How To Install Openssl On Centos 7

How to Install the latest OpenSSL version from Source on Linux

On this page

1. What we will exercise?
2. Step 1 - Install Dependencies
   1. On Ubuntu
   2. On CentOS
3. Stride two - Download OpenSSL
4. Footstep 3 - Install OpenSSL
   1. Install and Compile OpenSSL
   2. Configure Link Libraries
   3. Configure OpenSSL Binary
5. Pace four - Testing
6. Reference

OpenSSL is a widely used crypto library that implements SSL and TLS protocols for secure communication over computer networks. OpenSSL is used by many programs like Apache Web server, PHP, Postfix and many others. OpenSSL provides back up for various cryptographic algorithms such as ciphers (AES, Blowfish, DES, IDEA etc.), cryptographic hash functions (MD5, MD4, SHA-1, SHA-2 etc.) and public key cryptography (RSA, DSA, Diffie-Hellman central exchange).

In this tutorial, I will show you footstep by footstep how to install the latest stable OpenSSL version from source on Ubuntu eighteen.04 and CentOS 7.6 servers.

What we volition do?

1. Install Dependencies
2. Download OpenSSL Source Code
3. Install OpenSSL
   1. Compile and Install OpenSSL
   2. Configure Link Libraries
   3. Configure OpenSSL Binary
4. Testing

Step one - Install Dependencies

The first step, before we can compile the OpenSSL library from source, is to install some bundle dependencies including the 'build-essential' packet on Ubuntu, or 'Evolution Tools' package on CentOS.

On Ubuntu

Update the Ubuntu repository and install packet dependencies for software compilation using the apt command beneath.

sudo apt update
sudo apt install build-essential checkinstall zlib1g-dev -y

On CentOS

Install the 'Development Tools' and some packages libraries using the yum command.

yum group install 'Evolution Tools'
yum install perl-core zlib-devel -y

Later on the installation is complete, get to the next step.

Step ii - Download OpenSSL

In this tutorial, we will install the latest stable version of OpenSSL - OpenSSL i.0.2o. You can download the source code from the OpenSSL site.

Get to the '/usr/local/src' directory and download the OpenSSL source code using wget.

cd /usr/local/src/
wget https://world wide web.openssl.org/source/openssl-1.0.2o.tar.gz

Now extract the openssl.tar.gz file, and get to the 'openssl' directory.

tar -xf openssl-1.0.2o.tar.gz
cd openssl-i.0.2o

The OpenSSL source lawmaking has been downloaded.

Step three - Install OpenSSL

Before installing the custom OpenSSL version to the system, let'due south cheque the installed version using the command beneath.

openssl version -a

Beneath is my results on Ubuntu:

And this is on CentOS:

Nosotros will supplant the '1.1.0g' version with the latest stable version i.0.2o.

Nosotros will install the new OpenSSL version to the specific directory '/usr/local/ssl', and and then enable the Link Libraries of OpenSSL, and configure the new binary PATH for OpenSSL.

Install and Compile OpenSSL

Become to the openssl downloaded directory '/usr/local/src/openssl'.

cd /usr/local/src/openssl-1.0.2o

Configure and compile OpenSSL with commands below. Ad

./config --prefix=/usr/local/ssl --openssldir=/usr/local/ssl shared zlib
                  make
make examination
              

Wait for the OpenSSL compile process.

Note:

• --prefix and --openssldir = Set the output path of the OpenSSL.
• shared = force to create a shared library.
• zlib = enable the compression using zlib library.

When the compile procedure is complete, install the OpenSSL using the command below.

brand install

OpenSSL is installed in the '/usr/local/ssl' directory. Advertisement

Configure Link Libraries

Next, nosotros will configure the shared libraries for OpenSSL. The new OpenSSL binary volition load library files from the '/usr/local/ssl/lib' directory.

Become to the '/etc/ld.and so.conf.d' directory and create new configuration file 'openssl-1.0.2o.conf'.

cd /etc/ld.then.conf.d/
vim openssl-1.0.2o.conf

Paste the openssl library path directory.

/usr/local/ssl/lib

Save and go out.

Now reload the dynamic link using the command below.

sudo ldconfig -v

And you will see the OpenSSL libraries on the '/usr/local/ssl/lib' directory has been loaded.

Ubuntu:

CentOS: Advert

Configure OpenSSL Binary

We will replace the default openssl binary '/usr/bin/openssl or /bin/openssl' with the new version '/usr/local/ssl/bin/openssl'.

On Ubuntu 18.04 LTS

Backup the binary files.

mv /usr/bin/c_rehash /usr/bin/c_rehash.BEKUP
mv /usr/bin/openssl /usr/bin/openssl.BEKUP

Edit the '/etc/environment' file using vim.

vim /etc/environment

Now add the new OpenSSL binary directory as below

PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/usr/local/ssl/bin"

Save and exit.

Reload the surround file and test the new updated binary PATH.

source /etc/environment
echo $PATH

Now bank check again the OpenSSL binary file.

which openssl

You lot volition get the result every bit below.

The binary path of OpenSSL for Ubuntu has been updated.

On CentOS seven.six

Backup the CentOS OpenSSL binary files.

mv /bin/openssl /bin/openssl.BEKUP

Create new environment files for OpenSSL.

vim /etc/profile.d/openssl.sh

Paste configuration below.

#Set OPENSSL_PATH OPENSSL_PATH="/usr/local/ssl/bin" export OPENSSL_PATH PATH=$PATH:$OPENSSL_PATH export PATH

Save and go out.

Make the openssl.sh file executable.

chmod +x /etc/profile.d/openssl.sh

Load the OpenSSL surroundings and cheque the PATH bin directory using commands beneath.

source /etc/profile.d/openssl.sh
repeat $PATH

Now bank check the OpenSSL file.

which openssl

Yous will become the result as beneath.

Advert

The binary path for OpenSSL on CentOS has been updated.

Step iv - Testing

Test the OpenSSL new version using the following command.

openssl version -a

The result on Ubuntu.

Result on CentOS.

The new latest stable version of OpenSSL has been installed from source on Linux Ubuntu eighteen.04 and CentOS vii.five.

Reference

• https://wiki.openssl.org/

Suggested articles

×

This characteristic is simply available to subscribers. Get your subscription here.

Source: https://www.howtoforge.com/tutorial/how-to-install-openssl-from-source-on-linux/

Posted by: diazthoom1983.blogspot.com

Share this post