Building OpenSSL 0.9.8c
Building a Web Server, for Linux
Requirements
Perl
Download
- Package(Linux source) : openssl-0.9.8c.tar.gz
- Unpack with command...
tar -xzf openssl-0.9.8c.tar.gz
Our Configuration
- Install to : /usr/local/ssl
- Module type : dynamically and staticly loaded modules, *.so *.a
Build Instructions
Configure
.../openssl-0.9.8c]# ./config --prefix=/usr/local/ssl-0.9.8c shared zlib-dynamic enable-camellia
--prefix=/usr/local/ssl-0.9.8c
[this is the installation location; default is '/usr/local/ssl' -- which we will symlink]shared
[in addition to the usual static libraries, create shared libraries]zlib-dynamic
[like "zlib", but has OpenSSL load the zlib library dynamically when needed]enable-camellia
[enables the symmetric cipher 'Camellia' (128-bit, 192-bit, 256-bit key versions), which is now available for royalty-free use]
display guess on system made by './config'...
.../openssl-0.9.8c]# ./config -t
Build and Install
.../openssl-0.9.8c]# make depend
[step required since extra cipher was enabled].../openssl-0.9.8c]# make.../openssl-0.9.8c]# make test.../openssl-0.9.8c]# make install
Symlink
Form symlink from '/usr/local/ssl-0.9.8c' to '/usr/local/ssl'
...]# cd /usr/local/usr/local]# ln -s ssl-0.9.8c ssl
Update the Run-time Linker
ld.so.cache will need to be updated with the location of the new OpenSSL shared libs: libcrypto.so.0.9.8 and libssl.so.0.9.8
Sometimes it is sufficient to just symlink or copy these two files to /lib, but we recommend you follow these instructions instead.
Edit /etc/ld.so.conf, add to paths...
/usr/local/ssl/lib
Update the run-time linker...
...]# ldconfig
Update the PATH
Edit /root/.bash_profile, add to PATH variable...
/usr/local/ssl/bin
Re-login.
[sanity check] OpenSSL
Verify that binary 'openssl' is linking against the correct ssl libraries...
...]# ldd /usr/local/ssl/bin/openssl
- libssl.so.0.9.8 => /usr/local/ssl-0.9.8c/lib/libssl.so.0.9.8 ...
- libcrypto.so.0.9.8 => /usr/local/ssl-0.9.8c/lib/libcrypto.so.0.9.8 ...
...]# which openssl
/usr/local/ssl/bin/openssl
...]# openssl version
OpenSSL 0.9.8c 05 Sep 2006
If another path, or an older version is shown, your system contains a previously installed OpenSSL that is first [relative to the newer openssl] in the path.
Repeate the steps in section 'Update the PATH', except place the specified location at the start of the PATH variable.
Note that the older openssl, on most systems, is located under /usr/bin
The location of 'openssl' can be found with...
...]# which openssl
