Tianocore/edk2.git/CryptoPkg/Library/TlsLib/TlsConfig.c, branch master

CryptoPkg: TlsLib: Fix uninitialized variable warnings

2026-06-24T14:49:50+00:00

In TlsSetCipherList(), the OpensslCipher variable is initialized inside an inner loop but accessed outside of that loop, which can lead to uninitialized variable warnings. Fix this issue by moving all accesses to OpensslCipher into the inner loop where it is initialized. Signed-off-by: Tuan Phan

CryptoPkg: Fix coverity warnings in CryptoPkg.

2025-10-27T03:14:56+00:00

Fix the coverity warnings reported in the CryptoPkg. Signed-off-by: Kanagavel S

CryptoPkg: Add support to set TLS security level.

2025-09-23T03:08:14+00:00

Add Edkiicrypto protocol API to set TLS set security level. Signed-off-by: Kanagavel S

CryptoPkg: Add SNI support

2025-09-04T08:32:34+00:00

Add Server Name Indication support. Signed-off-by: Kanagavel S

CryptoPkg: Add SNI extension to TLS ClientHello

2024-06-25T21:46:50+00:00

Webservers hosting multiple websites require the TLS SNI (Server Name Indication) in the ClientHello to know which certificate to return. The current TLS code does not include the server name in the ClientHello handshake, which leads to failed HTTPS boots when the server does not return the correct certificate. This sets the host name for SNI in TlsSetVerifyHost which receives the host name also for verification against the certificates. Signed-off-by: Sebastian Witt

CryptoPkg/TlsLib: fix tls cipher configuration

2023-10-08T10:46:45+00:00

Trying to configure the TLS ciphers can lead to TLS handshake failures because TlsCipherMappingTable is not in line with the ciphers actually supported by OpensslLib. Fix that by removing TlsCipherMappingTable altogether. Use SSL_get_ciphers() instead to get the stack of ciphers supported by openssl. Name and ID of the ciphers can be queried using the SSL_CIPHER_get_name() and SSL_CIPHER_get_protocol_id() functions, which allows us to map IDs to names without a hard-code table. Bugzilla: https://bugzilla.tianocore.org/show_bug.cgi?id=2541 Signed-off-by: Gerd Hoffmann Message-Id: <20231004092003.3809321-1-kraxel@redhat.com> Reviewed-by: Laszlo Ersek Reviewed-by: Yi Li

CryptoPkg/TlsLib: use unsigned long for ErrorCode

2023-08-09T07:10:31+00:00

Signed-off-by: Gerd Hoffmann Cc: Jiewen Yao Cc: Xiaoyu Lu Cc: Guomin Jiang Reviewed-by: Jiewen Yao Acked-by: Ard Biesheuvel Tested-by: Ard Biesheuvel Tested-by: Brian J. Johnson Tested-by: Kenneth Lautner

CryptoPkg/TlsLib: ERR_GET_FUNC is gone

2023-08-09T07:10:31+00:00

CryptoPkg: Update code to be more C11 compliant by using func

2023-04-10T14:19:57+00:00

__FUNCTION__ is a pre-standard extension that gcc and Visual C++ among others support, while __func__ was standardized in C99. Since it's more standard, replace __FUNCTION__ with __func__ throughout CryptoPkg. Signed-off-by: Rebecca Cran Reviewed-by: Michael D Kinney Reviewed-by: Ard Biesheuvel

CryptoPkg/Library: Cleanup BaseCryptLib and TlsLib

2022-10-24T07:49:43+00:00

* Move SysCall/inet_pton.c from BaseCryptLib to TlsLib. The functions in this file are only used by TlsLib instances and not any CryptLib instances. * Fix type mismatch in call to FreePool() in TlsConfig.c * Remove use of gEfiCryptoPkgTokenSpaceGuid.PcdOpensslEcEnabled from TslLib and CryptLib instances * Add missing *Null.c files to SecCryptLib.inf and RuntimeCryptLib.inf. * Remove ARM and AARCH64 sections from SmmCryptLib.inf that does not support those architectures. * Add missing PrintLib dependencies to [LibraryClasses] sections of CryptLib INF files * Remove extra library classes from [LibraryClasses] sections of CryptLib INF files * Remove unnecessary warning disables from [BuildOptions] sections of TlsLib and CryptLib INF files * Remove RVCT support from SecCryptLib.inf Cc: Jiewen Yao Cc: Jian J Wang Cc: Xiaoyu Lu Cc: Guomin Jiang Cc: Christopher Zurcher Cc: Rebecca Cran Cc: Ard Biesheuvel Signed-off-by: Michael D Kinney Reviewed-by: Jiewen Yao