From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail05.groups.io (mail05.groups.io [45.79.224.7]) by spool.mail.gandi.net (Postfix) with ESMTPS id 5E17BAC193A for ; Tue, 3 Sep 2024 18:03:38 +0000 (UTC) DKIM-Signature: a=rsa-sha256; bh=xnxQyWFM2yUCCy3U1VZiUgJMdHPvuSx6JMj7ZFLC4BU=; c=relaxed/simple; d=groups.io; h=Date:Mime-Version:Message-ID:Subject:From:To:Cc:Precedence:List-Subscribe:List-Help:Sender:List-Id:Mailing-List:Delivered-To:Resent-Date:Resent-From:Reply-To:List-Unsubscribe-Post:List-Unsubscribe:Content-Type; s=20240830; t=1725386618; v=1; x=1725645816; b=A/Pzb2XBvxDGQU7ROP6akKpQG7NupmLk8ceM5C60Z8CYudXnLBC6fD8nWEqzmu0fbYJn17UJ Up5oqJpZNenDzGFO3UKwK0lcEfe+Y6NJw+XMpLsVrxdcHkj8A3VJzuSNEvGEldHTxkKX5rhBlQv 3Ixiivt1iseBFP3eGL5QtmsPHdy1uDS2g7FmbVX9KBZUlcNO6gXtO1KlQIko0jQEi0Ez2EJ4mGc aAPTeu27FUBGZ8cZIoBU8mZ38XQFO3NEEI9xxDU65EFkyFeO9bgTk0bysIDThC3nzAmCHus5qim 7aOQBMMVZR0W9ukwR25I+wqQxVhuG6UjQtIGW+kVHKcVg== X-Received: by 127.0.0.2 with SMTP id fbsXYY7687511xjeb6d70np1; Tue, 03 Sep 2024 11:03:36 -0700 X-Received: from mail-yw1-f201.google.com (mail-yw1-f201.google.com [209.85.128.201]) by mx.groups.io with SMTP id smtpd.web11.8196.1725005940571231188 for ; Fri, 30 Aug 2024 01:19:00 -0700 X-Received: by mail-yw1-f201.google.com with SMTP id 00721157ae682-6cf78470a56so33583947b3.3 for ; Fri, 30 Aug 2024 01:19:00 -0700 (PDT) X-Gm-Message-State: YdEduN5UDpBlYw2BKlIyCrA3x7686176AA= X-Google-Smtp-Source: AGHT+IEXbG/ajRBBCZhvItdZli93Iv4u5qMgn2nx4HoffLeVxi+nSoRHhVAhT/3GO+8lrRW5kQ6ybSOA X-Received: from palermo.c.googlers.com ([fda3:e722:ac3:cc00:7b:198d:ac11:8138]) (user=ardb job=sendgmr) by 2002:a05:690c:4a88:b0:699:fc36:65ad with SMTP id 00721157ae682-6d40f92498cmr196377b3.3.1725005939057; Fri, 30 Aug 2024 01:18:59 -0700 (PDT) Date: Fri, 30 Aug 2024 10:18:53 +0200 Mime-Version: 1.0 Message-ID: <20240830081853.1571365-1-ardb+git@google.com> Subject: [edk2-devel] [PATCH edk2-platforms 1/1] Platform/RaspberryPi: Switch to MbedTls crypto library From: "Ard Biesheuvel via groups.io" To: devel@edk2.groups.io Cc: quic_llindhol@quicinc.com, sami.mujawar@arm.com, jeremy.linton@arm.com, Ard Biesheuvel Precedence: Bulk List-Subscribe: List-Help: Sender: devel@edk2.groups.io List-Id: Mailing-List: list devel@edk2.groups.io; contact devel+owner@edk2.groups.io Resent-Date: Tue, 03 Sep 2024 11:03:33 -0700 Resent-From: ardb+git@google.com Reply-To: devel@edk2.groups.io,ardb+git@google.com List-Unsubscribe-Post: List-Unsubscribe=One-Click List-Unsubscribe: Content-Type: text/plain; charset="UTF-8" X-GND-Status: LEGIT Authentication-Results: spool.mail.gandi.net; dkim=pass header.d=groups.io header.s=20240830 header.b="A/Pzb2XB"; dmarc=pass (policy=none) header.from=groups.io; spf=pass (spool.mail.gandi.net: domain of bounce@groups.io designates 45.79.224.7 as permitted sender) smtp.mailfrom=bounce@groups.io From: Ard Biesheuvel Switch to the MbedTls crypto library, which uses less space, which has run out on RPi4 (the DEBUG build can only succeed with HTTPS boot disabled at this point) Signed-off-by: Ard Biesheuvel --- Platform/RaspberryPi/RPi3/RPi3.dsc | 5 +++-- Platform/RaspberryPi/RPi4/RPi4.dsc | 5 +++-- 2 files changed, 6 insertions(+), 4 deletions(-) diff --git a/Platform/RaspberryPi/RPi3/RPi3.dsc b/Platform/RaspberryPi/RPi3/RPi3.dsc index 43d6d028e126..86c5281d7af6 100644 --- a/Platform/RaspberryPi/RPi3/RPi3.dsc +++ b/Platform/RaspberryPi/RPi3/RPi3.dsc @@ -134,7 +134,8 @@ [LibraryClasses.common] # Cryptographic libraries RngLib|MdePkg/Library/DxeRngLib/DxeRngLib.inf IntrinsicLib|CryptoPkg/Library/IntrinsicLib/IntrinsicLib.inf - BaseCryptLib|CryptoPkg/Library/BaseCryptLib/BaseCryptLib.inf + BaseCryptLib|CryptoPkg/Library/BaseCryptLibMbedTls/BaseCryptLib.inf + MbedTlsLib|CryptoPkg/Library/MbedTlsLib/MbedTlsLib.inf OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLib.inf TlsLib|CryptoPkg/Library/TlsLib/TlsLib.inf @@ -228,7 +229,7 @@ [LibraryClasses.common.DXE_RUNTIME_DRIVER] VariablePolicyLib|MdeModulePkg/Library/VariablePolicyLib/VariablePolicyLibRuntimeDxe.inf !if $(SECURE_BOOT_ENABLE) == TRUE - BaseCryptLib|CryptoPkg/Library/BaseCryptLib/RuntimeCryptLib.inf + BaseCryptLib|CryptoPkg/Library/BaseCryptLibMbedTls/RuntimeCryptLib.inf !endif ################################################################################################### diff --git a/Platform/RaspberryPi/RPi4/RPi4.dsc b/Platform/RaspberryPi/RPi4/RPi4.dsc index c79f322d9e75..2e7798c71ff3 100644 --- a/Platform/RaspberryPi/RPi4/RPi4.dsc +++ b/Platform/RaspberryPi/RPi4/RPi4.dsc @@ -134,7 +134,8 @@ [LibraryClasses.common] # Cryptographic libraries RngLib|MdePkg/Library/DxeRngLib/DxeRngLib.inf IntrinsicLib|CryptoPkg/Library/IntrinsicLib/IntrinsicLib.inf - BaseCryptLib|CryptoPkg/Library/BaseCryptLib/BaseCryptLib.inf + BaseCryptLib|CryptoPkg/Library/BaseCryptLibMbedTls/BaseCryptLib.inf + MbedTlsLib|CryptoPkg/Library/MbedTlsLib/MbedTlsLib.inf OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLib.inf TlsLib|CryptoPkg/Library/TlsLib/TlsLib.inf @@ -236,7 +237,7 @@ [LibraryClasses.common.DXE_RUNTIME_DRIVER] VariablePolicyLib|MdeModulePkg/Library/VariablePolicyLib/VariablePolicyLibRuntimeDxe.inf !if $(SECURE_BOOT_ENABLE) == TRUE - BaseCryptLib|CryptoPkg/Library/BaseCryptLib/RuntimeCryptLib.inf + BaseCryptLib|CryptoPkg/Library/BaseCryptLibMbedTls/RuntimeCryptLib.inf !endif ################################################################################################### -- 2.46.0.469.g59c65b2a67-goog -=-=-=-=-=-=-=-=-=-=-=- Groups.io Links: You receive all messages sent to this group. View/Reply Online (#120478): https://edk2.groups.io/g/devel/message/120478 Mute This Topic: https://groups.io/mt/108250188/7686176 Group Owner: devel+owner@edk2.groups.io Unsubscribe: https://edk2.groups.io/g/devel/unsub [rebecca@openfw.io] -=-=-=-=-=-=-=-=-=-=-=-