From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mga11.intel.com (mga11.intel.com [192.55.52.93]) (using TLSv1 with cipher CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by ml01.01.org (Postfix) with ESMTPS id EAE0F1A1E3E for ; Thu, 29 Sep 2016 18:07:04 -0700 (PDT) Received: from fmsmga006.fm.intel.com ([10.253.24.20]) by fmsmga102.fm.intel.com with ESMTP; 29 Sep 2016 18:07:05 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.31,417,1473145200"; d="scan'208";a="14750138" Received: from fmsmsx104.amr.corp.intel.com ([10.18.124.202]) by fmsmga006.fm.intel.com with ESMTP; 29 Sep 2016 18:07:04 -0700 Received: from shsmsx104.ccr.corp.intel.com (10.239.4.70) by fmsmsx104.amr.corp.intel.com (10.18.124.202) with Microsoft SMTP Server (TLS) id 14.3.248.2; Thu, 29 Sep 2016 18:07:04 -0700 Received: from shsmsx103.ccr.corp.intel.com ([169.254.4.234]) by SHSMSX104.ccr.corp.intel.com ([169.254.5.101]) with mapi id 14.03.0248.002; Fri, 30 Sep 2016 09:07:02 +0800 From: "Long, Qin" To: Laszlo Ersek CC: "Ye, Ting" , "edk2-devel@ml01.01.org" , "Woodhouse, David" Thread-Topic: [edk2] [Patch] CryptoPkg/OpensslLib: Upgrade OpenSSL version to 1.0.2j Thread-Index: AQHSGhg3WH3zdhYi4E+cc767LRmt6aCPq9aAgADZQqD//89rAIAA5RZg Date: Fri, 30 Sep 2016 01:07:01 +0000 Message-ID: References: <20160929060925.11152-1-qin.long@intel.com> <4d0f4c4f-6b5f-aa73-a965-ba97704aa6af@redhat.com> In-Reply-To: Accept-Language: zh-CN, en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.239.127.40] MIME-Version: 1.0 Subject: Re: [Patch] CryptoPkg/OpensslLib: Upgrade OpenSSL version to 1.0.2j X-BeenThere: edk2-devel@lists.01.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: EDK II Development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Sep 2016 01:07:05 -0000 Content-Language: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Copy that. Thanks, Laszlo. > -----Original Message----- > From: Laszlo Ersek [mailto:lersek@redhat.com] > Sent: Friday, September 30, 2016 3:27 AM > To: Long, Qin > Cc: Ye, Ting ; edk2-devel@ml01.01.org; Woodhouse, > David > Subject: Re: [edk2] [Patch] CryptoPkg/OpensslLib: Upgrade OpenSSL version > to 1.0.2j >=20 > On 09/29/16 16:22, Long, Qin wrote: > > Sure, refer to https://github.com/qloong/edk2/tree/dev-openssl-1.0.2j > > Thanks, Laszlo. >=20 > I used the Ia32X64 build of OVMF with a Fedora guest to test this update.= I > checked: > - boot with Secure Boot having been enabled previously (using 1.0.2h) > - clearing Secure Boot and booting an unsigned binary > - enrolling certificates again and booting with SB enabled (checking both > unsigned and signed) >=20 > Tested-by: Laszlo Ersek >=20 > Thanks > Laszlo >=20 >=20 > > -----Original Message----- > > From: Laszlo Ersek [mailto:lersek@redhat.com] > > Sent: Thursday, September 29, 2016 5:23 PM > > To: Long, Qin > > Cc: edk2-devel@ml01.01.org; Ye, Ting ; Woodhouse, > > David > > Subject: Re: [edk2] [Patch] CryptoPkg/OpensslLib: Upgrade OpenSSL > > version to 1.0.2j > > > > On 09/29/16 08:09, Qin Long wrote: > >> Two official releases (OpenSSL 1.0.2i and 1.0.2j) were available with > >> several severity fixes at 22-Sep-2016 and 26-Sep-2016 with several > >> security fixes. Refer to > >> https://www.openssl.org/news/secadv/20160922.txt and > >> https://www.openssl.org/news/secadv/20160926.txt. > >> This patch is to upgrade the supported OpenSSL version in > >> CryptoPkg/OpensslLib to catch the latest release 1.0.2j. > >> > >> Cc: Ting Ye > >> Cc: David Woodhouse > >> Contributed-under: TianoCore Contribution Agreement 1.0 > >> Signed-off-by: Qin Long > >> --- > >> CryptoPkg/CryptoPkg.dec | 2 +- > >> ...ssl-1.0.2h.patch =3D> EDKII_openssl-1.0.2j.patch} | 171 ++++++----= --------- > -- > >> CryptoPkg/Library/OpensslLib/Install.cmd | 2 +- > >> CryptoPkg/Library/OpensslLib/Install.sh | 2 +- > >> CryptoPkg/Library/OpensslLib/OpensslLib.inf | 2 +- > >> CryptoPkg/Library/OpensslLib/Patch-HOWTO.txt | 26 ++-- > >> 6 files changed, 62 insertions(+), 143 deletions(-) rename > >> CryptoPkg/Library/OpensslLib/{EDKII_openssl-1.0.2h.patch =3D> > >> EDKII_openssl-1.0.2j.patch} (92%) > > > > Can you please push this patch to a personal git repo of yours, and pub= lish > the URL and branch name on the list? I'd like to test the patch. > > > > Thanks! > > Laszlo > > > > _______________________________________________ > > edk2-devel mailing list > > edk2-devel@lists.01.org > > https://lists.01.org/mailman/listinfo/edk2-devel > >