Re: [edk2-devel] [edk2-staging/OpenSSL11_EOL 0/7] Openssl 3.0 POC update Mar 17

["Rebecca Cran" <rebecca@bsdio.com>]

This is going to be needed in the next 6 months because OpenSSL 1.1.1 is 
going EOL.

>From https://www.openssl.org/blog/blog/2023/03/28/1.1.1-EOL/ :


"We are now less than 6 months away from the End Of Life (EOL) date for 
the OpenSSL 1.1.1 series. Users of OpenSSL 1.1.1 should consider their 
options and plan any actions they might need to take.

OpenSSL 1.1.1 is a Long Term Support (LTS) release. Our policy is to 
support LTS releases for a period of 5 years. During the last year of 
that we typically only backport security fixes to a release.

OpenSSL 1.1.1 was released on 11th September 2018, and so it will be 
considered EOL on 11th September 2023. It will no longer be receiving 
publicly available security fixes after that date."


-- 
Rebecca Cran


On 3/16/23 10:28 PM, Li, Yi wrote:
> Please check the patch series if interested.
> PR: https://github.com/tianocore/edk2-staging/pull/359
>
> Latest size data:
> Binaries:				
> 	CryptoDxeFull		->	1.7%	17KB (New)
> 	CryptoDxe		14%	->	10.10%	82KB
> 	CryptoSmm		14%	->	8.20%	46KB
> After LZMA:			
> 	CryptoDxe		15%	->	12.20%	39KB
> 	CryptoSmm		17%	->	12.80%	27KB
> 	FV (Dxe+Smm)	18%	->	15.40%	55KB
>
> Cc: Jiewen Yao <jiewen.yao@intel.com>
> Cc: Wenxing Hou <wenxing.hou@intel.com>
> Cc: Gerd Hoffmann <kraxel@redhat.com>
> Signed-off-by: Yi Li <yi1.li@intel.com>
>
> Yi Li (7):
>    OpensslLib: remove bio prov
>    CryptoPkg/Test: Remove Pem and Pkcs7Sign func in test
>    CryptoPkg/OpensslLib: enable no autoalginit
>    Readme: 0315 update
>    bugfix: The order of NIDs should remain the same as before
>    CryptoPkg/OpensslLibFull: apply all work to full inf
>    Readme: 0317 update
>
>   CryptoPkg/Library/OpensslLib/OpensslLib.inf   |    4 +-
>   .../Library/OpensslLib/OpensslLibFull.inf     |  171 +-
>   .../OpensslStub/crypto/objects/obj_dat.h      | 6474 ++++++++---------
>   .../OpensslStub/crypto/objects/obj_xref.h     |   72 +-
>   .../OpensslLib/OpensslStub/openssl/obj_mac.h  | 1397 ++--
>   .../Library/OpensslLib/OpensslStub/uefiprov.c |    8 +-
>   CryptoPkg/Readme-OpenSSL3.0.md                |   22 +-
>   .../Library/BaseCryptLib/RsaPkcs7Tests.c      |  145 +-
>   8 files changed, 4197 insertions(+), 4096 deletions(-)
>