Re: [edk2-devel] [PATCH] CryptoPkg: Add b_print.c which removed floating-point to OpensslLib

["Yao, Jiewen" <jiewen.yao@intel.com>]

Right. Size is the biggest concern, because some platforms already have limited space based on our internal survey. If we migrate to openssl3 directly, then we have no way to build these platforms.

One idea of size optimization is to use MACRO to disable some features in openssl, if they are not needed by UEFI.
It could be the MACRO already defined by openssl, or we may add new MACRO to make it smaller.

Thank you
Yao, Jiewen

> -----Original Message-----
> From: devel@edk2.groups.io <devel@edk2.groups.io> On Behalf Of Gerd
> Hoffmann
> Sent: Monday, November 21, 2022 5:22 PM
> To: devel@edk2.groups.io; Li, Yi1 <yi1.li@intel.com>
> Cc: Wang, Jian J <jian.j.wang@intel.com>; Lu, Xiaoyu1
> <xiaoyu1.lu@intel.com>; Jiang, Guomin <guomin.jiang@intel.com>; Yao,
> Jiewen <jiewen.yao@intel.com>
> Subject: Re: [edk2-devel] [PATCH] CryptoPkg: Add b_print.c which removed
> floating-point to OpensslLib
> 
> On Mon, Nov 21, 2022 at 08:31:19AM +0000, Li, Yi wrote:
> > Hi Gerd,
> >
> > Cool! I noticed your patch in openssl3.0 branch.
> > Because the Tls cert time check needs to be solved as soon as possible,
> > I will cherry-pick your patch to 1.1.1 branch instead of updating edk2
> openssl to 3.0. The latter seems to take a long time.
> >
> > By the way, I remember you are already working on upstream openssl3.0,
> right?
> 
> Tried, yes (that's why it is fixed already in upstream openssl3).
> 
> > How is it doing now, I can help with some work if needed.
> 
> The blocker is that openssl 3 noticeable larger than the 1.1.1 version.
> Which is according to Jiewen Yao not acceptable because it wouldn't
> fit into the flash layout for existing roms.
> 
> I don't have any good idea how to move forward with this.  My old WIP
> branch is here:
> 
> https://github.com/kraxel/edk2/commits/archive/openssl3-v1
> 
> take care,
>   Gerd
> 
> 
> 
> 
>