升級(jí)OpsnSSL

Openssl官網(wǎng)：https://www.openssl.org/source/
下載3.0.4地址：https://www.openssl.org/source/openssl-3.0.4.tar.gz

#查看SSL版本
[root@cnki-120-145-80 ~]# openssl version
OpenSSL 1.0.2k-fips  26 Jan 2017

#獲取舊的openssl命令的位置
[root@cnki-120-145-80 ~]# which openssl
/usr/bin/openssl
[root@cnki-120-145-80 ~]# whereis openssl
openssl: /usr/bin/openssl /usr/lib64/openssl /usr/include/openssl /usr/share/man/man1/openssl.1ssl.gz


#================ 升級(jí)SSL ==============
#1.進(jìn)入opt 目錄
cd /opt

#2.下載Openssl
wget https://www.openssl.org/source/openssl-3.0.4.tar.gz

#3.解壓
tar -xvf openssl-3.0.4.tar.gz

#4.進(jìn)入解壓后的目錄
cd openssl-3.0.4

#5.編譯(這一步可能會(huì)報(bào)錯(cuò),請(qǐng)看報(bào)錯(cuò)1、報(bào)錯(cuò)2、報(bào)錯(cuò)3)
#./config --prefix=/usr/local/openssl shared zlib

./config --prefix=/usr/local/openssl shared 
#make depend

#6.這一步可能會(huì)報(bào)錯(cuò)，請(qǐng)看報(bào)錯(cuò)2
#make & make install
make
#make test 
sudo make install


#7.備份之前的ssl
mv /usr/bin/openssl /usr/bin/openssl.bak
mv /usr/include/openssl /usr/include/openssl.bak

#8.將默認(rèn)的openssl命令指向新的
ln -s /usr/local/openssl/bin/openssl /usr/bin/openssl
ln -s /usr/local/openssl/include/openssl /usr/include/openssl

#9.更新動(dòng)態(tài)鏈接庫(kù)數(shù)據(jù)
echo "/usr/local/openssl/lib64" >> /etc/ld.so.conf

#10.加載配置
ldconfig -v


#11.查看是否升級(jí)成功
[root@cnki-120-145-80 openssl-3.0.4]# openssl version
OpenSSL 3.0.4 21 Jun 2022 (Library: OpenSSL 3.0.4 21 Jun 2022)

報(bào)錯(cuò)1：

#錯(cuò)誤
Can't locate IPC/Cmd.pm in @INC (@INC contains: /opt/openssl-3.0.4/util/perl /usr/local/lib64/perl5 /usr/local/share/perl5 /usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl /usr/lib64/perl5 /usr/share/perl5 . /opt/openssl-3.0.4/external/perl/Text-Template-1.56/lib) at /opt/openssl-3.0.4/util/perl/OpenSSL/config.pm line 18.
BEGIN failed--compilation aborted at /opt/openssl-3.0.4/util/perl/OpenSSL/config.pm line 18.
Compilation failed in require at /opt/openssl-3.0.4/Configure line 24.
BEGIN failed--compilation aborted at /opt/openssl-3.0.4/Configure line 24.



#安裝perl-CPAN
yum install -y perl-CPAN

#全部默認(rèn)（回車）
perl -MCPAN -e sh

#在shell中安裝缺少的模塊
cpan[1]> install IPC/Cmd.pm

#安裝完成退出 Ctrl+Z

報(bào)錯(cuò)2：

#錯(cuò)誤1
Failure!  build file wasn't produced.
Please read INSTALL.md and associated NOTES-* files.  You may also have to
look over your available compiler tool chain or change your configuration.

ERROR!
No C compiler found, please specify one with the environment variable CC,
or configure with an explicit configuration target.

#錯(cuò)誤2
ib-c_zlib.d.tmp -MT crypto/comp/libcrypto-lib-c_zlib.o -c -o crypto/comp/libcrypto-lib-c_zlib.o crypto/comp/c_zlib.c
crypto/comp/c_zlib.c:36:19: fatal error: zlib.h: No such file or directory
 # include <zlib.h>
                   ^
compilation terminated.
make[1]: *** [crypto/comp/libcrypto-lib-c_zlib.o] Error 1
make[1]: Leaving directory `/opt/openssl-3.0.4'
make: *** [build_sw] Error 2

#解決
yum install  -y gcc gcc-c++ glibc make autoconf openssl openssl-devel pcre-devel  pam-devel

報(bào)錯(cuò)3：

錯(cuò)誤：
To build 64-bit package, do this: /opt/openssl-3.0.4/Configure linux64-mips6

解決
./Configure linux64-mips64  --prefix=/usr/local/openssl shared