linux centos 升级 openssl

本文发布于:2016-04-23,最后更新于:2022-11-08,如果内容失效请留言告知。

centos 升级 openssl

安装相关依赖

1
apt-get install zlib1g zlib1g-dev

下载 cloudflare/sslconfig

1
git clone --depth 1 https://github.com/cloudflare/sslconfig

下载 openssl 并解压

1
2
3
4
5
6
wget https://www.openssl.org/source/openssl-1.1.1s.tar.gz
tar -zxvf openssl-1.1.1s.tar.gz
mv openssl-1.1.1s openssl
cd openssl
 
patch -p1 < ../sslconfig/patches/openssl__chacha20_poly1305_draft_and_rfc_ossl102g.patch

执行编译

1
2
3
4
5
6
7
# 编译为静态库
./config shared zlib
# 编译为动态库
# ./config shared zlib-dynamic
make depend
make
make install

备份旧的 openssl

1
2
mv /usr/bin/openssl /usr/bin/openssl.bak
mv /usr/include/openssl /usr/include/openssl.bak

建立软链接

1
2
ln -s /usr/local/ssl/bin/openssl /usr/bin/openssl
ln -s /usr/local/ssl/include/openssl/ /usr/include/openssl

配置文件搜索路径

1
2
echo "/usr/local/ssl/lib" >> /etc/ld.so.conf
ldconfig -v | grep openssl

查看最新版本

1
openssl version -a

脚本汇总:

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
cd /usr/source
 
# 安装相关依赖
apt-get install zlib1g zlib1g-dev
 
# 下载 cloudflare/sslconfig
git clone --depth 1 https://github.com/cloudflare/sslconfig
 
# 下载 openssl 并解压
wget https://www.openssl.org/source/openssl-1.1.1s.tar.gz
tar -zxvf openssl-1.1.1s.tar.gz
mv openssl-OpenSSL_1_1_1s/ openssl
cd openssl
 
patch -p1 < ../sslconfig/patches/openssl__chacha20_poly1305_draft_and_rfc_ossl102g.patch
 
# 编译为静态库
./config shared zlib
# 编译为动态库
# ./config shared zlib-dynamic
make depend
make
make install
 
# 备份旧的 openssl
mv /usr/bin/openssl /usr/bin/openssl.bak
mv /usr/include/openssl /usr/include/openssl.bak
 
# 建立软链接
ln -s /usr/local/ssl/bin/openssl /usr/bin/openssl
ln -s /usr/local/ssl/include/openssl/ /usr/include/openssl
 
# 配置文件搜索路径
echo "/usr/local/ssl/lib" >> /etc/ld.so.conf
ldconfig -v | grep openssl
 
# 查看最新版本
openssl version -a
点赞 (0)

发表回复

您的邮箱地址不会被公开。 必填项已用 * 标注

Captcha Code