The OpenSSL package contains management tools and libraries
relating to cryptography. These are useful for providing
cryptographic functions to other packages, such as OpenSSH, email
applications, and web browsers (for accessing HTTPS sites).
Approximate build time:
5.4 SBU
Required disk space:
474 MB
8.46.1. Installation of OpenSSL
Prepare OpenSSL for compilation:
./config --prefix=/usr \
--openssldir=/etc/ssl \
--libdir=lib \
shared \
zlib-dynamic
Compile the package:
make
To test the results, issue:
make test
One test, 30-test_afalg.t, is known to fail on some kernel
configurations (depending on inconsistent values of
CONFIG_CRYPTO_USER_API* settings.) If it fails, it can safely be
ignored.
Install the package:
sed -i '/INSTALL_LIBS/s/libcrypto.a libssl.a//' Makefile
make MANSUFFIX=ssl install
Add the version to the documentation directory name, to be
consistent with other packages:
mv -v /usr/share/doc/openssl /usr/share/doc/openssl-3.0.1
If desired, install some additional documentation:
cp -vfr doc/* /usr/share/doc/openssl-3.0.1
Note
You should update OpenSSL when a new version which fixes
vulnerabilities is announced. The releases run in series, with a
letter for each release after the initial release (e.g. 1.1.1,
1.1.1a, 1.1.1b, etc). Because LFS installs only the shared
libraries, there is no need to recompile packages which link to
libcrypto.so
or libssl.so
when
upgrading in the same series.
However, any running programs linked to those libraries need to
be stopped and restarted. Read the related entries in Section 8.2.1, “Upgrade
Issues” for details.