uefi-ref/edk2
1
0
Fork 0
mirror of https://github.com/tianocore/edk2 synced 2026-08-27 00:23:19 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

CryptoPkg/OpensslLib: add cmellia and cmac algorithm in OpensslFullLib

Browse source 
To build TPM 2.0 Reference Implementation library,
OpensslLib requires below features:
 - camellia
 - cmac
 - elliptic curved algorithms

For thes, openssl should be configured without below two options:
  - no-camellia
  - no-cmac

Therefore, remove these two option for OpensslFullLib only
since TPM 2.0 Reference Library requires to use openssl built with ec

This increases OpensslFullLib size -- around 16K.

Except configure.py, other changed files are auto generated by
configure.py

Signed-off-by: Yeoreum Yun <yeoreum.yun@arm.com>
This commit is contained in:
Levi Yun 2024-10-08 11:51:39 +01:00 • committed by mergify[bot]
parent 8b83386cb2
commit c8ee38acba
14 changed files with 8991 additions and 10013 deletions
Download patch file Download diff file Expand all files Collapse all files

2446
CryptoPkg/Library/OpensslLib/OpensslGen/IA32-GCC/crypto/camellia/cmll-x86.S Normal file
View file

File diff suppressed because it is too large Load diff

2359
CryptoPkg/Library/OpensslLib/OpensslGen/IA32-MSFT/crypto/camellia/cmll-x86.nasm Normal file
View file

File diff suppressed because it is too large Load diff

1137
CryptoPkg/Library/OpensslLib/OpensslGen/X64-GCC/crypto/bn/rsaz-2k-avxifma.s
View file

File diff suppressed because it is too large Load diff

1745
CryptoPkg/Library/OpensslLib/OpensslGen/X64-GCC/crypto/bn/rsaz-3k-avxifma.s
View file

File diff suppressed because it is too large Load diff

1899
CryptoPkg/Library/OpensslLib/OpensslGen/X64-GCC/crypto/bn/rsaz-4k-avxifma.s
View file

File diff suppressed because it is too large Load diff

1948
CryptoPkg/Library/OpensslLib/OpensslGen/X64-GCC/crypto/camellia/cmll-x86_64.s Normal file
View file

File diff suppressed because it is too large Load diff

1260
CryptoPkg/Library/OpensslLib/OpensslGen/X64-MSFT/crypto/bn/rsaz-2k-avxifma.nasm
View file

File diff suppressed because it is too large Load diff

1916
CryptoPkg/Library/OpensslLib/OpensslGen/X64-MSFT/crypto/bn/rsaz-3k-avxifma.nasm
View file

File diff suppressed because it is too large Load diff

2070
CryptoPkg/Library/OpensslLib/OpensslGen/X64-MSFT/crypto/bn/rsaz-4k-avxifma.nasm
View file

File diff suppressed because it is too large Load diff

2163
CryptoPkg/Library/OpensslLib/OpensslGen/X64-MSFT/crypto/camellia/cmll-x86_64.nasm Normal file
View file

File diff suppressed because it is too large Load diff

6
CryptoPkg/Library/OpensslLib/OpensslGen/include/openssl/configuration-ec.h
View file

@ -73,9 +73,6 @@ extern "C" {
# ifndef OPENSSL_NO_BROTLI_DYNAMIC
# define OPENSSL_NO_BROTLI_DYNAMIC
# endif
# ifndef OPENSSL_NO_CAMELLIA
# define OPENSSL_NO_CAMELLIA
# endif
# ifndef OPENSSL_NO_CAPIENG
# define OPENSSL_NO_CAPIENG
# endif
@ -85,9 +82,6 @@ extern "C" {
# ifndef OPENSSL_NO_CHACHA
# define OPENSSL_NO_CHACHA
# endif
# ifndef OPENSSL_NO_CMAC
# define OPENSSL_NO_CMAC
# endif
# ifndef OPENSSL_NO_CMP
# define OPENSSL_NO_CMP
# endif

12
CryptoPkg/Library/OpensslLib/OpensslLibFull.inf
View file

@ -171,6 +171,14 @@
$(OPENSSL_PATH)/crypto/bn/bn_x931p.c
$(OPENSSL_PATH)/crypto/buffer/buf_err.c
$(OPENSSL_PATH)/crypto/buffer/buffer.c
$(OPENSSL_PATH)/crypto/camellia/camellia.c
$(OPENSSL_PATH)/crypto/camellia/cmll_cbc.c
$(OPENSSL_PATH)/crypto/camellia/cmll_cfb.c
$(OPENSSL_PATH)/crypto/camellia/cmll_ctr.c
$(OPENSSL_PATH)/crypto/camellia/cmll_ecb.c
$(OPENSSL_PATH)/crypto/camellia/cmll_misc.c
$(OPENSSL_PATH)/crypto/camellia/cmll_ofb.c
$(OPENSSL_PATH)/crypto/cmac/cmac.c
$(OPENSSL_PATH)/crypto/comp/c_brotli.c
$(OPENSSL_PATH)/crypto/comp/c_zlib.c
$(OPENSSL_PATH)/crypto/comp/c_zstd.c
@ -275,6 +283,7 @@
$(OPENSSL_PATH)/crypto/evp/e_aes_cbc_hmac_sha256.c
$(OPENSSL_PATH)/crypto/evp/e_aria.c
$(OPENSSL_PATH)/crypto/evp/e_bf.c
$(OPENSSL_PATH)/crypto/evp/e_camellia.c
$(OPENSSL_PATH)/crypto/evp/e_cast.c
$(OPENSSL_PATH)/crypto/evp/e_chacha20_poly1305.c
$(OPENSSL_PATH)/crypto/evp/e_des.c
@ -635,6 +644,8 @@
$(OPENSSL_PATH)/providers/implementations/ciphers/cipher_aes_xts.c
$(OPENSSL_PATH)/providers/implementations/ciphers/cipher_aes_xts_fips.c
$(OPENSSL_PATH)/providers/implementations/ciphers/cipher_aes_xts_hw.c
$(OPENSSL_PATH)/providers/implementations/ciphers/cipher_camellia.c
$(OPENSSL_PATH)/providers/implementations/ciphers/cipher_camellia_hw.c
$(OPENSSL_PATH)/providers/implementations/ciphers/cipher_cts.c
$(OPENSSL_PATH)/providers/implementations/ciphers/cipher_null.c
$(OPENSSL_PATH)/providers/implementations/digests/md5_prov.c
@ -677,6 +688,7 @@
$(OPENSSL_PATH)/providers/implementations/keymgmt/kdf_legacy_kmgmt.c
$(OPENSSL_PATH)/providers/implementations/keymgmt/mac_legacy_kmgmt.c
$(OPENSSL_PATH)/providers/implementations/keymgmt/rsa_kmgmt.c
$(OPENSSL_PATH)/providers/implementations/macs/cmac_prov.c
$(OPENSSL_PATH)/providers/implementations/macs/gmac_prov.c
$(OPENSSL_PATH)/providers/implementations/macs/hmac_prov.c
$(OPENSSL_PATH)/providers/implementations/macs/kmac_prov.c

39
CryptoPkg/Library/OpensslLib/OpensslLibFullAccel.inf
View file

@ -28,8 +28,8 @@
DEFINE OPENSSL_PATH = openssl
DEFINE OPENSSL_GEN_PATH = OpensslGen
DEFINE OPENSSL_FLAGS = -DL_ENDIAN -DOPENSSL_SMALL_FOOTPRINT -D_CRT_SECURE_NO_DEPRECATE -D_CRT_NONSTDC_NO_DEPRECATE -D OPENSSL_NO_INLINE_ASM
DEFINE OPENSSL_FLAGS_IA32 = -DAES_ASM -DGHASH_ASM -DMD5_ASM -DOPENSSL_CPUID_OBJ -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DVPAES_ASM
DEFINE OPENSSL_FLAGS_X64 = -DAES_ASM -DBSAES_ASM -DGHASH_ASM -DKECCAK1600_ASM -DMD5_ASM -DOPENSSL_CPUID_OBJ -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DVPAES_ASM
DEFINE OPENSSL_FLAGS_IA32 = -DAES_ASM -DCMLL_ASM -DGHASH_ASM -DMD5_ASM -DOPENSSL_CPUID_OBJ -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DVPAES_ASM
DEFINE OPENSSL_FLAGS_X64 = -DAES_ASM -DBSAES_ASM -DCMLL_ASM -DGHASH_ASM -DKECCAK1600_ASM -DMD5_ASM -DOPENSSL_CPUID_OBJ -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DVPAES_ASM
DEFINE OPENSSL_FLAGS_AARCH64 = -DBSAES_ASM -DKECCAK1600_ASM -DMD5_ASM -DOPENSSL_CPUID_OBJ -DOPENSSL_SM3_ASM -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DVPAES_ASM
#
@ -191,6 +191,11 @@
$(OPENSSL_PATH)/crypto/bn/bn_x931p.c
$(OPENSSL_PATH)/crypto/buffer/buf_err.c
$(OPENSSL_PATH)/crypto/buffer/buffer.c
$(OPENSSL_PATH)/crypto/camellia/cmll_cfb.c
$(OPENSSL_PATH)/crypto/camellia/cmll_ctr.c
$(OPENSSL_PATH)/crypto/camellia/cmll_ecb.c
$(OPENSSL_PATH)/crypto/camellia/cmll_ofb.c
$(OPENSSL_PATH)/crypto/cmac/cmac.c
$(OPENSSL_PATH)/crypto/comp/c_brotli.c
$(OPENSSL_PATH)/crypto/comp/c_zlib.c
$(OPENSSL_PATH)/crypto/comp/c_zstd.c
@ -295,6 +300,7 @@
$(OPENSSL_PATH)/crypto/evp/e_aes_cbc_hmac_sha256.c
$(OPENSSL_PATH)/crypto/evp/e_aria.c
$(OPENSSL_PATH)/crypto/evp/e_bf.c
$(OPENSSL_PATH)/crypto/evp/e_camellia.c
$(OPENSSL_PATH)/crypto/evp/e_cast.c
$(OPENSSL_PATH)/crypto/evp/e_chacha20_poly1305.c
$(OPENSSL_PATH)/crypto/evp/e_des.c
@ -654,6 +660,8 @@
$(OPENSSL_PATH)/providers/implementations/ciphers/cipher_aes_xts.c
$(OPENSSL_PATH)/providers/implementations/ciphers/cipher_aes_xts_fips.c
$(OPENSSL_PATH)/providers/implementations/ciphers/cipher_aes_xts_hw.c
$(OPENSSL_PATH)/providers/implementations/ciphers/cipher_camellia.c
$(OPENSSL_PATH)/providers/implementations/ciphers/cipher_camellia_hw.c
$(OPENSSL_PATH)/providers/implementations/ciphers/cipher_cts.c
$(OPENSSL_PATH)/providers/implementations/ciphers/cipher_null.c
$(OPENSSL_PATH)/providers/implementations/digests/md5_prov.c
@ -696,6 +704,7 @@
$(OPENSSL_PATH)/providers/implementations/keymgmt/kdf_legacy_kmgmt.c
$(OPENSSL_PATH)/providers/implementations/keymgmt/mac_legacy_kmgmt.c
$(OPENSSL_PATH)/providers/implementations/keymgmt/rsa_kmgmt.c
$(OPENSSL_PATH)/providers/implementations/macs/cmac_prov.c
$(OPENSSL_PATH)/providers/implementations/macs/gmac_prov.c
$(OPENSSL_PATH)/providers/implementations/macs/hmac_prov.c
$(OPENSSL_PATH)/providers/implementations/macs/kmac_prov.c
@ -790,6 +799,7 @@
$(OPENSSL_GEN_PATH)/IA32-MSFT/crypto/aes/aes-586.nasm ||||gEfiCryptoPkgTokenSpaceGuid.PcdOpensslLibAssemblySourceStyleNasm
$(OPENSSL_GEN_PATH)/IA32-MSFT/crypto/aes/aesni-x86.nasm ||||gEfiCryptoPkgTokenSpaceGuid.PcdOpensslLibAssemblySourceStyleNasm
$(OPENSSL_GEN_PATH)/IA32-MSFT/crypto/aes/vpaes-x86.nasm ||||gEfiCryptoPkgTokenSpaceGuid.PcdOpensslLibAssemblySourceStyleNasm
$(OPENSSL_GEN_PATH)/IA32-MSFT/crypto/camellia/cmll-x86.nasm ||||gEfiCryptoPkgTokenSpaceGuid.PcdOpensslLibAssemblySourceStyleNasm
$(OPENSSL_GEN_PATH)/IA32-MSFT/crypto/x86cpuid.nasm ||||gEfiCryptoPkgTokenSpaceGuid.PcdOpensslLibAssemblySourceStyleNasm
$(OPENSSL_GEN_PATH)/IA32-MSFT/crypto/md5/md5-586.nasm ||||gEfiCryptoPkgTokenSpaceGuid.PcdOpensslLibAssemblySourceStyleNasm
$(OPENSSL_GEN_PATH)/IA32-MSFT/crypto/modes/ghash-x86.nasm ||||gEfiCryptoPkgTokenSpaceGuid.PcdOpensslLibAssemblySourceStyleNasm
@ -799,6 +809,7 @@
$(OPENSSL_GEN_PATH)/IA32-GCC/crypto/aes/aes-586.S ||||!gEfiCryptoPkgTokenSpaceGuid.PcdOpensslLibAssemblySourceStyleNasm
$(OPENSSL_GEN_PATH)/IA32-GCC/crypto/aes/aesni-x86.S ||||!gEfiCryptoPkgTokenSpaceGuid.PcdOpensslLibAssemblySourceStyleNasm
$(OPENSSL_GEN_PATH)/IA32-GCC/crypto/aes/vpaes-x86.S ||||!gEfiCryptoPkgTokenSpaceGuid.PcdOpensslLibAssemblySourceStyleNasm
$(OPENSSL_GEN_PATH)/IA32-GCC/crypto/camellia/cmll-x86.S ||||!gEfiCryptoPkgTokenSpaceGuid.PcdOpensslLibAssemblySourceStyleNasm
$(OPENSSL_GEN_PATH)/IA32-GCC/crypto/x86cpuid.S ||||!gEfiCryptoPkgTokenSpaceGuid.PcdOpensslLibAssemblySourceStyleNasm
$(OPENSSL_GEN_PATH)/IA32-GCC/crypto/md5/md5-586.S ||||!gEfiCryptoPkgTokenSpaceGuid.PcdOpensslLibAssemblySourceStyleNasm
$(OPENSSL_GEN_PATH)/IA32-GCC/crypto/modes/ghash-x86.S ||||!gEfiCryptoPkgTokenSpaceGuid.PcdOpensslLibAssemblySourceStyleNasm
@ -948,6 +959,12 @@
$(OPENSSL_PATH)/crypto/bn/rsaz_exp_x2.c
$(OPENSSL_PATH)/crypto/buffer/buf_err.c
$(OPENSSL_PATH)/crypto/buffer/buffer.c
$(OPENSSL_PATH)/crypto/camellia/cmll_cfb.c
$(OPENSSL_PATH)/crypto/camellia/cmll_ctr.c
$(OPENSSL_PATH)/crypto/camellia/cmll_ecb.c
$(OPENSSL_PATH)/crypto/camellia/cmll_misc.c
$(OPENSSL_PATH)/crypto/camellia/cmll_ofb.c
$(OPENSSL_PATH)/crypto/cmac/cmac.c
$(OPENSSL_PATH)/crypto/comp/c_brotli.c
$(OPENSSL_PATH)/crypto/comp/c_zlib.c
$(OPENSSL_PATH)/crypto/comp/c_zstd.c
@ -1052,6 +1069,7 @@
$(OPENSSL_PATH)/crypto/evp/e_aes_cbc_hmac_sha256.c
$(OPENSSL_PATH)/crypto/evp/e_aria.c
$(OPENSSL_PATH)/crypto/evp/e_bf.c
$(OPENSSL_PATH)/crypto/evp/e_camellia.c
$(OPENSSL_PATH)/crypto/evp/e_cast.c
$(OPENSSL_PATH)/crypto/evp/e_chacha20_poly1305.c
$(OPENSSL_PATH)/crypto/evp/e_des.c
@ -1410,6 +1428,8 @@
$(OPENSSL_PATH)/providers/implementations/ciphers/cipher_aes_xts.c
$(OPENSSL_PATH)/providers/implementations/ciphers/cipher_aes_xts_fips.c
$(OPENSSL_PATH)/providers/implementations/ciphers/cipher_aes_xts_hw.c
$(OPENSSL_PATH)/providers/implementations/ciphers/cipher_camellia.c
$(OPENSSL_PATH)/providers/implementations/ciphers/cipher_camellia_hw.c
$(OPENSSL_PATH)/providers/implementations/ciphers/cipher_cts.c
$(OPENSSL_PATH)/providers/implementations/ciphers/cipher_null.c
$(OPENSSL_PATH)/providers/implementations/digests/md5_prov.c
@ -1452,6 +1472,7 @@
$(OPENSSL_PATH)/providers/implementations/keymgmt/kdf_legacy_kmgmt.c
$(OPENSSL_PATH)/providers/implementations/keymgmt/mac_legacy_kmgmt.c
$(OPENSSL_PATH)/providers/implementations/keymgmt/rsa_kmgmt.c
$(OPENSSL_PATH)/providers/implementations/macs/cmac_prov.c
$(OPENSSL_PATH)/providers/implementations/macs/gmac_prov.c
$(OPENSSL_PATH)/providers/implementations/macs/hmac_prov.c
$(OPENSSL_PATH)/providers/implementations/macs/kmac_prov.c
@ -1551,6 +1572,7 @@
$(OPENSSL_GEN_PATH)/X64-MSFT/crypto/aes/aesni-xts-avx512.nasm ||||gEfiCryptoPkgTokenSpaceGuid.PcdOpensslLibAssemblySourceStyleNasm
$(OPENSSL_GEN_PATH)/X64-MSFT/crypto/aes/bsaes-x86_64.nasm ||||gEfiCryptoPkgTokenSpaceGuid.PcdOpensslLibAssemblySourceStyleNasm
$(OPENSSL_GEN_PATH)/X64-MSFT/crypto/aes/vpaes-x86_64.nasm ||||gEfiCryptoPkgTokenSpaceGuid.PcdOpensslLibAssemblySourceStyleNasm
$(OPENSSL_GEN_PATH)/X64-MSFT/crypto/camellia/cmll-x86_64.nasm ||||gEfiCryptoPkgTokenSpaceGuid.PcdOpensslLibAssemblySourceStyleNasm
$(OPENSSL_GEN_PATH)/X64-MSFT/crypto/x86_64cpuid.nasm ||||gEfiCryptoPkgTokenSpaceGuid.PcdOpensslLibAssemblySourceStyleNasm
$(OPENSSL_GEN_PATH)/X64-MSFT/crypto/md5/md5-x86_64.nasm ||||gEfiCryptoPkgTokenSpaceGuid.PcdOpensslLibAssemblySourceStyleNasm
$(OPENSSL_GEN_PATH)/X64-MSFT/crypto/modes/aes-gcm-avx512.nasm ||||gEfiCryptoPkgTokenSpaceGuid.PcdOpensslLibAssemblySourceStyleNasm
@ -1570,6 +1592,7 @@
$(OPENSSL_GEN_PATH)/X64-GCC/crypto/aes/aesni-xts-avx512.s ||||!gEfiCryptoPkgTokenSpaceGuid.PcdOpensslLibAssemblySourceStyleNasm
$(OPENSSL_GEN_PATH)/X64-GCC/crypto/aes/bsaes-x86_64.s ||||!gEfiCryptoPkgTokenSpaceGuid.PcdOpensslLibAssemblySourceStyleNasm
$(OPENSSL_GEN_PATH)/X64-GCC/crypto/aes/vpaes-x86_64.s ||||!gEfiCryptoPkgTokenSpaceGuid.PcdOpensslLibAssemblySourceStyleNasm
$(OPENSSL_GEN_PATH)/X64-GCC/crypto/camellia/cmll-x86_64.s ||||!gEfiCryptoPkgTokenSpaceGuid.PcdOpensslLibAssemblySourceStyleNasm
$(OPENSSL_GEN_PATH)/X64-GCC/crypto/x86_64cpuid.s ||||!gEfiCryptoPkgTokenSpaceGuid.PcdOpensslLibAssemblySourceStyleNasm
$(OPENSSL_GEN_PATH)/X64-GCC/crypto/md5/md5-x86_64.s ||||!gEfiCryptoPkgTokenSpaceGuid.PcdOpensslLibAssemblySourceStyleNasm
$(OPENSSL_GEN_PATH)/X64-GCC/crypto/modes/aes-gcm-avx512.s ||||!gEfiCryptoPkgTokenSpaceGuid.PcdOpensslLibAssemblySourceStyleNasm
@ -1725,6 +1748,14 @@
$(OPENSSL_PATH)/crypto/bn/bn_x931p.c
$(OPENSSL_PATH)/crypto/buffer/buf_err.c
$(OPENSSL_PATH)/crypto/buffer/buffer.c
$(OPENSSL_PATH)/crypto/camellia/camellia.c
$(OPENSSL_PATH)/crypto/camellia/cmll_cbc.c
$(OPENSSL_PATH)/crypto/camellia/cmll_cfb.c
$(OPENSSL_PATH)/crypto/camellia/cmll_ctr.c
$(OPENSSL_PATH)/crypto/camellia/cmll_ecb.c
$(OPENSSL_PATH)/crypto/camellia/cmll_misc.c
$(OPENSSL_PATH)/crypto/camellia/cmll_ofb.c
$(OPENSSL_PATH)/crypto/cmac/cmac.c
$(OPENSSL_PATH)/crypto/comp/c_brotli.c
$(OPENSSL_PATH)/crypto/comp/c_zlib.c
$(OPENSSL_PATH)/crypto/comp/c_zstd.c
@ -1829,6 +1860,7 @@
$(OPENSSL_PATH)/crypto/evp/e_aes_cbc_hmac_sha256.c
$(OPENSSL_PATH)/crypto/evp/e_aria.c
$(OPENSSL_PATH)/crypto/evp/e_bf.c
$(OPENSSL_PATH)/crypto/evp/e_camellia.c
$(OPENSSL_PATH)/crypto/evp/e_cast.c
$(OPENSSL_PATH)/crypto/evp/e_chacha20_poly1305.c
$(OPENSSL_PATH)/crypto/evp/e_des.c
@ -2187,6 +2219,8 @@
$(OPENSSL_PATH)/providers/implementations/ciphers/cipher_aes_xts.c
$(OPENSSL_PATH)/providers/implementations/ciphers/cipher_aes_xts_fips.c
$(OPENSSL_PATH)/providers/implementations/ciphers/cipher_aes_xts_hw.c
$(OPENSSL_PATH)/providers/implementations/ciphers/cipher_camellia.c
$(OPENSSL_PATH)/providers/implementations/ciphers/cipher_camellia_hw.c
$(OPENSSL_PATH)/providers/implementations/ciphers/cipher_cts.c
$(OPENSSL_PATH)/providers/implementations/ciphers/cipher_null.c
$(OPENSSL_PATH)/providers/implementations/digests/md5_prov.c
@ -2229,6 +2263,7 @@
$(OPENSSL_PATH)/providers/implementations/keymgmt/kdf_legacy_kmgmt.c
$(OPENSSL_PATH)/providers/implementations/keymgmt/mac_legacy_kmgmt.c
$(OPENSSL_PATH)/providers/implementations/keymgmt/rsa_kmgmt.c
$(OPENSSL_PATH)/providers/implementations/macs/cmac_prov.c
$(OPENSSL_PATH)/providers/implementations/macs/gmac_prov.c
$(OPENSSL_PATH)/providers/implementations/macs/hmac_prov.c
$(OPENSSL_PATH)/providers/implementations/macs/kmac_prov.c

4
CryptoPkg/Library/OpensslLib/configure.py
View file

@ -24,11 +24,9 @@ def openssl_configure(openssldir, target, ec = True):
'no-autoload-config',
'no-bf',
'no-blake2',
'no-camellia',
'no-capieng',
'no-cast',
'no-chacha',
'no-cmac',
'no-cmp',
'no-cms',
'no-ct',
@ -94,7 +92,7 @@ def openssl_configure(openssldir, target, ec = True):
'disable-legacy',
]
if not ec:
cmdline += [ 'no-ec', ]
cmdline += [ 'no-ec', 'no-camellia', 'no-cmac' ]
print('')
print(f'# -*- configure openssl for {target} (ec={ec}) -*-')
rc = subprocess.run(cmdline, cwd = openssldir,