Upgrade open-SSL

Because Cyrus SASL depends on openssl1.0.0, the SASL

[Root @ RHEL4 ~] # OpenSSL version

OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008

 

[Root @ RHEL4 ~] # Rpm-Qa | grep-I OpenSSL

PyOpenSSL-0.6-1.p24.7.2.2

Openssl-0.9.8e-12.el5_4.6

Openssl-0.9.8e-12.el5_4.6

 

Note: To use the zlib compression module, you must first install zlib. Otherwise, an error will be reported as follows:

[Root @ RHEL4 openssl-1.0.1c] #./config -- prefix =/usr/local/SSL shared zlib-dynamic

Make [2]: *** [c_zlib.o] Error 1

Make [2]: Leaving directory '/root/openssl-1.0.1c/crypto/COMP'

Make [1]: *** [subdirs] Error 1

Make [1]: Leaving directory '/root/openssl-1.0.1c/crypto'

Make: *** [build_crypto] Error 1

Zlib is not required here. The command is as follows:

[Root @ RHEL4 openssl-1.0.1c] #./config -- prefix =/usr/local/sslshared no-zlib

[Root @ RHEL4 openssl-1.0.1c] # Make

[Root @ RHEL4 openssl-1.0.1c] # Make Test

[Root @ RHEL4 openssl-1.0.1c] # make install

 

Upgrade symbolic link:

[Root @ RHEL4 local] # ll/usr/bin/OpenSSL *

-Rwxr-XR-x 1 Root 385920 Mar 12 2010/usr/bin/OpenSSL

[Root @ RHEL4 ~] # Mv/usr/bin/OpenSSL. Bak

 

[Root @ RHEL4 ~] # Ll/usr/local/SSL/bin/OpenSSL

-Rwxr-XR-x 1 Root 586788 Feb 26 08:51/usr/local/SSL/bin/OpenSSL

[Root @ RHEL4 ~] # Ln-S/usr/local/SSL/bin/OpenSSL
/Usr/bin/OpenSSL

[Root @ RHEL4 ~] # Ll/usr/bin/OpenSSL *

Lrwxrwxrwx 1 Root 26 Feb 26 09: 10/usr/bin/OpenSSL->/usr/local/SSL/bin/OpenSSL

-Rwxr-XR-x 1 Root 385920 Mar 12 2010/usr/bin/OpenSSL. Bak

[Root @ RHEL4 ~] # OpenSSL version

OpenSSL 1.0.1c 10 May 2012

 

Link to update the running environment:

LD. So. cache will need to be updated withthe location of the new OpenSSL shared libs: libcrypto. so.0.9.8 andlibssl. so.0.9.8

Sometimes it is sufficient to just symlinkor copy these two files to/lib, but we recommend you follow these instructionsinstead.

Edit/etc/lD. so. conf, add to paths... (The modification effect is as follows: 1. Of course, it can also be directly in/etc/lD. so. conf. create another one under the D folder. CONF file, copy/usr/local/SSL/lib to the file, and also in the existing. add this path to the conf file, LD. so. conf contains all. CONF file)

[Root @ RHEL4 ~] # Cat/etc/lD. So. conf

Include lD. So. conf. d/*. conf

[Root @ RHEL4 ~] # Echo/usr/local/SSL/lib>/etc/lD. So. conf

[Root @ RHEL4 ~] # Cat/etc/lD. So. conf

Include lD. So. conf. d/*. conf

/Usr/local/SSL/lib

[Root @ RHEL4 ~] # Ldconfig

 

Change the root environment variable and add the following lines in. bash_profile:

[Root @ EBS ~] # Echo $ path

/Usr/local/jdk1.6.0 _ 31/bin:/usr/Kerberos/sbin:/usr/Kerberos/bin:/usr/local/sbin:/usr/local/bin: /sbin:/bin:/usr/sbin:/usr/bin:/root/bin

[Root @ EBS ~] # Vi ~ /. Bash_profile

Export Path =/usr/local/SSL/bin: $ path

[Root @ EBS ~] # Source ~ /. Bash_profile

[Root @ EBS ~] # Echo $ path

/Usr/local/SSL/bin:/usr/local/jdk1.6.0 _ 31/bin:/usr/Kerberos/sbin:/usr/Kerberos/bin: /usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin

 

Log On again to verify that the upgrade is successful:

[Root @ EBS ~] # Which OpenSSL

/Usr/local/SSL/bin/OpenSSL

[Root @ EBS ~] # OpenSSL version

OpenSSL 1.0.1c 10 May 2012

[Root @ EBS ~] # LDD/usr/local/SSL/bin/OpenSSL

Libssl. so.1.0.0 =>/usr/local/SSL/lib/libssl. so.1.0.0 (0x00002af259a26000)

Libcrypto. so.1.0.0 =>/usr/local/SSL/lib/libcrypto. so.1.0.0 (0x00002af259c89000)

Libdl. so.2 =>/lib64/libdl. so.2 (0x0000003d5b200000)

Libc. so.6 =>/lib64/libc. so.6 (0x0000003d5aa00000)

/Lib64/ld-linux-x86-64.so.2 (0x0000003d5a600000)