Oracle Linux/openssl - Revision history

R00t: /* Parse errors: No plan found in TAP output */

2018-10-09T13:54:49Z

‎Parse errors: No plan found in TAP output

R00t: /* Parse errors: No plan found in TAP output */

2018-10-09T13:54:13Z

‎Parse errors: No plan found in TAP output

R00t at 23:12, 8 October 2018

2018-10-08T23:12:57Z

R00t at 18:45, 8 October 2018

2018-10-08T18:45:21Z

R00t: /* Configure OpenSSL */

2018-10-08T18:14:23Z

‎Configure OpenSSL

R00t at 18:13, 8 October 2018

2018-10-08T18:13:33Z

R00t at 18:07, 8 October 2018

2018-10-08T18:07:50Z

R00t at 18:07, 8 October 2018

2018-10-08T18:07:22Z

R00t at 17:39, 8 October 2018

2018-10-08T17:39:49Z

R00t at 17:31, 8 October 2018

2018-10-08T17:31:09Z

@@ Line 45: / Line 45: @@
   <nowiki>~$ yum install make cpan</nowiki>
 Then configure your perl with CPAN. Just enter cpan in the command prompt and answer yes to all interactive questions.<br/>
-Then update you cpan manager:
+Then update your cpan manager:
   <nowiki>~$ sudo cpan
 #cpan> install Bundle::CPAN

@@ Line 42: / Line 42: @@
   <nowiki>Test::More version 0.96 required--this is only version 0.92 at /tmp/openssl/openssl-OpenSSL_1_1_1/test/../util/perl/OpenSSL/Test.pm line 13.</nowiki>
 The easiest way I found to do this was to follow these directions:<br/><br/>
-First of all, check that make and CPAN perl packet manager are there in your system:
+First of all, check that make and CPAN perl packet manager are installed:
   <nowiki>~$ yum install make cpan</nowiki>
 Then configure your perl with CPAN. Just enter cpan in the command prompt and answer yes to all interactive questions.<br/>

@@ Line 1: / Line 1: @@
 =Installing Openssl from source=
 More recently CVEs have been discovered in the latest versions of openssl available from the repos, which presents a problem for administrators since they cannot easily upgrade to a patched version.  For such cases, sometimes manually compiling openssl from source is the only temporary solution until the repositories are updated or backported.
 ==Check version==

@@ Line 18: / Line 18: @@
 Codename:	Final</nowiki>
-=Install dependencies=
+==Install dependencies==
   <nowiki>~$ sudo yum install libtool perl-core zlib-devel -y</nowiki>
-=Download and untar source=
+==Download and untar source==
   <nowiki>~$ curl -L https://github.com/openssl/openssl/archive/OpenSSL_1_1_1.tar.gz -o /tmp/openssl/OpenSSL_1_1_1.tar.gz --create-dirs
 ~$ tar -zxvf /tmp/openssl/OpenSSL_1_1_1.tar.gz -C /tmp/openssl/</nowiki>
-=Configure OpenSSL=
+==Configure OpenSSL==
   <nowiki>~$ cd /tmp/openssl/openssl-OpenSSL_1_1_1/
 ~$ ./config --prefix=/usr/local/openssl --openssldir=/usr/local/openssl shared zlib
@@ Line 32: / Line 32: @@
 ~$ sudo make install</nowiki>
-==Possible Issues==
+===Possible Issues===
 If you encounter an issue, it would be good to run <code>make test</code> in verbose mode.
   <nowiki>~$ make test V=1</nowiki>
-===Parse errors: No plan found in TAP output===
+====Parse errors: No plan found in TAP output====
 If you encounter this error, run <code>make test</code> in verbose mode as earlier described. If you see the following, then you will need to update Perl
   <nowiki>Test::More version 0.96 required--this is only version 0.92 at /tmp/openssl/openssl-OpenSSL_1_1_1/test/../util/perl/OpenSSL/Test.pm line 13.</nowiki>
@@ Line 50: / Line 50: @@
   <nowiki>#cpan> install Test::More</nowiki>
-===04-test_err.t===
+====04-test_err.t====
 It is possible that you make encounter an issue with the test: <code>04-test_err.t</code> when going through <code>make test</code>.  If you run a verbose output and get the following, it could be related to a [https://github.com/openssl/openssl/issues/6953 known issue in openssl].<br/>
 Below is how to run an individual test.
@@ Line 70: / Line 70: @@
 ...</nowiki>
-=Check Version again=
+==Check Version again==
   <nowiki>~$ openssl version
 OpenSSL 1.0.1e-fips 11 Feb 2013</nowiki>
@@ Line 80: / Line 80: @@
 ~$ sudo ln -s /usr/local/openssl/bin/openssl /usr/bin/openssl</nowiki>
-==error libssl.so.1.1: cannot open shared object file==
+===error libssl.so.1.1: cannot open shared object file===
 If you try to use openssl and get an error like this, you make need to create a openssl configuration file that tells openssl where to find the needed libraries.
   <nowiki>~$ openssl version
@@ Line 94: / Line 94: @@
 OpenSSL 1.1.1  11 Sep 2018</nowiki>
-=Check functionality=
+==Check functionality==
 Do a quick check for functionality.  Something like this should be good:
   <nowiki>~$ openssl s_client -showcerts -connect google.com:443 </dev/null 2>/dev/null</nowiki>
 If you get the SSL cert contents, it works.

@@ Line 30: / Line 30: @@
 ~$ make
 ~$ make test
-~$ sudo make install
+~$ sudo make install</nowiki>
 ==Possible Issues==

← Older revision		Revision as of 18:13, 8 October 2018
Line 93:		Line 93:
	<nowiki>~$ openssl version		<nowiki>~$ openssl version
	OpenSSL 1.1.1 11 Sep 2018</nowiki>		OpenSSL 1.1.1 11 Sep 2018</nowiki>
		+
		+	=Check functionality=
		+	Do a quick check for functionality. Something like this should be good:
		+	<nowiki>~$ openssl s_client -showcerts -connect google.com:443 </dev/null 2>/dev/null</nowiki>
		+	If you get the SSL cert contents, it works.

← Older revision		Revision as of 18:07, 8 October 2018
Line 69:		Line 69:
	return TEST_int_eq(errno, EINVAL);		return TEST_int_eq(errno, EINVAL);
	...</nowiki>		...</nowiki>
		+
		+	==Check Version again==
		+	<nowiki>~$ openssl version
		+	OpenSSL 1.0.1e-fips 11 Feb 2013</nowiki>
		+	Unfortunately it still shows the old version. For me, I simply delete the old openssl file (after making a backup) and then created a symlink to the new version.
		+	<nowiki>~$ which openssl
		+	/usr/bin/openssl
		+	~$ sudo cp /usr/bin/openssl /usr/bin/openssl.original
		+	~$ sudo rm /usr/bin/openssl
		+	~$ sudo ln -s /usr/local/openssl/bin/openssl /usr/bin/openssl</nowiki>
		+
		+	===error libssl.so.1.1: cannot open shared object file===
		+	If you try to use openssl and get an error like this, you make need to create a openssl configuration file that tells openssl where to find the needed libraries.
		+	<nowiki>~$ openssl version
		+	openssl: error while loading shared libraries: libssl.so.1.1: cannot open shared object file: No such file or directory</nowiki>
		+	In my case, my libraries were located at: <code>/usr/local/openssl/lib/</code>, so I specified that in the new config file:
		+	<nowiki>~$ sudo find / -name libssl.so.1.1
		+	/tmp/openssl/openssl-OpenSSL_1_1_1/libssl.so.1.1
		+	~$ sudo sh -c "echo '/usr/local/openssl/lib/' >> /etc/ld.so.conf.d/openssl.conf"</nowiki>
		+	Finally we need to rebuild the ldconfig cache
		+	<nowiki>~$ sudo ldconfig</nowiki>
		+	Try again:
		+	<nowiki>~$ openssl version
		+	OpenSSL 1.1.1 11 Sep 2018</nowiki>

← Older revision		Revision as of 17:31, 8 October 2018
Line 22:		Line 22:

	=Download and untar source=		=Download and untar source=
		+	<nowiki>~$ curl -L https://github.com/openssl/openssl/archive/OpenSSL_1_1_1.tar.gz -o /tmp/openssl/OpenSSL_1_1_1.tar.gz --create-dirs
		+	~$ tar -zxvf /tmp/openssl/OpenSSL_1_1_1.tar.gz -C /tmp/openssl/</nowiki>
		+
		+	=Configure OpenSSL=
		+	<nowiki>~$ cd /tmp/openssl/openssl-OpenSSL_1_1_1/
		+	~$ ./config --prefix=/usr/local/openssl --openssldir=/usr/local/openssl shared zlib
		+	~$ make
		+	~$ make test
		+	~$ sudo make install
		+
		+	==Possible Issues==
		+	If you encounter an issue, it would be good to run <code>make test</code> in verbose mode.
		+	<nowiki>~$ make test V=1</nowiki>
		+
		+	===04-test_err.t===
		+	It is possible that you make encounter an issue with the test: <code>04-test_err.t</code> when going through <code>make test</code>. If you run a verbose output and get the following, it could be related to a [https://github.com/openssl/openssl/issues/6953 known issue in openssl].<br/>
		+	Below is how to run an individual test.
		+	<nowiki>~$ make V=1 TESTS=test_err test
		+	...
		+	ERROR: (int) 'errno == EINVAL' failed @ test/errtest.c:31
		+	# [34] compared to [22]
		+	not ok 1 - preserves_system_erro</nowiki>
		+	You have (2) options in this scenario:
		+	*Ignore the error and make openssl anyway. Per the comments in the issue, it can be safely ignored.
		+	*Edit <code>./errtest.c</code> so that it calls ERR_get_error() twice:
		+	<nowiki>~$ sudo vim /tmp/openssl/openssl-OpenSSL_1_1_1/test/errtest.c
		+	...
		+	#else
		+	ERR_get_error(); <<<ADD
		+	errno = EINVAL;
		+	ERR_get_error();
		+	return TEST_int_eq(errno, EINVAL);
		+	...</nowiki>