From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mga09.intel.com (mga09.intel.com [134.134.136.24]) by mx.groups.io with SMTP id smtpd.web10.15875.1679048510182394808 for ; Fri, 17 Mar 2023 03:21:50 -0700 Authentication-Results: mx.groups.io; dkim=fail reason="unable to parse pub key" header.i=@intel.com header.s=intel header.b=C13M7wqR; spf=pass (domain: intel.com, ip: 134.134.136.24, mailfrom: yi1.li@intel.com) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1679048510; x=1710584510; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=2kHvEbZaxvdzihFKDJJyapa8x11LTpbteWqLi5YaLUk=; b=C13M7wqRhB0Kewkn5eMes7xCF2mBema3oDBSxHicF7eyHo/IfeIjetPM MyUCpvL3sph0yZWbxmCStC+EpMsrNyPEoF6ZzNchVttVJuQuU+cB0+dyM mJSXO3OqvHMODQ5KkEG7/lk8QH8vPl7Li0KsH5j4GP+7fw0NI5S3ZtLCj tAVYb/8e3+yzXFiDdn2BEHQrAMOH9OPrN7GcYWQTaf2cLg6soMVa2NVQ9 v0rNbCNqkrhvAlccr+Eia44BcghxRFDQHJnw4nf1H3XCk0xMyVfTRsbsQ quMWiCsM6Dtin6i7KmMCB0v3mBJRi3jCmXhFdQrM56w5ZDOuuLG3Y0J9i Q==; X-IronPort-AV: E=McAfee;i="6600,9927,10651"; a="339770262" X-IronPort-AV: E=Sophos;i="5.98,268,1673942400"; d="scan'208";a="339770262" Received: from fmsmga005.fm.intel.com ([10.253.24.32]) by orsmga102.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 17 Mar 2023 03:21:40 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=McAfee;i="6600,9927,10651"; a="1009588287" X-IronPort-AV: E=Sophos;i="5.98,268,1673942400"; d="scan'208";a="1009588287" Received: from orsmsx603.amr.corp.intel.com ([10.22.229.16]) by fmsmga005.fm.intel.com with ESMTP; 17 Mar 2023 03:21:40 -0700 Received: from orsmsx610.amr.corp.intel.com (10.22.229.23) by ORSMSX603.amr.corp.intel.com (10.22.229.16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2507.21; Fri, 17 Mar 2023 03:21:39 -0700 Received: from ORSEDG602.ED.cps.intel.com (10.7.248.7) by orsmsx610.amr.corp.intel.com (10.22.229.23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2507.21 via Frontend Transport; Fri, 17 Mar 2023 03:21:39 -0700 Received: from NAM12-MW2-obe.outbound.protection.outlook.com (104.47.66.43) by edgegateway.intel.com (134.134.137.103) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.1.2507.21; Fri, 17 Mar 2023 03:21:39 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=I5Ito2SNkdhSbIEp3DF8shMmGFNo3n/J6Oqq3VO/iVgydkwl4Zkx/FTKc3svkwxxshRqN017tFvdCgpkSPpgGYZ8m4dTH9uVqGv60FMDEA4IPW6ckS806Vzo3TAQatwTwNCjXahwhH9UBpIcKvgDg99OBcBvla8CLzbIwMGOnn5FV+M2DuL0jeH8EXUHlvN7uFXKYIaw+qCyRSHW9Fd6UIWS+B5C7l486x2nO4UpechCV7M9koW4X2RmX2VHvVHM5+VxUOGBincODNiWW3PSM4eQk5ODwuH4PkZF4szvfT205xoy66uTPhJfMh+9LaTA52Fe2TTSRLnbT9ylP4/Icw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=HZIRU3LhAg8gsWi/7eVCWhPG9+FNpzFLjPaiEAJ4GGU=; b=aEu7V7FJNlJ5E0MfEOe3GV2CIUxSwFSZK+FioO1VXMHp4sBa/fGD//EMqqRsJHYOsI2m2AN+JnFDMul1djZtLXN7XE0dah7pCo3V0L2Uypl8XKedvASKfUwcQCy2K9UKqq6UTjHDETUazyJyBJQShXXCccyXJCd8MZjidyhnUg5uhUOx8thjhO6UB6UIXousTk9Is3orMx20NgV1lwJr6mu5Ey7xQvWTSJHava1/hQvaKVMyq2BTXd1QZYl5iDgsHj07Cl78eLDn1eWDAJ8AE5hDU/7SNsIPZhIsqxG/LC2Omly6B9NtaXm/luvuOnjKEnMDWe38do67v46ogtku+Q== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=intel.com; dmarc=pass action=none header.from=intel.com; dkim=pass header.d=intel.com; arc=none Received: from SJ1PR11MB6227.namprd11.prod.outlook.com (2603:10b6:a03:45a::10) by SJ0PR11MB5152.namprd11.prod.outlook.com (2603:10b6:a03:2ae::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6178.35; Fri, 17 Mar 2023 10:21:33 +0000 Received: from SJ1PR11MB6227.namprd11.prod.outlook.com ([fe80::afe8:db97:cbaf:cd17]) by SJ1PR11MB6227.namprd11.prod.outlook.com ([fe80::afe8:db97:cbaf:cd17%9]) with mapi id 15.20.6178.035; Fri, 17 Mar 2023 10:21:33 +0000 From: "Li, Yi" To: Gerd Hoffmann CC: "devel@edk2.groups.io" , "Yao, Jiewen" , "Hou, Wenxing" Subject: Re: [edk2-staging/OpenSSL11_EOL 0/7] Openssl 3.0 POC update Mar 17 Thread-Topic: [edk2-staging/OpenSSL11_EOL 0/7] Openssl 3.0 POC update Mar 17 Thread-Index: AQHZWIjz+XdkrTBgYkmYGRKJGrN9JK7+vlUAgAAESuA= Date: Fri, 17 Mar 2023 10:21:32 +0000 Message-ID: References: <20230317100320.3dlivnxk5ktubkwz@sirius.home.kraxel.org> In-Reply-To: <20230317100320.3dlivnxk5ktubkwz@sirius.home.kraxel.org> Accept-Language: zh-CN, en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=intel.com; x-ms-publictraffictype: Email x-ms-traffictypediagnostic: SJ1PR11MB6227:EE_|SJ0PR11MB5152:EE_ x-ms-office365-filtering-correlation-id: dc58e342-2ad5-4e96-a612-08db26d1618b x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:SJ1PR11MB6227.namprd11.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230025)(376002)(396003)(136003)(366004)(346002)(39860400002)(451199018)(966005)(7696005)(316002)(55016003)(478600001)(122000001)(54906003)(6916009)(4326008)(38100700002)(2906002)(15650500001)(66946007)(8676002)(66556008)(66476007)(76116006)(66446008)(64756008)(38070700005)(186003)(9686003)(6506007)(53546011)(26005)(83380400001)(82960400001)(71200400001)(52536014)(41300700001)(33656002)(107886003)(8936002)(86362001)(5660300002);DIR:OUT;SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?us-ascii?Q?flzG8SLLCn36JgENsN44dQznUr22hZmMcT8KR78uiNcy+0zPhnG9MJxow4+8?= =?us-ascii?Q?p3Gk3O1EsnG3ThtXIbfKSDHm3UR/vQNIX6nlOvQholXqcyjHOR89IxoBf60N?= =?us-ascii?Q?ziG/24x0R2h5zdFpDzNkatXLCXy6py+JO0SN8Bx/VQJLs763KCH9hIkmllbj?= =?us-ascii?Q?1rSyw/tIZzmQ7nOOjrDq9XABvpGpSWhT8Kb0evfZl2MwGtS19fIxxBaRKMnr?= =?us-ascii?Q?MYWY6nWEOCOGHO1x480i1bfmDRgjc2oPZ0G3BSwBT0kyqUoyloi2k1q9p2Jx?= =?us-ascii?Q?efR0pCL1Udtg9ZlEBA+8qjbCScHDMj+ZECnpL36aMl0MbmzKGm8SoVwCncf5?= =?us-ascii?Q?bSIHZnlKqzljok9kr5KkIWZeKosA908hYXHZG8y31hw81FNUwO6peIH3Y7B3?= =?us-ascii?Q?97Oy1TOWPypFsg157/OtVx5XIQLwU5A7/DnRTDqHf04w50X248lxn541Ykao?= =?us-ascii?Q?BOUEwZjxOXsnJOH+cHhDrSunY44IqBq9qLPBYzmNzO8Iq5I1HPI6mXLNOrR1?= =?us-ascii?Q?tJ2PQYHMwbS6t2qxScOeqne7aFBCJ0MCgIzPX4UVDI9Ee1Qw0yjOVCtQ5ULK?= =?us-ascii?Q?IXPiUXj7Br8ygSXRANX0B8W1yZp9BoiifzFjju+pF4Z7cL53EDLs6+AJ4C+D?= =?us-ascii?Q?zJ7N/71d0u46ojBDvprXSTEaQ/VAqFWjmEGhIXnSvo5mhP3yPbUNNp49TEoz?= =?us-ascii?Q?K/gCxZU1J2fT+dDmDZt89TEJxZMLo8eD4vc3PhRWVEjuHCQxkNMXJqs9dL12?= =?us-ascii?Q?QjowlEtruz+Lr8jnEPrEX0Cs7ca5m8tzElT2l6ZqNMV/bz26yEtM2510lReh?= =?us-ascii?Q?elsU5b6QfzlciSDqhwDqU+qVuez2S8u2MYY9plb8xbdjxaWp0nqYSTOXw2Dr?= =?us-ascii?Q?s5xlJet7n5EfbV+F1ZlRKbwaVFBAihZ1YkCZXBgxeBe/jK20XTqOGxtkNMrF?= =?us-ascii?Q?EdjO8xiuYxI/59OU6XMEu2vQ4fs6sdTAMztVLEd6/QOQIr/WkPR9H8/XuYaS?= =?us-ascii?Q?anngktj8qQDr6lQUBtpmW+SHBg0KmIVdomji4kZypSXuzmqLXZdbyhN9rjTO?= =?us-ascii?Q?tBs570OkymfEVTpxe+wfDj3pBmWUsEwseGOf/G7VGXP1hPGoK9BIPokLKaY5?= =?us-ascii?Q?zzJAIvrBQk5Uwk9/oiiLu9YjazX47izyDohXAIW/CikMp5fsIfGe+muETjnL?= =?us-ascii?Q?L8RVNoTKnDtz10L27r0trh7IJkGJW02ONN6+hOZrRD9REUac1kLedONVa6t7?= =?us-ascii?Q?mgWxQP+iyjkf+k3LpzE85P6hDTpSyr6MQTUIha9/EGBudKZ3b6CsK/DFfhgq?= =?us-ascii?Q?hWlz7hkA9ulWaIo+9L+/UeFZrtJcqTVXUOAd+RbfYuQqT84uwQ+GLwsQ8fb/?= =?us-ascii?Q?4S0k2/axvh3cpDKIoCKJNfObSKUx7qo40R9Lf09pnzrjqQyFk85KuDb2oPHx?= =?us-ascii?Q?mX/QwS3SvUFKiVUdT1FASXZab8gpoMM34nU6BaaAhPf6QbW/qAdMONwL9fwM?= =?us-ascii?Q?lB6emfRACA8rXq0W1vu9N4Xr+YSg2cn6bA2itxC2bIriDKGb7cVMwot9RFbX?= =?us-ascii?Q?q639Pi263O6H6n1/JAU=3D?= MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: SJ1PR11MB6227.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: dc58e342-2ad5-4e96-a612-08db26d1618b X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Mar 2023 10:21:32.9307 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 46c98d88-e344-4ed4-8496-4ed7712e255d X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: Bx342RkStt5vSGjQNRqIs+IBWAjXIiBnsL4eXcHZYlgL46WMuvm/vMGv0ZNVVwHXEeQYvoUfX+4ORtGpuqakFA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ0PR11MB5152 Return-Path: yi1.li@intel.com X-OriginatorOrg: intel.com Content-Language: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable The current purpose of this POC is to find all ways to reduce the size incr= ease as much as possible to meet our goal of +10% size increase. I understand that the current code changes seem unacceptable, and the next = step of the POC is to find a suitable way to apply these changes (some brea= king changes may be discarded): such as upstream to openssl or integrate in= to the configure script. If all goes well, the next step will start at the end of March. Regards, Yi=20 -----Original Message----- From: Gerd Hoffmann =20 Sent: Friday, March 17, 2023 6:03 PM To: Li, Yi1 Cc: devel@edk2.groups.io; Yao, Jiewen ; Hou, Wenxing = Subject: Re: [edk2-staging/OpenSSL11_EOL 0/7] Openssl 3.0 POC update Mar 17 On Fri, Mar 17, 2023 at 12:28:12PM +0800, Yi Li wrote: > Please check the patch series if interested. > PR: https://github.com/tianocore/edk2-staging/pull/359 So it seems you are doing a number of larger changes to the openssl code ba= se. What is the plan for those? I'd prefer to not be in a situation where every openssl update needs alot o= f work in our edk2-specific adaptions, especially as openssl updates can be= timing-sensitive when it comes to fixing security issues. For changes where we only need dummy stub functions which don't do anything= is isn't a big problem. But when changing the provider logic to suit our = needs it is probably much better to work with upstream openssl to get the c= hanges we need merged. I did that in the past, worked fine. See for example openssl commit a28dbf= e7c84b6a43746d0e2ef4153e2a13067c4a (change printf to not support floating p= oint for --target=3DUEFI). take care, Gerd