edk2/openssl-1.1.0-issuer-hash.patch
Evgenii Shatokhin fb260fb6be Synced to Fedora: updated to upstream git. rev. 92d07e4 (2017-10-11)
Among other things, OVMF UEFI firmware is now provided here.

Some of the RedHat-specific patches have been dropped in the process,
a few cleanups were also made.

Plus, I have disabled building of ARM firmware images for now: looks
like it needs more support from GCC than we currently have.
2018-07-03 18:17:21 +03:00

11 lines
655 B
Diff

diff -up a/CryptoPkg/Library/OpensslLib/openssl/crypto/x509/x509_cmp.c.issuer-hash b/CryptoPkg/Library/OpensslLib/openssl/crypto/x509/x509_cmp.c
--- a/CryptoPkg/Library/OpensslLib/openssl/crypto/x509/x509_cmp.c.issuer-hash 2016-07-18 15:16:32.788881100 +0200
+++ b/CryptoPkg/Library/OpensslLib/openssl/crypto/x509/x509_cmp.c 2016-07-18 15:17:16.671871840 +0200
@@ -87,6 +87,7 @@ unsigned long X509_issuer_and_serial_has
if (ctx == NULL)
goto err;
+ EVP_MD_CTX_set_flags(ctx, EVP_MD_CTX_FLAG_NON_FIPS_ALLOW);
f = X509_NAME_oneline(a->cert_info.issuer, NULL, 0);
if (!EVP_DigestInit_ex(ctx, EVP_md5(), NULL))
goto err;