Ini saya bikin guide sederhana untuk upgrade openssl redhat, mungkin bisa membantu
kalo ada yang
mau. Kalo ada yang keliru tolong kasih tau yah. So far, di mesin saya no problem.
Regards,
kapot
Upgrading OPENSSL on RedHat 7.3 (Simple Guide)
==============================================
* Download latest openssl AND openssl-engine from :
http://www.openssl/org -OR-
http://openssl.planetmirror.com
* Copy all *.tar.gz to /tmp
* Building openssl-0.9.6g
cd /tmp
tar -zxvf openssl-0.9.6g.tar.gz
cd openssl-0.9.6g.tar.gz
./config shared
make
make test
make install
* Building openssl-engine.0.9.6g
cd /tmp
tar -zxvf openssl-engine-0.9.6g.tar.gz
cd openssl-engine-0.9.6g.tar.gz
./config shared
make
make test
make install
* Remove old openssl rpm
rpm --erase --nodeps openssl
* Link new files
cd /usr/lib
rm libcrypto.so
rm libcrypto.so.1
rm libcrypto.so.2
rm libssl.so
rm libssl.so.1
rm libssl.so.2
ln -s /usr/local/ssl/lib/libcrypto.so libcrypto.so
ln -s /usr/local/ssl/lib/libcrypto.so libcrypto.so.1
ln -s /usr/local/ssl/lib/libcrypto.so libcrypto.so.2
ln -s /usr/local/ssl/lib/libssl.so libssl.so
ln -s /usr/local/ssl/lib/libssl.so libssl.so.1
ln -s /usr/local/ssl/lib/libssl.so libssl.so.2
ln -s /usr/local/ssl/include/ /usr/include/ssl
cd /usr/include
rm -rf openssl
lb -s /usr/local/ssl/include/openssl openssl
* Rerun ldconfig
cd /etc
rm ld.so.cache
vi ld.so.conf
- add /usr/local/ssl/lib
- add /usr/local/lib <-- optional
ldconfig
* Done
Thanks to "David Tonhofer, m-plify S.A." <[EMAIL PROTECTED]>
--- Doe John <[EMAIL PROTECTED]> wrote:
> yup, Redhat memang agak membingungkan dalam membuat versi package, yg paling baru
>adalah
> openssl-0.96b-28
>
> http://rhn.redhat.com/errata/RHSA-2002-160.html
>
> Updated openssl packages fix protocol parsing bugs
>
> Advisory: RHSA-2002:160-21
> Last updated on: 2002-08-05
> CVEs (cve.mitre.org): CAN-2002-0659
>
> so jgn kuatir, itu sudah versi bugfix kok.
>
> kalau mau ngotot install yg terbaru dari source, d/l dari openssl.org, kemudian rpm
>-ta
> openssl-0.96g.tar.gz
>
> cuman mesti hati2 dgn dependency program yg lain,
> dan menurut saya, agak nggak kompatibel dgn path RH,
> contohnya library-nya yg seharusnya /lib ditaruh di /usr/lib, jadi sebaiknya edit
>dulu file
> spec-nya baru create rpm binary-nya
>
> CMIIW
>
> cheers
> *yg ga jago linux*
__________________________________________________
Do you Yahoo!?
New DSL Internet Access from SBC & Yahoo!
http://sbc.yahoo.com
--
Utk berhenti langganan, kirim email ke [EMAIL PROTECTED]
Informasi arsip di http://www.linux.or.id/milis.php3
