On 20/06/2016 22:25, Yoom Nguyen wrote:
Greetings Everyone,
I recent download and compiled a new version openssl-1.0.2h.tar than what
came with RedHat distribution.
successfully compile and test. Using the following options
export CFLAGS="-fPIC"
./config shared enable-ec_nistp_64_gcc_128 no-ssl2 no-ssl3
--openssldir=/usr/local/openssl -DOPENSSL_USE_IPV6=0
I am concern whether I have used and compiled correct information or Not. I am
not seeing any library that would indicate version .2h
They all show libcrypto.so.1.0.0 and libssl.so.1.0.0
Are they the correct results?
From this directory /usr/local/openssl/lib
I do not see any libcrypto.... libarary that would refer to version 1.0.2?????
all of them is 1.0.0....
Are these correct results.
[root@web1 lib]# ls -l
total 8544
drwxr-xr-x. 2 root root 4096 Jun 20 15:16 engines
-rw-r--r--. 1 root root 4658450 Jun 20 15:16 libcrypto.a
lrwxrwxrwx. 1 root root 18 Jun 20 15:16 libcrypto.so -> libcrypto.so.1.0.0
-r-xr-xr-x. 1 root root 2817780 Jun 20 15:16 libcrypto.so.1.0.0
-rw-r--r--. 1 root root 753560 Jun 20 15:16 libssl.a
lrwxrwxrwx. 1 root root 15 Jun 20 15:16 libssl.so -> libssl.so.1.0.0
-r-xr-xr-x. 1 root root 509261 Jun 20 15:16 libssl.so.1.0.0
drwxr-xr-x. 2 root root 58 Apr 12 2015 pkgconfig
My server is running redhat 7 and I see these different version.
[root@web1 lib]# ls -alt /lib64/libcrypto*
lrwxrwxrwx. 1 root root 19 Apr 9 2015 /lib64/libcrypto.so.6 ->
libcrypto.so.0.9.8e
lrwxrwxrwx. 1 root root 19 Apr 9 2015 /lib64/libcrypto.so.10 ->
libcrypto.so.1.0.1e
-rwxr-xr-x. 1 root root 2013048 Jan 15 2015 /lib64/libcrypto.so.1.0.1e
-rwxr-xr-x. 1 root root 1440048 Jun 3 2014 /lib64/libcrypto.so.0.9.8e
Is there a document for compiling and integrating a new OPENSSL release for and
existing Redhat 7 EN OS some where?
Thanks,
Y
Yes, the OpenSSL team pretends that all the 1.0.Xx versions are binary
compatible and should be installed as libcrypto.so.1.0.0 .
In reality, this is not entirely true, since at least one flag bits
passed as a top level parameter have changed between the various
1.0.x patch versions.
You can override their policy by changing one or two settings in the top
level Makefile.
Enjoy
Jakob
--
Jakob Bohm, CIO, Partner, WiseMo A/S. https://www.wisemo.com
Transformervej 29, 2860 Søborg, Denmark. Direct +45 31 13 16 10
This public discussion message is non-binding and may contain errors.
WiseMo - Remote Service Management for PCs, Phones and Embedded
--
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
