Linux:openssl to implement HTTPS verification

There is no doubt that it is important to compile and install Apache to support OpenSSL, so that you can achieve HTTPS, and here we go one step at a time.

Open source implementation of OPENSSL:SSL

Libcrypto: A universal cryptographic library that provides a variety of cryptographic functions

The implementation of LIBSSL:TLS/SSL protocol, a TLS/SSL library based on session, which realizes identity authentication, data confidentiality and session integrity

In order to be simple, I was installed with the Yum, but still tell you how to compile the installation ....

1, compile and install OpenSSL

[Root@test4 ~]# tar zxvf openssl-1.0.1c.tar.gz

[Root@test4 ~]# CD openssl-1.0.1c

[Root@test4 openssl-1.0.1c]#./config--prefix=/usr/local/openssl--openssldir=/usr/local/openssl zlib-dynamic Shared threads

[Root@test4 openssl-1.0.1c]# make

[Root@test4 openssl-1.0.1c]# make Test

[Root@test4 openssl-1.0.1c]# make install

--openssldir=openssldir

installation directory, default is/usr/local/ssl.

--prefix=prefix

Sets the prefix for the Lib include Bin directory, which defaults to the Openssldir directory.

--install_prefix=destdir

When you set up an installation, this directory is used as the "root" directory, usually for packaging, and the default is empty.

Zlib

Zlib-dynamic

No-zlib

Use static zlib compression libraries, use dynamic zlib compression libraries, and do not use zlib compression work

Yes.

Threads

No-threads

Whether to compile libraries that support multithreading. Default support.

Shared

No-shared

Whether to generate a dynamic connection library.

Asm

No-asm

Whether to use assembly code to speed up the compilation process during compilation.

Enable-sse2

No-sse2

Enable/disable SSE2 instruction set acceleration. If your CPU supports the SSE2 instruction set, you can hit

Open, or it will be closed.

Gmp

No-gmp

Enable/disable GMP library

rfc3779

no-rfc3779

Enable/Disable IP address extensions that implement X509v3 certificates

Krb5

No-krb5

Enable/disable Kerberos 5 support

Ssl

No-ssl

Ssl2

Ssl3

No-ssl2

No-ssl3

Tls

No-tls

Enable/Disable SSL (contains SSL2/SSL3) TLS protocol support.

Dso

No-dso

Enables/disables the ability to invoke other dynamic link libraries. [Hint]no-dso only in no-shared

is available under the premise.

[Hint] in order to install Apache Mod_ssl success, Sslv2/sslv3/tls must be turned on.

This article URL address: http://www.bianceng.cn/OS/Linux/201410/45340.htm