diff options
| author | Laszlo Ersek <lersek@redhat.com> | 2017-02-23 21:46:06 +0100 |
|---|---|---|
| committer | Laszlo Ersek <lersek@redhat.com> | 2017-02-27 10:42:09 +0100 |
| commit | 9fba024ed8f7b2099b598ad89571a22d7b70c3e1 (patch) | |
| tree | 1590ac8a2e77b33df876533dd7674396371a62cf /Nt32Pkg | |
| parent | 9508a4ac3d756fa6713366afaa3e12063aef5dc9 (diff) | |
| download | edk2-9fba024ed8f7b2099b598ad89571a22d7b70c3e1.zip edk2-9fba024ed8f7b2099b598ad89571a22d7b70c3e1.tar.gz edk2-9fba024ed8f7b2099b598ad89571a22d7b70c3e1.tar.bz2 | |
Nt32Pkg: exclude libssl functionality from OpensslLib if TLS_ENABLE=FALSE
Ease security analysis by excluding libssl functionality from the
OpensslLib instance we use with TLS_ENABLE=FALSE.
Cc: Ruiyu Ni <ruiyu.ni@intel.com>
Cc: Tomas Hoger <thoger@redhat.com>
Contributed-under: TianoCore Contribution Agreement 1.0
Signed-off-by: Laszlo Ersek <lersek@redhat.com>
Reviewed-by: Wu Jiaxin <jiaxin.wu@intel.com>
Reviewed-by: Ruiyu Ni <ruiyu.ni@intel.com>
Diffstat (limited to 'Nt32Pkg')
| -rw-r--r-- | Nt32Pkg/Nt32Pkg.dsc | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/Nt32Pkg/Nt32Pkg.dsc b/Nt32Pkg/Nt32Pkg.dsc index 47e37ec..499b1fe 100644 --- a/Nt32Pkg/Nt32Pkg.dsc +++ b/Nt32Pkg/Nt32Pkg.dsc @@ -159,7 +159,11 @@ CpuExceptionHandlerLib|MdeModulePkg/Library/CpuExceptionHandlerLibNull/CpuExceptionHandlerLibNull.inf
LockBoxLib|MdeModulePkg/Library/LockBoxNullLib/LockBoxNullLib.inf
IntrinsicLib|CryptoPkg/Library/IntrinsicLib/IntrinsicLib.inf
+!if $(TLS_ENABLE) == TRUE
OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLib.inf
+!else
+ OpensslLib|CryptoPkg/Library/OpensslLib/OpensslLibCrypto.inf
+!endif
!if $(SECURE_BOOT_ENABLE) == TRUE
PlatformSecureLib|Nt32Pkg/Library/PlatformSecureLib/PlatformSecureLib.inf
|