On 20/06/2016 22:25, Yoom Nguyen wrote: > Greetings Everyone, > > > I recent download and compiled a new version openssl-1.0.2h.tar than what came with RedHat distribution. > > successfully compile and test. Using the following options > export CFLAGS="-fPIC" > ./config shared enable-ec_nistp_64_gcc_128 no-ssl2 no-ssl3 --openssldir=/usr/local/openssl -DOPENSSL_USE_IPV6=0 > > > I am concern whether I have used and compiled correct information or Not. I am not seeing any library that would indicate version .2h > They all show libcrypto.so.1.0.0 and libssl.so.1.0.0 > > > Are they the correct results? > > > > From this directory /usr/local/openssl/lib > I do not see any libcrypto.... libarary that would refer to version 1.0.2????? > all of them is 1.0.0.... > > Are these correct results. > > [root at web1 lib]# ls -l > total 8544 > drwxr-xr-x. 2 root root 4096 Jun 20 15:16 engines > -rw-r--r--. 1 root root 4658450 Jun 20 15:16 libcrypto.a > lrwxrwxrwx. 1 root root 18 Jun 20 15:16 libcrypto.so -> libcrypto.so.1.0.0 > -r-xr-xr-x. 1 root root 2817780 Jun 20 15:16 libcrypto.so.1.0.0 > -rw-r--r--. 1 root root 753560 Jun 20 15:16 libssl.a > lrwxrwxrwx. 1 root root 15 Jun 20 15:16 libssl.so -> libssl.so.1.0.0 > -r-xr-xr-x. 1 root root 509261 Jun 20 15:16 libssl.so.1.0.0 > drwxr-xr-x. 2 root root 58 Apr 12 2015 pkgconfig > > > > My server is running redhat 7 and I see these different version. > [root at web1 lib]# ls -alt /lib64/libcrypto* > lrwxrwxrwx. 1 root root 19 Apr 9 2015 /lib64/libcrypto.so.6 -> libcrypto.so.0.9.8e > lrwxrwxrwx. 1 root root 19 Apr 9 2015 /lib64/libcrypto.so.10 -> libcrypto.so.1.0.1e > -rwxr-xr-x. 1 root root 2013048 Jan 15 2015 /lib64/libcrypto.so.1.0.1e > -rwxr-xr-x. 1 root root 1440048 Jun 3 2014 /lib64/libcrypto.so.0.9.8e > > > Is there a document for compiling and integrating a new OPENSSL release for and existing Redhat 7 EN OS some where? > > > Thanks, > Y Yes, the OpenSSL team pretends that all the 1.0.Xx versions are binary compatible and should be installed as libcrypto.so.1.0.0 . In reality, this is not entirely true, since at least one flag bits passed as a top level parameter have changed between the various 1.0.x patch versions. You can override their policy by changing one or two settings in the top level Makefile. Enjoy Jakob -- Jakob Bohm, CIO, Partner, WiseMo A/S. https://www.wisemo.com Transformervej 29, 2860 S?borg, Denmark. Direct +45 31 13 16 10 This public discussion message is non-binding and may contain errors. WiseMo - Remote Service Management for PCs, Phones and Embedded
