Hi

This is follow up for the “Openssl1.1 replacement proposal” https://edk2.groups.io/g/devel/topic/96741156.

openssl 3.0 POC result is shown at https://github.com/tianocore/edk2-staging/blob/OpenSSL11_EOL/CryptoPkg/Readme-OpenSSL3.0.md

The size increase is reduced to ~10%.

 

In order to achieve maximum size optimization for openssl 3.0, we updated openssl 3.0 branch and recorded to https://github.com/liyi77/openssl/tree/openssl-3.0-POC.

To help the community review and feedback the openssl 3.0 change and plan to openssl upstream in the future, we should avoid personal branch usage.

 

The proposal is to:

  1. Create *an edk2 fork of openssl* under https://github.com/tianocore
  2. Create *an edk2 branch* to hold all update for support https://github.com/tianocore/edk2-staging/tree/OpenSSL11_EOL
  3. Add git submodule of the edk2 fork of openssl to the OpenSSL11_EOL.

 

Thank you

Yao, Jiewen