linux升級OpenSSL

1、當前系統版本

[plain] view plain copy

class="alt">-sh-4.1$ cat /etc/redhat-release

CentOS release 6.5 (Final)

class="alt">-sh-4.1$ uname -m

x86_64

class="alt">-sh-4.1$ uname -r

2.6.32-431.17.1.el6.x86_64

2、SSL版本信息

[plain] view plain copy

class="alt"># openssl version

OpenSSL 1.0.1e-fips 11 Feb 2013

class="alt"># wget https://www.openssl.org/source/openssl-1.0.1g.tar.gz

………… ### 詳細信息

3、更新zlib

[plain] view plain copy

class="alt"># yum install -y zlib

4、解壓安裝 OpenSSL

[plain] view plain copy

class="alt"># pwd

/root/tools

class="alt"># ls

openssl-1.0.1g.tar.gz

class="alt"># tar xf openssl-1.0.1g.tar.gz

# cd openssl-1.0.1g

class="alt"># ./config shared zlib

# make

class="alt"># make install

# cd ..

class="alt"># mv /usr/bin/openssl /usr/bin/openssl.ori # 將之前的備份

# mv /usr/include/openssl /usr/include/openssl.ori

class="alt"># ln -s /usr/local/ssl/bin/openssl /usr/bin/openssl # 軟鏈接

# ln -s /usr/local/ssl/include/openssl /usr/include/openssl

class="alt"># cp /etc/ld.so.conf /etc/ld.so.conf.ori # 操作前備份【這樣如果出現錯誤，可以及時還原】

# echo “/usr/local/ssl/lib” >> /etc/ld.so.conf

class="alt"># ldconfig -v

其中 /etc/ld.so.conf 修改後的信息【使用vim修改】

[plain] view plain copy

class="alt">[zhang@zhang ~] $ cat /etc/ld.so.conf

include ld.so.conf.d/*.conf

class="alt">

# Update openssl from OpenSSL 1.0.1e-fips To OpenSSL 1.0.1g

class="alt">/usr/local/ssl/lib

5、查看是否升級成功

[plain] view plain copy

class="alt"># openssl version

OpenSSL 1.0.1g 7 Apr 2014 # 升級成功

另請參考

1、linux升級OpenSSL

2、加強 Nginx 的 SSL 安全

3、linux中ldconfig的使用介紹