Re: I installed Openssl 1.1.1k and Ubuntu 20.04 did an upgrade and reverted it back to 1.1.1f. Usually Ubuntu upgrades don’t break it.

Jakob Bohm via openssl-users <openssl-users@xxxxxxxxxxx> · Fri, 21 May 2021 16:03:02 +0200



    On 2021-05-19 19:56, Michael McKenney wrote:

    
        I installed Openssl 1.1.1k and Ubuntu 20.04
          did an upgrade and reverted it back to 1.1.1f.   Usually
          Ubuntu upgrades don’t break it. 
          

          OpenSSL 1.1.1f  31 Mar 2020 (Library:
            OpenSSL 1.1.1k  25 Mar 2021)
         
        built on: Thu Apr 29 14:11:04 2021 UTC
        platform: linux-x86_64
        options:  bn(64,64) rc4(16x,int) des(int)
          blowfish(ptr)
        compiler: gcc -fPIC -pthread -m64
          -Wa,--noexecstack -Wall -O3 -DOPENSSL_USE_NODELETE -DL_ENDIAN
          -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2
          -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5
          -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM
          -DKECCAK1600_ASM -DRC4_ASM -DMD5_ASM -DAESNI_ASM -DVPAES_ASM
          -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPOLY1305_ASM
          -DZLIB -DNDEBUG
        OPENSSLDIR: "/usr/local/ssl"
        ENGINESDIR:
          "/usr/local/ssl/lib/engines-1.1"
        Seeding source: os-specific
         
        How do I change it back to 1.1.1k?  I tried
          a reinstall.  Didn’t work.  
         
        This is the directions I use to install
        sudo apt-get update && sudo apt-get upgrade
        openssl
            version -a
        sudo
            apt install build-essential checkinstall zlib1g-dev -y
        cd
            /usr/local/src/
         
        sudo
            wget
            https://www.openssl.org/source/openssl-1.1.1k.tar.gz
        sudo
            tar -xf openssl-1.1.1k.tar.gz
         
        cd
            openssl-1.1.1k
        sudo
            ./config --prefix=/usr/local/ssl --openssldir=/usr/local/ssl
            shared zlib
         
        sudo
            make
        sudo
            make test
        sudo
            make install
         
        cd
            /etc/ld.so.conf.d/
        sudo
            vim openssl-1.1.1k.conf
               
            add    /usr/local/ssl/lib
               
            
        sudo
            ldconfig -v
        sudo
            mv /usr/bin/c_rehash /usr/bin/c_rehash.backup  
            
        sudo
            mv /usr/bin/openssl /usr/bin/openssl.backup
         
        sudo
            vim /etc/environment
        add
               
PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games
                              
            :/usr/local/games:/usr/local/ssl/bin"
                              
            
        source
            /etc/environment
        echo
            $PATH
         
        which
            openssl
        openssl
            version -a    
            
         
    Sorry, but you did not state what command and output indicates 

      that Ubuntu undid your upgrade, what is the output of each of 

      the following diagnostic commands (after Ubuntu apparently 

      undid your upgrade).

    
    $ dpkg --status libssl1.1

    $ dpkg --status libssl-dev

    $ dpkg --status openssl

    $ type openssl

    $ openssl version -a

    $ ls -alF /usr/lib/x86_64-linux-gnu/libssl*

      $ ls -alF /usr/locallib/libssl*

      $ ls -alF /usr/local/bin/openssl

    $ /usr/local/bin/openssl version -a

    
    Enjoy

Jakob
-- 
Jakob Bohm, CIO, Partner, WiseMo A/S.  https://www.wisemo.com
Transformervej 29, 2860 Søborg, Denmark.  Direct +45 31 13 16 10
This public discussion message is non-binding and may contain errors.
WiseMo - Remote Service Management for PCs, Phones and Embedded