2015-10-16

[SOLVED]how-to-upgrade-openssl-in-centos-6-5-linux-unix-from-source

INSTALL OPENSSL FROM SOURCE CODE
#16:18 29/09/2015
#Source: http://stackoverflow.com/questions/22952287/how-to-upgrade-openssl-in-centos-6-5-linux-unix-from-source

rpm -qa openssl
yum clean all && yum update "openssl*"
lsof -n | grep ssl | grep DEL
cd /usr/src

wget http://www.openssl.org/source/openssl-1.0.1g.tar.gz
(4.29MB)
root@dc1 /opt/setup/openssl-setup# cat openssl-1.0.1g.tar.gz.md5
de62b43dfcd858e66a74bee1c834e959  openssl-1.0.1g.tar.gz

tar -zxf openssl-1.0.1g.tar.gz
cd openssl-1.0.1g
./config --prefix=/usr --openssldir=/usr/local/openssl shared
./config
make
make test
make install
cd /usr/src
rm -rf openssl-1.0.1g.tar.gz
rm -rf openssl-1.0.1g

and

openssl version

If it shows the old version, do the steps below.

$ mv /usr/bin/openssl /root/
$ ln -s /usr/local/ssl/bin/openssl /usr/bin/openssl
openssl version
root@dc1 /opt/setup/kerio-vpn-client# openssl version
OpenSSL 1.0.1g 7 Apr 2014



root@dc1 /opt/setup/kerio-vpn-client# openssl version -a
OpenSSL 1.0.1g 7 Apr 2014
built on: Tue Sep 29 16:21:15 ICT 2015
platform: linux-x86_64
options:  bn(64,64) rc4(16x,int) des(idx,cisc,16,int) idea(int) blowfish(idx)
compiler: gcc -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -Wa,--noexecstack -m64 -DL_ENDIAN -DTERMIO -O3 -Wall -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DWHIRLPOOL_ASM -DGHASH_ASM
OPENSSLDIR: "/usr/local/ssl"




root@dc1 /opt/setup/kerio-vpn-client# lsof | grep -i libssl | grep DEL | awk '{print $1}' | sort | uniq
httpd
squid
VBoxHeadl
VBoxSVC
vboxwebsr
VBoxXPCOM



###
root@dc1 /opt/setup/kerio-vpn-client# yum info openssl
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
 * base: mirrors.vonline.vn
 * epel: ftp.cuhk.edu.hk
 * extras: mirrors.vonline.vn
 * rpmforge: mirrors.digipower.vn
 * updates: mirrors.vonline.vn
Installed Packages
Name        : openssl
Arch        : x86_64
Version     : 1.0.1e
Release     : 42.el6
Size        : 4.0 M
Repo        : installed
From repo   : base
Summary     : A general purpose cryptography library with TLS implementation
URL         : http://www.openssl.org/
License     : OpenSSL
Description : The OpenSSL toolkit provides support for secure communications between
            : machines. OpenSSL includes a certificate management tool and shared
            : libraries which provide various cryptographic algorithms and
            : protocols.

Available Packages
Name        : openssl
Arch        : i686
Version     : 1.0.1e
Release     : 42.el6
Size        : 1.5 M
Repo        : base
Summary     : A general purpose cryptography library with TLS implementation
URL         : http://www.openssl.org/
License     : OpenSSL
Description : The OpenSSL toolkit provides support for secure communications between
            : machines. OpenSSL includes a certificate management tool and shared
            : libraries which provide various cryptographic algorithms and
            : protocols.

root@dc1 /opt/setup/kerio-vpn-client#

No comments:

Post a Comment