如何将Ubuntu上的OpenSSL从OpenSSL 1.0.1f更新到OpenSSL 1.0.2g?

时间:2017-08-28 18:12:02

标签: openssl ssl-certificate ubuntu-14.04 heartbleed-bug

我有几个步骤来执行此操作,但在执行以下步骤后,我仍然获得相同的版本。

ubuntu@ip-XXXX:~$ openssl version -v
OpenSSL 1.0.1f 6 Jan 2014
ubuntu@ip-XXXX:~$ sudo wget http://www.openssl.org/source/openssl-1.0.2g.tar.gz
ubuntu@ip-XXXX:~$ sudo tar -xvzf openssl-1.0.2g.tar.gz
ubuntu@ip-XXXX:~$ cd openssl-1.0.2g
ubuntu@ip-XXXX:~$ sudo ./config
ubuntu@ip-XXXX:~$ sudo make install
ubuntu@ip-XXXX:~$ sudo ln -sf /usr/local/ssl/bin/openssl openssl-1.0.2g
ubuntu@ip-XXXX:~$ openssl version -v
OpenSSL 1.0.1f 6 Jan 2014

其实我排除了结果,但我没有遇到任何错误。你们可以给我一些投入吗?

2 个答案:

答案 0 :(得分:0)

To update the OpenSSL version follow the below steps
Log into the machine and switch to the root as below
**sudo su**
Install the gcc module if not installed yet
**yum install gcc**
Switch to the location /usr/src/  
**cd  /usr/src/**
Change the openssl-1.1.1.tar.gz to the version which you want as below
**wget ​https://www.openssl.org/source/openssl-1.1.1.tar.gz**
Extract the tar file as below
**tar -zxf openssl-1.1.1.tar.gz**
Switch to the extracted the directory
**cd /usr/src/openssl-1.1.1/**
Run the below commands by ignoring errors
**./config --prefix=/usr/local --openssldir=/usr/local/openssl**
**make**
**make test**
**make install**
**export LD_LIBRARY_PATH=/usr/local/lib64**
To make export permanent
**echo "export LD_LIBRARY_PATH=/usr/local/lib64" > /etc/profile.d/ld_library_path.sh**
**chmod ugo+x /etc/profile.d/ld_library_path.sh**
Check the version  openssl version
Recommended reboot here  openssl version

答案 1 :(得分:-1)

是的,最后我得到了解决方案。我做了两个案子。

OpenSSL 1.0.1f到OpenSSL 1.0.2g

ubuntu@ip-XXXX:~$ openssl version -v
OpenSSL 1.0.1f 6 Jan 2014
ubuntu@ip-XXXX:~$ sudo wget http://www.openssl.org/source/openssl-1.0.2g.tar.gz
ubuntu@ip-XXXX:~$ sudo tar -xvzf openssl-1.0.2g.tar.gz
ubuntu@ip-XXXX:~$ cd openssl-1.0.2g
ubuntu@ip-XXXX:~$ sudo apt-get update
ubuntu@ip-XXXX:~$ sudo apt-get install gcc
ubuntu@ip-XXXX:~$ sudo apt-get install make
ubuntu@ip-XXXX:~$ sudo ./config
ubuntu@ip-XXXX:~$ sudo make install
ubuntu@ip-XXXX:~$ sudo ln -sf /usr/local/ssl/bin/openssl `which openssl`
ubuntu@ip-XXXX:~$ openssl version -v
OpenSSL 1.0.2g  1 Mar 2016  

OpenSSL 1.0.1g到OpenSSL 1.0.2l

ubuntu@ip-XXXX:~$ openssl version -v
OpenSSL 1.0.2g  1 Mar 2016
ubuntu@ip-XXXX:~$ sudo wget http://www.openssl.org/source/openssl-1.0.2l.tar.gz
ubuntu@ip-XXXX:~$ sudo tar -xvzf openssl-1.0.2l.tar.gz
ubuntu@ip-XXXX:~$ cd openssl-1.0.2l
ubuntu@ip-XXXX:~$ sudo ./config
ubuntu@ip-XXXX:~$ sudo make install
ubuntu@ip-XXXX:~$ sudo ln -sf /usr/local/ssl/bin/openssl `which openssl`
ubuntu@ip-XXXX:~$ openssl version -v
OpenSSL 1.0.2l  25 May 2017  

在第一种情况下更新,gcc,如果您的机器中没有安装,则需要进行安装。如果有任何问题?请评论。