoffmann</name>
<email>kraxel@redhat.com</email>
</author>
<published>2025-04-25T05:28:41+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/Tianocore/edk2.git/commit/?id=94d6fcf46566c4c3ed332b7e094aed5a46399b3b'/>
<id>urn:sha1:94d6fcf46566c4c3ed332b7e094aed5a46399b3b</id>
<content type='text'>
Needed to build with openssl-3.5.

Signed-off-by: Gerd Hoffmann &lt;kraxel@redhat.com&gt;
</content>
</entry>
<entry>
<title>CryptoPkg/openssl: add ossl_bio_print_labeled_buf stub</title>
<updated>2025-07-17T14:45:20+00:00</updated>
<author>
<name>Gerd Hoffmann</name>
<email>kraxel@redhat.com</email>
</author>
<published>2025-04-07T17:22:04+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/Tianocore/edk2.git/commit/?id=e9bac26203da4b945ff2365c590edfd9accb80cc'/>
<id>urn:sha1:e9bac26203da4b945ff2365c590edfd9accb80cc</id>
<content type='text'>
New function in openssl 3.5 in a file edk2 replaces with stubs.
Add a stub for the new function.

Signed-off-by: Gerd Hoffmann &lt;kraxel@redhat.com&gt;
</content>
</entry>
<entry>
<title>CryptoPkg/openssl: update generated files</title>
<updated>2025-07-17T14:45:20+00:00</updated>
<author>
<name>Gerd Hoffmann</name>
<email>kraxel@redhat.com</email>
</author>
<published>2025-04-07T10:06:45+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/Tianocore/edk2.git/commit/?id=565323e29de04e05c838b608196ad3958b0999af'/>
<id>urn:sha1:565323e29de04e05c838b608196ad3958b0999af</id>
<content type='text'>
Signed-off-by: Gerd Hoffmann &lt;kraxel@redhat.com&gt;
</content>
</entry>
<entry>
<title>CryptoPkg/openssl: update submodule to openssl-3.5.1 release</title>
<updated>2025-07-17T14:45:20+00:00</updated>
<author>
<name>Gerd Hoffmann</name>
<email>kraxel@redhat.com</email>
</author>
<published>2025-04-07T10:02:31+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/Tianocore/edk2.git/commit/?id=fdda38a96e8204d49f20d0a6f2af433658700927'/>
<id>urn:sha1:fdda38a96e8204d49f20d0a6f2af433658700927</id>
<content type='text'>
Signed-off-by: Gerd Hoffmann &lt;kraxel@redhat.com&gt;
</content>
</entry>
<entry>
<title>CryptoPkg/Library/OpensslLib: Fix CLANG compatibility issues</title>
<updated>2025-03-07T05:44:30+00:00</updated>
<author>
<name>Michael D Kinney</name>
<email>michael.d.kinney@intel.com</email>
</author>
<published>2025-01-14T19:11:49+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/Tianocore/edk2.git/commit/?id=deee46d276c10112dd3a8307c4dedbbfdbf92911'/>
<id>urn:sha1:deee46d276c10112dd3a8307c4dedbbfdbf92911</id>
<content type='text'>
Update the CryptoPkg to support CLANGPDB and CLANGDWARF from
both Windows and Linux host environments.

* Add PcdOpensslLibAssemblySourceStyleNasm to select the correct
  optimized assembly source style for OpensslLib for IA32/X64.
  NASM style is for MSFT and CLANGPDB. GAS style is for GCC.
  Use this PCD in OpensslLibAccel.inf and OpensslLibFullAccel.inf
  to select between .nasm and .S files.
* Add intrinsic functions required by CLANG IA32/X64 builds.
  * __ashlti3
  * __lshrdi3
* Disable warning -Wno-error=unused-function for CLANG build
  compatibility
* Set -D OPENSSL_NO_INLINE_ASM for CLANG build compatibility
* Update TestBaseCryptLib to split out the implementation of
  main() into its own C file that is only use for host-based
  unit tests. This is due to CLANGPDB for host environments
  injecting a __main() call that can only be resolved in host
  based builds that link against host libraries.
* Update Configure.py to update IA32/X64 [Sources] sections
  with feature flag expressions using the new PCD
  PcdOpensslLibAssemblySourceStyleNasm.

Signed-off-by: Michael D Kinney &lt;michael.d.kinney@intel.com&gt;
</content>
</entry>
<entry>
<title>CryptoPkg: Update generated files based on openssl 3.4.1</title>
<updated>2025-02-26T06:39:16+00:00</updated>
<author>
<name>Li Yi</name>
<email>yi1.li@intel.com</email>
</author>
<published>2025-02-12T13:49:22+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/Tianocore/edk2.git/commit/?id=3b93347ee31a3135406642c6fd58c6735855323d'/>
<id>urn:sha1:3b93347ee31a3135406642c6fd58c6735855323d</id>
<content type='text'>
FIX: https://github.com/tianocore/edk2/issues/10664

Signed-off-by: Li Yi &lt;yi1.li@intel.com&gt;
</content>
</entry>
<entry>
<title>CryptoPkg: Update openssl submodule to 3.4.1</title>
<updated>2025-02-26T06:39:16+00:00</updated>
<author>
<name>Yi Li</name>
<email>yi1.li@intel.com</email>
</author>
<published>2025-02-12T05:42:26+00:00</published>
<link rel='alternate' type='text/html' href='https://git.radix-linux.su/Tianocore/edk2.git/commit/?id=a59d7fa14ec5f588823991496375eeb4dcbddf82'/>
<id>urn:sha1:a59d7fa14ec5f588823991496375eeb4dcbddf82</id>
<content type='text'>
FIX: https://github.com/tianocore/edk2/issues/10664

CVE-2024-13176 affects ECDSA Sign of NIST P-521 implementation of
EDK2. Fix it by updating openssl to 3.4.1.

Signed-off-by: Yi Li &lt;yi1.li@intel.com&gt;
</content>
</entry>
</feed>
