]> git.baikalelectronics.ru Git - arm-tf.git/commit
refactor(security): add OpenSSL 1.x compatibility
authorJuan Pablo Conde <juanpablo.conde@arm.com>
Tue, 25 Oct 2022 23:41:02 +0000 (19:41 -0400)
committerJuan Pablo Conde <juanpablo.conde@arm.com>
Fri, 11 Nov 2022 18:33:42 +0000 (13:33 -0500)
commitcf2dd17ddda2f44f5dedddcaf48300d16358597a
tree4992d340b619775a4c402786d104ecae7df296ff
parent54b3fc63e408ebe3cc79887886df9f9d4c3ecd4d
refactor(security): add OpenSSL 1.x compatibility

When updated to work with OpenSSL 3.0, the host tools lost their
compatibility with previous versions (1.x) of OpenSSL. This is
mainly due to the fact that 1.x APIs became deprecated in 3.0 and
therefore their use cause compiling errors. In addition, updating
for a newer version of OpenSSL meant improving the stability
against security threats. However, although version 1.1.1 is
now deprecated, it still receives security updates, so it would
not imply major security issues to keep compatibility with it too.

This patch adds backwards compatibility with OpenSSL 1.x versions
by adding back 1.x API code. It defines a macro USING_OPENSSL3,
which will select the appropriate OpenSSL API version depending on
the OpenSSL library path chosen (which is determined by the
already-existing OPENSSL_DIR variable).

In addition, cleanup items were packed in functions and moved to
the proper modules in order to make the code more maintainable and
legible.

Signed-off-by: Juan Pablo Conde <juanpablo.conde@arm.com>
Change-Id: I8deceb5e419edc73277792861882404790ccd33c
15 files changed:
Makefile
docs/getting_started/prerequisites.rst
make_helpers/build_macros.mk
make_helpers/defaults.mk
tools/cert_create/Makefile
tools/cert_create/include/cert.h
tools/cert_create/include/ext.h
tools/cert_create/include/key.h
tools/cert_create/src/cert.c
tools/cert_create/src/ext.c
tools/cert_create/src/key.c
tools/cert_create/src/main.c
tools/cert_create/src/sha.c
tools/encrypt_fw/Makefile
tools/fiptool/Makefile