The OpenSSL package contains management tools and libraries
relating to cryptography. These are useful for providing
cryptographic functions to other packages, such as OpenSSH, email
applications, and web browsers (for accessing HTTPS sites).
Approximate build time:
2.2 SBU
Required disk space:
154 MB
8.49.1. Installation of OpenSSL
Prepare OpenSSL for compilation:
./config --prefix=/usr \
--openssldir=/etc/ssl \
--libdir=lib \
shared \
zlib-dynamic
Compile the package:
make
To test the results, issue:
make test
One test 30-test_afalg.t is known to fail on some kernel
configurations (it apparently assumes certain unspecified crypto
options have been selected).
Install the package:
sed -i '/INSTALL_LIBS/s/libcrypto.a libssl.a//' Makefile
make MANSUFFIX=ssl install
Add the version to the documentation directory name, to be
consistent with other packages:
mv -v /usr/share/doc/openssl /usr/share/doc/openssl-1.1.1k
If desired, install some additional documentation:
cp -vfr doc/* /usr/share/doc/openssl-1.1.1k
Note
You should update OpenSSL when a new version which fixes
vulnerabilities is announced. The releases run in series, with a
letter for each release after the initial release (e.g. 1.1.1,
1.1.1a, 1.1.1b, etc). Because LFS installs only the shared
libraries, there is no need to recompile packages which link to
libcrypto.so
or libssl.so
when
upgrading in the same series.
However, any running programs linked to those libraries need to
be stopped and restarted. Read the related entries in Section 8.2.1, “Upgrade
Issues” for details.