Since edk2 does not compile the apps/ subdirectory, the only other patches that might apply are openssl-1.1.0-no-md5-verify.patch (but edk2 does not have secure_getenv) and of course FIPS 140-2 mode.
Paolo Bonzini