diff -up a/CryptoPkg/Library/OpensslLib/openssl/crypto/bio/bss_fd.c.preserve-nl a/CryptoPkg/Library/OpensslLib/openssl/crypto/bio/bss_fd.c

--- a/CryptoPkg/Library/OpensslLib/openssl/crypto/bio/bss_fd.c.preserve-nl	2016-11-10 15:03:44.000000000 +0100

+++ b/CryptoPkg/Library/OpensslLib/openssl/crypto/bio/bss_fd.c	2016-12-22 14:36:16.730740423 +0100

@@ -202,8 +202,10 @@ static int fd_gets(BIO *bp, char *buf, i

     char *ptr = buf;

     char *end = buf + size - 1;

-    while ((ptr < end) && (fd_read(bp, ptr, 1) > 0) && (ptr[0] != '\n'))

-        ptr++;

+    while (ptr < end && fd_read(bp, ptr, 1) > 0) {

+        if (*ptr++ == '\n')

+           break;

+    }

     ptr[0] = '\0';

diff -up a/CryptoPkg/Library/OpensslLib/openssl/doc/crypto/BIO_read.pod.preserve-nl a/CryptoPkg/Library/OpensslLib/openssl/doc/crypto/BIO_read.pod

--- a/CryptoPkg/Library/OpensslLib/openssl/doc/crypto/BIO_read.pod.preserve-nl	2016-11-10 15:03:45.000000000 +0100

+++ b/CryptoPkg/Library/OpensslLib/openssl/doc/crypto/BIO_read.pod	2016-12-22 14:37:22.731245197 +0100

@@ -23,7 +23,8 @@ in B<buf>. Usually this operation will a

 from the BIO of maximum length B<len-1>. There are exceptions to this,

 however; for example, BIO_gets() on a digest BIO will calculate and

 return the digest and other BIOs may not support BIO_gets() at all.

-The returned string is always NUL-terminated.

+The returned string is always NUL-terminated and the '\n' is preserved

+if present in the input data.

 BIO_write() attempts to write B<len> bytes from B<buf> to BIO B.